, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0xe000000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 10:48:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100f0000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010020000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1200.423003][ T4466] binder: BINDER_SET_CONTEXT_MGR already set 10:48:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010030000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010100000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1200.481868][ T4466] binder: 4463:4466 ioctl 40046207 0 returned -16 10:48:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1200.593161][ T4485] binder: 4484 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1200.593176][ T4485] binder: 4484:4485 ioctl c018620c 20000780 returned -22 10:48:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010040000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2842, 0x0) r1 = memfd_create(&(0x7f0000000740)='#}\x00\xd3\xfc\x1e\xe4g\x1f\xba\xa0\xa4U\xe7>g\x8b\x8e\x96\xf7\xfd\x82\x9dM9\xf1\x82\x8e\xbfv^\x92\t\x13\xb7=\xb9OmIPw\xa6\xdfZ\xdb+LO\x8d&.2\x9e\xb6\xe1O\xc9i~\xfd\x18\x16\xc4rLR\x8an\x99\x04e\x01\xea\xd2\rm}:F\x14*\x8b\xb8\x88(\xb7%\xb9\xf1\x11\xd5\xb1\x16\x9f\xfbi?\xfb%i\x9f/HM\xb4@S\x00', 0x0) dup3(r1, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0xe000000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 10:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010600000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1200.777675][ T4495] binder: BINDER_SET_CONTEXT_MGR already set [ 1200.805037][ T4495] binder: 4492:4495 ioctl 40046207 0 returned -16 10:48:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x7a00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010060000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010f00000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2842, 0x0) r1 = memfd_create(&(0x7f0000000740)='#}\x00\xd3\xfc\x1e\xe4g\x1f\xba\xa0\xa4U\xe7>g\x8b\x8e\x96\xf7\xfd\x82\x9dM9\xf1\x82\x8e\xbfv^\x92\t\x13\xb7=\xb9OmIPw\xa6\xdfZ\xdb+LO\x8d&.2\x9e\xb6\xe1O\xc9i~\xfd\x18\x16\xc4rLR\x8an\x99\x04e\x01\xea\xd2\rm}:F\x14*\x8b\xb8\x88(\xb7%\xb9\xf1\x11\xd5\xb1\x16\x9f\xfbi?\xfb%i\x9f/HM\xb4@S\x00', 0x0) dup3(r1, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0xe000000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 10:48:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x8000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100a0000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000300000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x3f00, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000600000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100c0000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x1000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000200)) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000600)={'filter\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f00000016c0)=0x78) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) mlockall(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0) 10:48:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0xfdfdffff00000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000a00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x3f000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100e0000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000c00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0xfdfdffff, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100f0000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0xffffffff00000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r1, 0x40000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000200)={0x35, 0x37, 0x2, {0x0, 0x183, 0x7, r3, 0x17, 'posix_acl_accesseth0\xfe\']'}}, 0x35) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000100)=0x4) writev(r4, &(0x7f00000014c0)=[{&(0x7f0000000280)="e92c8ccdf126c60afab5c4460de987d68761b70cef9cdc4d62fca8e7a8a2adfa12bb97f02ab714046ef1fd6414f8960a13b371c25d78c216e0ffef58840b0dc3", 0x40}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="d3727e6989831f95469ba8e3e35865f2fa5d62a8b2fd76e169b749fd25c93980504d085611ecb44d2c5ff2060d289e3ca8721e56ef782c5c34619c1e6514b30aa1cbeadb9928e55c6024f6d57fbb8e177ecbbeaeb102bf5c908c86ebcdc0d0cf2bf31dea71f65aa959bef411b3521ac0383b7366423225e4752b3419b4dd73d80a6e6491e6a6c591d64e81f59e5fb75e9c261628331a353980015183eee41814edfced24c1562d1d2875b74c5c5a5789cde578139bc75bdd2bf3244e1efc83d8cc4006923c7f2cf0102dca5c5e94785bbcfb61959ded666588a22ba4d7da2ad3bb3fdc5a0a4a67ace2e5ebf0c0178eb1d5c69fe788f262", 0xf7}, {&(0x7f00000013c0)="b20d5262eb6525644318a1f40481b92ea9f2d06e5e14355e2379ca1e3044177b6bb217ce6f0829207860c1c8f5cd2fdad25361819164e91e1894592cf8b6ab31e7a03d23b45caa203e646b9d6bcda40af96ebbc86210a0e15ad0231835a72d7c9db3c66e4335bc806190a9271aaf08b3ac0ebb856852ea597dde3798b595d86bfdc73ce2f941402d0ea740000852a589c962abb3ab4fe0eca9516caea05d1c604615ede49e43db30d1c806b70529e2b315e8eba89a108304615c22746411f97784f55fa973", 0xc5}], 0x4) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000080)=0x3000) open_by_handle_at(r2, &(0x7f0000001500)=ANY=[@ANYBLOB="92000000800000edc4465f71274f991fc100bffa7e03763089b57ad23b8d79d478e3e77758377f272c25c349ba29871a5b26114a82db8f34243f3a6f3ebaec8c43edb18d2bd704a84f9a21f706fb035dd37c20669cfce4513be0a29e4a43ea4e768df087b8ffdead4528850c1a70868dce3d5328385a2e10accc329c9723d5bf84bde387a64ab0e29dbd7b0640cf3849b3"], 0x200a00) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000001600)={0x4, 0x4, 0x4}) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000015c0)={0xcc, 0xffffffff00000000}) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) sendfile(r0, r1, 0x0, 0xffe4) 10:48:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010100000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0xfffffdfd, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000e00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x208100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x401, @mcast1, 0x5bfa}, @in6={0xa, 0x4e21, 0x20, @local, 0x43}, @in6={0xa, 0x4e21, 0xffffffffffff4cb8, @mcast2, 0x3}, @in6={0xa, 0x4e24, 0xfffffffffffffff8, @ipv4={[], [], @multicast1}, 0x80}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x20, @rand_addr="8f8f32ef005c774ee6cc04fdfff91598", 0x20}], 0x9c) r2 = dup(r0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xb}, 0x14) 10:48:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000f00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010600000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x100000000000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1202.167846][ T4626] binder: BINDER_SET_CONTEXT_MGR already set 10:48:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010881b00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1202.278728][ T4626] binder: 4625:4626 ioctl 40046207 0 returned -16 10:48:50 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000040)=0x7) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x3, 0xffffffffffffff9c, 0x236018dd2822f607}) 10:48:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010f00000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x3f00000000000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x3}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) sysinfo(&(0x7f0000000000)=""/248) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000240)={'ip6gre0\x00', 0x7}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0:*\x04\x00', @ifru_flags=0x2}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000200)) lsetxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "5baff9387d1fc7fd3315b1b89d702a88aae5751c"}, 0x15, 0x3) 10:48:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000300000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1202.526137][ T4665] binder_transaction: 30 callbacks suppressed [ 1202.526155][ T4665] binder: 4664:4665 transaction failed 29201/-22, size 64-16 line 3389 10:48:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010003f00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0xfdfdffff00000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1202.625284][ T4670] binder: 4664:4670 transaction failed 29201/-22, size 64-16 line 3389 10:48:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000600000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:51 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@ipv4={[], [], @local}, 0x4e21, 0x7, 0x4e23, 0xffffffff, 0xa, 0x20, 0x80, 0x0, r1, r2}, {0x2be, 0x0, 0x5, 0x1, 0x1, 0x5, 0x0, 0x6e47}, {0x100, 0x0, 0x7ff, 0x2}, 0xffffffffffffff68, 0x6e6bbd, 0x0, 0x0, 0x1, 0x3}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x15}}, 0x4d3, 0x33}, 0xa, @in6=@rand_addr="1250ea06c19bd7a5a139e370095c2f08", 0x3503, 0x3, 0x3, 0x7, 0xa927, 0xfffffffffffffffd, 0x10001}}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) write$binfmt_aout(r4, 0x0, 0x0) 10:48:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x630b, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010004000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:51 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x80}, 'port0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x80}}) fcntl$addseals(r1, 0x409, 0x5) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0x240000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20008001}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="08022dbd7000fedbdf250200000008000100", @ANYRES32=r4, @ANYBLOB="c800020040000100240001006c625f706f72745f7374617473000000000000000000000000000000000036adba92daa34fb8c024557a275eab0000080003000b000000042d80ad0000000008000640", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400c18600004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c0004000000f808c6d0f60081000401008000000300ff7905000000"], 0xe4}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00'}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000500)=0x1, 0x4) [ 1202.924161][ T4698] binder: 4690:4698 transaction failed 29201/-22, size 64-16 line 3389 [ 1202.941815][ T4703] binder: 4702:4703 ERROR: BC_REGISTER_LOOPER called without request 10:48:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000a00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010655800000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1202.990186][ T4703] binder: 4702:4703 unknown command 0 [ 1202.993251][ T4707] binder: 4690:4707 transaction failed 29201/-22, size 64-16 line 3389 [ 1203.014363][ T4703] binder: 4702:4703 ioctl c0306201 20000780 returned -22 [ 1203.083939][T16868] binder_release_work: 28 callbacks suppressed [ 1203.083946][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1203.121785][ T4717] binder: BINDER_SET_CONTEXT_MGR already set 10:48:51 executing program 2: r0 = socket(0x8, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @remote}, 0x2, 0x0, 0x0, 0x0, 0x100000001, &(0x7f0000000040)='ip6erspan0\x00', 0x100000000, 0x200}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) [ 1203.127827][ T4717] binder: 4715:4717 ioctl 4018620d 20000780 returned -16 10:48:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000c00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x5}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x630c, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010006000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x3, @pix_mp}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$UHID_INPUT(r2, &(0x7f0000001240)={0x8, "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", 0xfffffffffffffcc3}, 0xca52362) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x40) 10:48:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000e00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1203.326156][ T4735] binder: 4731:4735 unknown command 0 [ 1203.363922][ T4735] binder: 4731:4735 ioctl c0306201 20000780 returned -22 [ 1203.375219][ T4737] binder_fixup_parent: 16 callbacks suppressed [ 1203.375229][ T4737] binder: 4732:4737 got transaction with invalid parent offset or type 10:48:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010586500000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1203.432828][ T4737] binder: 4732:4737 transaction failed 29201/-22, size 64-16 line 3389 [ 1203.447301][ T4735] binder: 4731:4735 unknown command 0 [ 1203.456473][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1203.484316][ T4750] binder: 4732:4750 got transaction with invalid parent offset or type [ 1203.489395][ T4735] binder: 4731:4735 ioctl c0306201 20000780 returned -22 10:48:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000f00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1203.529536][ T4750] binder: 4732:4750 transaction failed 29201/-22, size 64-16 line 3389 [ 1203.573718][T22747] binder: undelivered TRANSACTION_ERROR: 29201 10:48:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x630d, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010008100000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010b41500000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1203.727802][ T4764] binder: 4763:4764 unknown command 0 [ 1203.810942][ T4764] binder: 4763:4764 ioctl c0306201 20000780 returned -22 10:48:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0101b8800000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1203.867166][ T4764] binder: 4763:4764 unknown command 0 [ 1203.879454][ T4764] binder: 4763:4764 ioctl c0306201 20000780 returned -22 [ 1203.880472][ T4774] binder: 4765:4774 got transaction with invalid parent offset or type 10:48:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1203.972278][ T4774] binder: 4765:4774 transaction failed 29201/-22, size 64-16 line 3389 [ 1204.031998][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1204.035431][ T4774] binder: BINDER_SET_CONTEXT_MGR already set [ 1204.049149][ C0] net_ratelimit: 20 callbacks suppressed [ 1204.049165][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.055315][ T4787] binder_alloc: 4765: binder_alloc_buf, no vma [ 1204.060932][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1204.061046][ C0] protocol 88fb is buggy, dev hsr_slave_0 10:48:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010003f00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40046302, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000f000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010008100000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1204.067700][ T4787] binder: 4765:4787 transaction failed 29189/-3, size 64-16 line 3148 [ 1204.072983][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1204.088675][ T4774] binder: 4765:4774 ioctl 40046207 0 returned -16 [ 1204.114885][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:48:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010004000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fffff0000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1204.152109][ T4795] binder: BC_ACQUIRE_RESULT not supported [ 1204.184318][ T4795] binder: 4792:4795 ioctl c0306201 20000780 returned -22 [ 1204.289151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.295136][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1204.301167][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.307085][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:48:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:52 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xc) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '\\}bdev#\x00'}) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2f0000001800030007ff58946fa283bc8020000080040005031d856808000300080000000b00ccfa3c8b14828e71c0", 0x2f}], 0x1}, 0x0) 10:48:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40046304, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010655800000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1204.435101][ T4821] binder: 4818:4821 IncRefs 0 refcount change on invalid ref 0 ret -22 10:48:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009}) r1 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x40050, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000480)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="20000002008100002700262651d2"], 0xe) [ 1204.477454][ T4819] binder: 4816:4819 got transaction with invalid parent offset or type [ 1204.496613][ T4821] binder: 4818:4821 unknown command 0 [ 1204.504233][ T4824] binder: 4822 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1204.504246][ T4824] binder: 4822:4824 ioctl c018620c 20000780 returned -22 10:48:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000010003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1204.512379][ T4819] binder: 4816:4819 transaction failed 29201/-22, size 64-16 line 3389 [ 1204.532699][ T4821] binder: 4818:4821 ioctl c0306201 20000780 returned -22 [ 1204.548777][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1204.561935][ T4830] binder_alloc: 4816: binder_alloc_buf, no vma [ 1204.562600][ T4819] binder: BINDER_SET_CONTEXT_MGR already set [ 1204.568181][ T4830] binder: 4816:4830 transaction failed 29189/-3, size 64-16 line 3148 [ 1204.597783][ T4828] device nr0 entered promiscuous mode 10:48:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40046307, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010006000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1204.630496][ T4835] binder: 4822 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 1204.630512][ T4835] binder: 4822:4835 ioctl c018620c 20000780 returned -22 [ 1204.689109][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1204.694938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1204.725735][ T4843] binder: 4840:4843 DecRefs 0 refcount change on invalid ref 0 ret -22 10:48:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1204.747014][ T4843] binder: 4840:4843 unknown command 0 [ 1204.756457][ T4819] binder: 4816:4819 ioctl 40046207 0 returned -16 [ 1204.756916][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:48:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x10}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1204.797430][ T4843] binder: 4840:4843 ioctl c0306201 20000780 returned -22 [ 1204.900289][ T4853] binder: 4849:4853 got transaction with invalid parent offset or type [ 1205.011597][ T4851] binder: BINDER_SET_CONTEXT_MGR already set [ 1205.017777][ T4851] binder: 4849:4851 ioctl 40046207 0 returned -16 [ 1205.024489][T22747] binder: undelivered TRANSACTION_ERROR: 29201 10:48:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000020003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010586500000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1205.052386][ T4836] device nr0 entered promiscuous mode [ 1205.052518][T22747] binder: undelivered TRANSACTION_ERROR: 29189 10:48:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40086303, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x28}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1205.251663][ T4870] binder: 4865:4870 BC_FREE_BUFFER u0000000000000000 no match [ 1205.269314][ T4870] binder: 4865:4870 unknown command 0 [ 1205.277778][ T4870] binder: 4865:4870 ioctl c0306201 20000780 returned -22 [ 1205.278108][ T4871] binder: 4867:4871 got transaction with invalid parent offset or type 10:48:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000030003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1205.404551][ T4868] binder: BINDER_SET_CONTEXT_MGR already set [ 1205.419734][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1205.429927][ T4868] binder: 4867:4868 ioctl 40046207 0 returned -16 10:48:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7001) 10:48:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x38}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010008100000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x3f00, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x4008630a, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000040003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1205.601485][ T4887] binder: BC_ATTEMPT_ACQUIRE not supported [ 1205.631842][ T4887] binder: 4886:4887 ioctl c0306201 20000780 returned -22 10:48:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01015b400000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1205.648079][ T4890] binder: 4885:4890 got transaction with invalid parent offset or type 10:48:54 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x400) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000500)={0x3, [0x0, 0x0, 0x0]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f3188b070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, &(0x7f00000001c0)='n\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40400, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="2e000000b4c8ad0d1466ed9e9d0f2bcf7ff5ba9f5c5402cc0958661d836c43484255a5b19c04fb3a9b4cdfef936600000000"], &(0x7f00000000c0)=0x36) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x84, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0xfff, @local, 0x5}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0xe5, @rand_addr="f865eec692856ef54526c43d5fb5dc6d", 0x4}, @in6={0xa, 0x4e23, 0x46, @mcast1, 0x8001}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={r3, 0x80000001, 0x3000, 0x80, 0x9, 0x80, 0x1000, 0x80000000, {r4, @in={{0x2, 0x4e21, @loopback}}, 0x81, 0x1, 0x7f, 0x6, 0x7}}, &(0x7f0000000480)=0xb0) 10:48:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x1000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40086310, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1205.754395][ T4898] binder: 4885:4898 got transaction with invalid parent offset or type [ 1205.780008][ T4903] e proc: Unknown parameter 'n¨6Š›ø]Åcše!­?šteéòcÎZ%š' 10:48:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000060003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000f000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1205.826669][ T4908] binder: 4906:4908 BC_DEAD_BINDER_DONE 0000000000000000 not found 10:48:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x48}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x3f000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:54 executing program 2: setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200100, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0xf00, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0x400c4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cp\xa3\x96\fu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x807a00, 0x0) r2 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00000001c0)={0x200, 0x9b32}) [ 1205.886370][ T4908] binder: 4906:4908 unknown command 0 [ 1205.918310][ T4908] binder: 4906:4908 ioctl c0306201 20000780 returned -22 10:48:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x400c630e, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1205.999892][ T4919] binder: 4918:4919 got transaction with invalid parent offset or type 10:48:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000a0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fffff0000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1206.048420][ T4927] binder: 4918:4927 got transaction with invalid parent offset or type 10:48:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0xfdfdffff, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1206.132611][ T4935] binder: 4934:4935 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 10:48:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000c0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1206.189219][ T4935] binder: 4934:4935 unknown command 0 [ 1206.200710][ T4935] binder: 4934:4935 ioctl c0306201 20000780 returned -22 10:48:54 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, [0x1, 0xfffffe, 0x7, 0xfffffffffffffffa]}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x40003}) 10:48:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000010003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0xfffffdfd, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x400c630f, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1206.350915][ T4955] binder: BINDER_SET_CONTEXT_MGR already set 10:48:54 executing program 2: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x218400) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x101) r3 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0xfffffffffffffffc, 0x4) r4 = socket$l2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000040)={0x2, "dd603bb1fc1081fda61d925da8b7aaa9ae9da131560bfbdb0957ccafaf8b95f2", 0x3, 0x5, 0x3, 0xe0, 0x2000000, 0xa}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) getsockopt$sock_buf(r0, 0x1, 0x3f, 0x0, 0x0) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x101, 0x4) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000000c0)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) [ 1206.413127][ T4966] binder: 4965:4966 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1206.423615][ T4955] binder: 4947:4955 ioctl 40046207 0 returned -16 10:48:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000e0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x100000000000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000020003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1206.480499][ T4966] binder: 4965:4966 unknown command 0 [ 1206.531112][ T4966] binder: 4965:4966 ioctl c0306201 20000780 returned -22 10:48:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x50}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40106308, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000008300)={@remote}, &(0x7f0000008340)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008380)={0x0, @local, @multicast2}, &(0x7f00000083c0)=0xc) r2 = syz_open_dev$cec(&(0x7f0000008400)='/dev/cec#\x00', 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000008440)={'team0\x00', r1}) sendmmsg(r0, &(0x7f0000002800)=[{{&(0x7f0000000880)=@hci={0x1f, r3, 0x3}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000900)="37bb6eba5ba87aecb03e60b3da0a634384f96f1a5c5227713ede", 0x1a}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="5d820176b5c9fe9eb92a545ccd062f05f76b5b7ba404b79157d20d112bef6d2d86a2e3b275522a6f8f1e65be80f49bf6512259d843a5d304a5f3ef", 0x3b}, {&(0x7f0000001980)="86a52c261efb909d240e6332980d3c54383169ff68d2905c989d47c0af56062d3d69ea37ee297f5117c809b27a5dc9900347cf2b8b1d974b107c570d8d0acc34e1f9a90f87f099b408d7fc91601f2d285022120ff56ff26c069a85ff7b1fc9e969a5e6b135cc1ff8bf4d1efa4ca4c2cd0538ac52c32731d3c8b78ced12cf56d5ac58f55273a281599e69a4f280cd73d0506b018769edcba3fb28f1f266a41329ca906f85af9373e1648c4c751f77c6e73ce1d1ec7cf4eae7", 0xb8}, {&(0x7f0000001a40)="301c435d7b1dc5fc28a6dafb802ad8d84606d35597dde1b9c5a5e32cccac4e5e1d61a41b73addabe9665557b6ea67826e887b2dd4f4611d2dfaa6da4f0e49173f8a7fbd57cd4ad56d3865b0548c0893f8a7674928e520090aeef97bf922f8477c33fe7f1370a56830beb49a39ff5135784c880d30407b626369e9621205bf63dc7535be57b4761dbb43f271424e765f5bf9028c61307d6c278ca8ca83e4c81d4f21afda01736e05297184f8847439b23d9f5f72fda7f98618b760dace2", 0xbd}, {&(0x7f0000001b00)="4230b8bb130e7b5f9221803f4143ccbadeb40638174fdb711720846f957e74030bdbea9374ccbd9d4ce5fa5cc844096d8d91b1dbcda5e9f8d0fe39eb37f1fee6008e7a0da7bbcab31bf441a4d40400765aaca1eb73e520069a2a2ec4d035774c92a6c5557738cb1a9096421ffe967321347c16c5a7da1b7ddba676a31b91a0a5682055e9bc2d595c", 0x88}, {&(0x7f0000001bc0)="6025f926441b417badcf6aba4cbd4991df5859d4f77c2eaaf8a2c9b0829125a461be31e9afcc1f0dee203c02c2de86904e5a304ce56596f47040328d5909e814e94c90eb15a386d35081719984348c83cde7298c58e5391ee14db933fce1735b2acc4dafb46dff5752d9489fdfbb6aa9ab21e58a5bd32ffc256c436acf4fb5f65ec3aabb6f039ff948bf5adea7ebb0b9cb50be9ad948e9813a1911f8eaf908b938786c7b05642b0813e396dfcd92bbd7666363ca08e9ad5a9b45728b9a2e9d1d31aa8510f8", 0xc5}], 0x7, &(0x7f0000001d40)=[{0x28, 0x0, 0x8, "6d8c90ed8829027797cbdb737a3cab88623ada69cc"}, {0xf8, 0x29, 0x100, "1a27886588d890408f374aa02c6f1a5807a8de15c5e0e63c269efe46d876cbad776fb756615e9ff6cb9466e3f29844120930311bfe4f8342d5838375287552700d0c8f0610713a819cfbfb98283302fef5d257346d177344b651046d03768c05cdde03e3bc9e5c50252fc86c0b9092cb8d716916cf59ccad344d49e2eb7832ee5951c472f355f08e5d2fcbaacb050d48a1343c0f245303002d236aa06ee6d716babae883c35f847590203693e612c4deb3b5b35a6a71af9541f0d370b585b0f885f9416d2061cc2049c4e977e6e1441fa9fe87a3fee1dc351addd417113b4900e2670e5228"}, {0x50, 0x113, 0x45ef9333, "466fa28e621ac6723df293feac4007d73ee545b7f38e62637f86397dda2a2a249516f73ab45de578301a9f655a524a058edea33fed8df7f151"}, {0x28, 0x0, 0x6, "03024912dceb9b000d215c1448817cc4c1"}, {0x60, 0x10e, 0x400, "07802ec3832737e15cb778d63f9ed71d909578bf55c20130710fae864dc9d7b1fef4231e25384c2bbadf7b85b59c6fea246269e5457a516f76e5d0db0790daf01f42009092014311cb5ff2aa315c5467"}, {0x48, 0x11, 0x5, "bb7c738882cf23a7a5cf8c0996af06e729a46a1f69dfab073f0e98948953fd4e75ecb4e411af7c4534adae6c77b4a569e9a3"}], 0x240}, 0x8}, {{&(0x7f0000001f80)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002000)="bf343529aaf7c2d225f3138e5823c97c2bbf5d36fb4c3725ad82dca2114eca", 0x1f}, {&(0x7f0000002040)="31124211e43d8ef42c7fc352d5f9d071135eb7bd9705d75afec183f586006c600ec75d612e882b41656e3b067ae1deb75e163db8aabf4e22ea4924db594bddb5f522", 0x42}, {&(0x7f00000020c0)="af788fe6b79b1467c619a658a5455af7dfc56eaa3da03bfe27ce705686fd18764f20b54a847dc52f17c021c26e1df9af791b567d6734c8bc27f3fa5bf8505901e7fdae491001cc82e00cc6f71ade345a", 0x50}, {&(0x7f0000004f00)="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", 0x1000}, {&(0x7f0000002140)="7f89a45336ea5e22ac06a8612529a258c21a40a101df978b5d835e3d8fcb5a3f991793c3f67b91316238b6a43060faca88272198ac0e1a1a22daff3c3c65aa576ae8adcf8c40d3a393493395619349140210a720968a5d3a142299b4c51d36d8a83f8de0412b331a9f1097d0335e486b62be471df62878125488f63a", 0x7c}, {&(0x7f00000021c0)="fb5b98a288dfb8853a5840a85977c79bc12c1d9ba99117eee6b5ce5950e41628a4292fbbf230a66a92ab07449b549c28085fe2f4a87faad2", 0x38}, {&(0x7f0000002200)="1af5fb3ea6e49e0bd96a8873db38a268cefbd3daeca4bcd63cdd0b57f4e853f76f6db440806b163b8f5512c54b8a5d8f0f30175fdaa8b506e768a1dd8a8207c0f708cb2422e89323568ab341711b94201184e3769bc7379297bbe5d1a0f3a60ea4ea0ccada5121b6af46782fd105595cb3b0f7553b658b2b61da859b29fafda4321ec396ef5a60a68ff638db5dd846ac0fbbeb60aa50621ce179304814", 0x9d}, {&(0x7f00000022c0)="4bcf015bced5fcb9bacef4c1a86d4486bdc34ddcc7c3e631a3a8327744019faf953c5c423a339b08f8d5427434098be49a", 0x31}], 0x8, &(0x7f0000005f00)=[{0x1010, 0x119, 0x80000001, "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"}, {0xf8, 0x6, 0x5, "d0436040a42b45d167a30a3a0eebfb529a67d0a2567f932d0954f9f0b01f16000d9eb1ec74720b07558b4d0ac32f153597c8064d7e0f431e17eb97e3b41144725356a1c149a6f638d45aa71b7a8dce2949884d4eb3c18fdcf49b7c6ab92624b31ff382567cbc79247a0538da5b5b17e6f35e74afa6e818d8926acdacf43763435f199b912b67a3e073e9acffd90e1bbde97cc34df6c21c3daf0bbe1387f6d3f2d545322da7a466f612090af109e290bdf4c43ed79abe37238fe9cb5f4598d47e1ee3fa0fc4211eac00d14977b5d95d51765cff110ed39b76c915d1dd14b39005ee418d23"}, {0x88, 0x115, 0x9, "744a466e5dd6f11ac4fd1982bc6342b27c59c638ac0fae2665371576c2207c5acc0e6eece6bd9763e31a14952de23a7851ed5bea2b9e6d0386d37f1501a8635123fa6b0677963b11c026ece8565514df32a552503803cfe145927bb8b63031611bdf9eb392d58efd7309ccb6144e2fad7391"}, {0xa8, 0x12b, 0x401, "f2c7a176c8e56b1e6a651657fd4a71901d5140bcd9d3408bb1c34376b0ca470c4cde6e274a58bdb21e30c5a42d4312919cf1bb2a2d21022b77c464c0c65d005686a11a0d6d66812911f10b0a37b350db25deb4095fb570d23c5d8244a52cb0c99e60118186f209fecb9d463be5a324343cd3098adaa59fc74c647e413288322fb2795d6f256373992b1b96fbc77aaadfe4fd9e432df3"}], 0x1238}, 0xfff}, {{&(0x7f0000002380)=@rc={0x1f, {0x1000, 0x3a, 0x7, 0x2, 0x7f, 0x40}, 0x6}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002400)="103344687058c49732c9c6ecfc9a5b393c17abaac20049d25598e70b92213d6d5a75723d1d8616325f3fde57be1b6065171307c4ff498248db6199268451d4892a9021d2743487fd34a3b316e9d3ecc0aab76fda8712800858239ebfcb1cf1577648a7f887f53c9a62ee9fb8ce4190910dc54c3f31fb6c5c19e9406fecbcfef7c6f42e1de6ea11204908f797cae68bfb2e49cc67654e9a443a9a8d5bf1788d033d090a767b087010e339f13ce82ad37de7779d", 0xb3}, {&(0x7f00000024c0)}, {&(0x7f0000002500)="ff21ff4df7e24fd30b780638057a0774e4a704148b5a85a2350da0de58379ea423d43802641617dd524f1745c1127302e9bdca8491331f8eb9b7bf5cd1e6c9d384663a6f801b92ed1eb9825b7f2f734d91479795a2caf69b01e291e6e2cd0edda0279cdd175e5952bed40eed747da2988e45f7b9b9877582d03893b9775324a04b259cef21fe7a79ac41e9ff789a70a3c58c379487d8a8094091c935c55881683b1a4a51fb9312ac920ec5ef6744255a", 0xb0}, {&(0x7f00000025c0)="8fad6284d32ffed82ae9101b3915817546ccb49a5ec3da9a6fdf6ffd53e9effe166c939428e8494ca4d78103e7eb7fc07c3505f56045a1c9b1d7dfb8967a56672f32033fc78180bb41c314bdef52613c94a5dcf1adac1cca635b91fdff6c2a4e2150225a1337cc3f63395b01a88ff2146b95b56b77ae4044542f335c7c592c33ed723753756097f444f68ab0d3136b44bd8e8ffebdd5f49c638006229cdd0f41e00f", 0xa2}, {&(0x7f0000002680)="6b60eb0b8dafe1ecab016dfb093cf51232fdaa0b91c2b20c7ce45490650be649246bc1a342936c509ff1b87ed876f7b58c53ad280ceed879cde70a41b8f94b57e754301384839e9339f3f141c63be8dc4ea80121fa5d8a4a2f2717e4ad34cf2a583dd0c638399abe42b3eec3cc1abcfa466d1c5f401b6f5b176d3f90a731cbad6587dae4f1284a5fec107350ebf6be2449babd812bd4b5a79b01689369f5afadd02028dc32e037db3439228421897a876e7907b07e5d76ab8f0a2f7d2537eab7f9eb4ec6d0b8abe73fdc170b2047e94e4255b32a7459a509a026bcfaf691e4b54315a593ee746df70ab41eab7b76745d7fd613fdb5066e", 0xf7}], 0x5, &(0x7f0000007140)=[{0xd8, 0x0, 0x101, "8fb722bddc5d38c35e1b74707198f1859524c693b016f8558fde2b1fd2db02422f66d5e0b5e6b9a67de939983bb182b5b696560e6a754ab1f804b16c4caf7f0ed5c25de008578b5d4be66a1069b0b043f7d130dbd188940cbdd7eabee08fe4ee083a2b71cc042f4306868efe662a4543dbd229033a6da84a419d8d32d92693b265bbbb81b35c618f22ab78ef4f87527e62cc10ec24a5fb2894ffffb612f083d9ac3df1c2e55364267ca242bc950f8f21573be037d6c8cfe6a55daa8646a3f1c099968c2d04"}, {0x1010, 0x0, 0xe18a, "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"}], 0x10e8}, 0x3}], 0x3, 0x20000000) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x19f) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x203, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000680)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r4}) sendmsg$kcm(r6, &(0x7f0000000600)={0xffffffffffffffff, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="6d988d56f270003e5447de916f9a4b3e2989f42d1706e0ac30c0dd4513326242", 0x20}, {&(0x7f0000000180)="4ba202e2ddd2e8f10d86a6e2c4a7cda353e795f16e97376e705b8824f34f5d49efaa4bff2b58e705b09b3bbbf7b51a1852509730e49ab4a5bc81026f72db9e9992127f6eebe41d8582f79f792e60137fedeabad95fb4b61ed08b2190b0d21d90439b4ef9560e9145fde4bffded70e4ea2969e3f1f9f62a5e70cac0846974f77dd4d54f6820e9dceeb1aaf1301356365c5d09e25cd0d54bd178f987ad554f8da63f3cf3b6b5e65f84079695d1", 0xac}, {&(0x7f0000000240)="8e7780439428fca24cb3aab2095422c271bf548f157e59ba34633b0dcb181fdab3820f6fbff9769098a9778e5b4cb24d77f15574252e887e79f376d1be5e11ad26618890c90091b6243fcd20975cbf263011bf75ae9857da6e7be744886e3d7eb9041852b16e72c520bf0e28401ff2bda55303425008ca9ddf9f61e21c4d31e1f4a933ece31b45b2a0dd86a4468e61b68af7b22bf3bc64fc26d0ee00d972bfe377e645fdfaef962e09ae711eb316c0bef3afa45ad1b8a8fb88cc8c1765d3815f36e65131cb5d490f9e22c861804f03db582e7bd7ece403204ea170a71c6e6f7007ee818c002b9a4b463eb573dd17b8", 0xef}, {&(0x7f0000000400)="1efd7b", 0x3}, {&(0x7f0000000440)="46aa339369bdf5ee66b45b9364ef895d8d5884ff80c3cf42d93008f57e8f899354eeadc3085d168ec8507250ccb729bc804a0f55753976210f4a6cbe02c628389e85971998ae3784f19752cf14120ad8ae48fe017bf42ca2904a41bd8c0b6fa22fc87342fbdf8740994624fe909083d93d563b7088b3ff74cf29f82080fb79883f452d83223e2bb36b36d6b2b98f80c3321b3084038ae6bf37e619342a386324440f77d1e2701856e3a2fd93d7237c41423a0350427b226b2e1ae828dbccd8873b8f5554e25be36312db4496c968ef166ce3", 0xd2}, {&(0x7f0000000540)="b430ca4ee131515d24454e", 0xb}], 0x6, &(0x7f0000002ac0)=ANY=[@ANYBLOB="b8000000000000000f01000002000000dccfa4e01af70d0902196ef078e44920cd3ede2fa23d2b372e11bef75c2f3dbda3d2ccc3443bda8531020254ea7281cf5a721781ecf0a7b96c4213faee74bae8031fae322c7d5494639ea0db70b694176d2a3b4069cc6fd37e192cc98fd712f9b1970d446fe83cdec32e8b0984fa728fdf45ddd03080e3ba1a118ed6e589aebb56da7b7c971da1f9ffeed63a7cea4ab73c79640788a78db3f6de98b81af78b1231b7d388cfd58ba310100000000000000000000004000000a8eceee215370c21bf76e234bcee8863122f0e2da2964867a317ac2b2ffdebbc297f8cbe80fadb70466c9a964e91f8464ab89574d51888b6151e949e9306cfb6cdc671fe3c95247481cd156ca3d6e52c46dda411baebf413dfd4b8682083bf79cbcf7e53dada84ef471668e00e1352cf3f5c914562fc1fe6d36c8fb0052bc5892fe93297c59a116b8234ceb233811ff122d398d1efcbffe7e71900def195088a73c7cba19ced5b82e42ba0060b01da55239e1858210d96d79d16a7502daa59a4e42b760264d6a2931ec1eff80e5800e863445e94ffc2bdea23060c666f1c03a9049d83d9adac6a49713ea2f1a6a6ca024bcfda40ffc99dfd639c9a7e432f2a98c9d06c3706597d3af890be0feb1abc42b5a967e30eb7c857627d03eea35e1e50d7542beeb4e22f8e8ca2a83caf083b42f899073fbef4c9056867ec960fd6d13e74cddbd49f8983bf8dc8d7241f5738eae652c9fbe5fccd0b8eb6f84ed0c81bf5a418c0142910cf961073abdce462c6f97c1c12f97546099ed870f134b8964fe224943fec28c60efa2b6935f89f1b97a9dde0f5e6c790e9f39dd391f2f78241584ea62ccd3a0bf8a8ad93d587779a72d72f54e2c2aea5f075f1d4a3854f2bcf193452415683593ba7959573d78eea4d2b71a86fb2ddea07a59573ac6179ddb27200e5304f3cb92f00fe1df480205720225836ca012e411008e94caf5985bd14f53d8c38a6b0d248b62a2d2b72903de1c2a50e3f5473e51cabc50115b9817bfa012086dae7c7c9d2d9e539638c9d5fb4f9cc54ec498fade11d64c61e92866744b4a7ff22afcd71eba89d2082e42222088811fc9db060422e446989a91933190ee0d7d534df33f21d8d8271eab43d582b2d25b34562ab717872adbc9fdad9d01eef7808da93f451b6500b730640c6b1dd9a9bba081505b17d2418c008c9ff6fd1656f4fdf327bec046bc1b24035c9ddaf8836f3b7e6b92e1ed87c65fbf50b36143da6ada7bc9c3295388c59b5b299a2fb0f75c697a353a2400f132545780254737c14a33f354dee558ad96325e0e299ced44698b7201a3ca1161afefce61628e294e923d867ef8ac4f5338a53bb5a6013379356e45ab346a9e5cdd17d591ce9e2c5ee1c10a42a16783b6db5fa231182635e467e1bdaaa84b4f5e0f19fd2a9a009b9974f2e99f6f9f7535c07b8c43951699083814021796a6f4f45389fc6144cbad1597e34a309dd7d26d528989534ef5bc48a3eb84396fc49800a855f8e135ba9038250a1fa45db00041455f94fe31512178880489988bd571eb8f709161697ef5168768ea89e89700aecf0e42720385ab8b7394ac42e49f79321ba0111fde4d253a0f708e1f788c42f4c2842e057d1309059b9a71c02a6d16ea87e8e6d49e8841fa3b5b3bf6a619d6b78491de5949afd515d098a07c637e2f35e6b551c6224f21d7b7265f22b13e54ea9ef86748188ff11e8cbe5860ddfffb5c9d70fa2e62a79478ad4ad67b4efed3e7b41a90c436915546d5dcfed8e32bb0eae1a167401c4f5644476cd5794d985b213d572bf2acac361ef62515cdb0601e0a00c603d824e46a71cbc28f0f3c221997c71aa3003f50e5fdf99d2a78926894328eae11a112ef17c4b64267f0c69d52fb96d12fdeec85575576e9a30a826f965cb33e87fb727c9b916aa30160a7365f43f3adc2b381e20004e0526eeebcdced994960918412f19318dec187eb74bd679040c6e3e692912f807e659b3536ffb72eceb031cb076c0a899344c9b6eb8f6dce1afbe551e268220daabcab871e786b52b80121d5466ff6da03c3b06f3cba2a3a69fa01efa12ac281132591e204aec61b4a5e591ab95c6a6bf8f8782b9a2178c0f7f89a845e139ef0d2178000af4fe0164c0baac60b7e629f7ad931cdce4bd9571d3faf90dd0993bfcfb97e89335f09fb110bb88e80d5ead85c7c940e69ffb356af4c7bb9e9585d9fe0016dc379da8ef6bfacac61ae6bafd7cef3dfdbd0161f7f8230ef39c748d38fb663fd004c05eb6205840bc9df781ecc58508902a9f7a566d84f822d020b84d3b56cba98179c3aa2ddf00f077f2ef797f82a830cc68f4a3012c2b3e079df3a36f452faf7a01cce0fe649b8299132c9549a8e19f8f537410c8e53ae631c38e4929e2ced459c5d7aed4eac5d4ec0d78ea9668536941e1f173a510a83355ae1eb6a7eb016a4fea5ec35da7b09e03cd654d20191450a7e579388af7853d63db26205f66ac8a298b10c00a9eecd391ca01dda5c0e1e262a760774b81a54e465e09443382b45953bed71b00c7f05d1d00ed14ae62edc2fb79849a8f37843d11e81e46786a4ed61fe655c50d7a97aee618dd10aeac68cacb25db233014060e302f3a285a4bddcb30790f10110f970fb792d9d1aec8bdd3aa8973728b93186b866158714e16e2e3972c801b62cec27a7016c8d5096447bf6ba213401cd70f04e58652cf12522a325755ac1c8de3473c6df9193e0896c53c185030854e1161894aef888404e3d98ac688b94043b065f10efb7da4f359f8d848beba16e9b016fef30d0ec7efbd573f360fbb8509af28e9626ee0aca2c06ab9b6256462d0cce51ac715c56c337acd67c0a25865238e1335b42384c055ac011b421f67f26fc9f30afa14eadb896f7952cae85c8bf85d9ffab545cbaa806f88a725f6627ebaa0e6eb6fca29ff4608800e0de7da393f74c92fd3d78fddd500ed0779367264449723dc902007eb3127ac72bfca2640e3ebc067c5175931d5ee68b9afed0e81e30b08a5df50cdd5cc46b151099b292583471b0178e40ede391756c8839261ea0f29896010f6f0c7d520407e5c13927e3ae69e2aeaa083cfbf5050e833b84ca4409bd7e4b1fa3114a54767cafd770651de8ecdff80cbdb4d0a0c73032a40de26c43cd23512c749b8fbbf0379520b69e7f5eaa18ef1e3868d4a98ee23a72ab3bdb235ee3086561250f2d270e4ba820562c66b4e7f2df4ab0e1515195cbb34b2204b5e7545f8426cada323805ae019cd3cdd349de01873fe8144ddd8bb34bc5c029ca191f4a9d3fb739582d9d79283bac0256a3eeab8d41849185b5927f486206531c4b22c0bf9f8ef44828b16938af77c03306ab4a691fdadac13090f191f4271c1893907c5ce5b8cb38a47bb7887090f49d46826a6cd647c37b908adca8e35b85c07842de9972a874987ee75afd9586f64a6d87078ee069e733eeb0ca33837c39241f4cf5924c8de1a9c1c806243c85eb4d8ab8e768acbe0dd631a115470ea91e4f7fa5360d93d2a64ecf00a2faa5c40f486b7434cdb9c521c427f6f1c654b85bf05ee861443b299df75ca4579544740a0fa725b2a9f951ae6b80e8934eb07547427f4996eb578aff1ee9fdfe47575f6d0b04f844075e760079bfbc9199b30b7edf33391ed263aee3f9b1c0fcbef4165b2c58af46389809e33003b8ffcf6e58a8c0b8406007d414bc3e5c219ca4cec43f444f966508fba4d9b469dcd36fb7c6646f63b64c8906d861c2565d4f876ab3bcf6083ee4c9178dcfc3c326cb2db05c3af2fbfd8f0cfccab84b8c81595a5c7742c2637570578750087368f67ac213e9c068782689080da38c520b0aad7ca781aae53a9bae6b2569ecc8356cb6e70c5ac6abc7d8bdf446098268eb523ac7d956dd800f872386eb77641bab5739d91946b6a7ee7c8393da272735dc1db83afe4866c5d2fd926981371ea305dfefec6f987dc78df24555bb43a624d820b013b3ce6e3412774654a0382bb65f2c91fc39b3932a3e5624b892ee2200a154ed5838325a18e81247474b485872dbfc4397eacf49ba0f6114a75d97270a3e4f5120259acf5db8bb1faab8b5761dc427e4e7d6c37a16989f2a9bd3c5d701ca07ee60437599be3d653d8c712b163f5e09990547848dcc248040e5ed513c4f06c9b2b2eee1a77ad0818e506dde0bc9cb50bf838df524251fd68b982124d22f2a39e41cd703b29fa8e2d864bcf2fcac9193b3aa3e85a6e88423f0a29143ecf53777f0e81d2e2235844c097522f3c7fb1e235f2755d2de20a62f500fd3030644cf500f81242ef60b63fdb16b05f696414ba7376c8602c89feef772d0e06b0bf42c725ad5f870755ae213c919d7c5fd67cebcd21dddd95874ea274676fac7021737c0390c0eae6323de8dc4b259f7932b42109422b8f159667260e94fa5273391880be4def0dfb20b1e08fc02a7f2d19e11956cdd4e974f967725a7d4500bb27f3c3733de8f1eec968901e43f86ce5ba1917bb254cce74c37a13b5514d7f04ab89d2ba2a0d6654b8b642e7370e99650fbbd6f62736b3f51af5ee54dbcbc9f7aa0889f9ff3d3245a3d10b4a03ff1fe0831d6e0ae43708d504ba67144aabb1a4284075540b9b26d6a7ff011e3b465b81f1aa583b2f3e41abd3f325f045501a45d12579566219acb4335b7f637d378d98dd868b92078095ab7fe19077a1366109402e8cd421ca711a133c548e44b064d21f3007738f69dd13e69a0fb9622052a00c541259a521d650cdf50518b62124200eb308e76e0fa7b2206fe05b50a8e67bfde198a775a05b693c2f7a98f8c45850710011079bc5ce31517c651bf10dad8b2e541d00390ffb5ed9446af516e238cadbea8ffda6e1ce54395396723e4e0ebbbb3e9c3d5cb3cef2e9372f983d7f0d443d2a35c755cb04779f2d8fb557dbf38f77121482eb03c165efc58046b5b80d47452875c19a69c625ef600e68ba20a09dc78855c8a5c80d5cadcbcc1978408c4b347cb9bd306cf05399ef03107d115920715d4583691e58b858db0b0bf72330d6e28631728f416bef0630c339e69085af8a8024cc6077bbbea50d0e17c371662bd35a6ac7780925e0a3567c5fb759ef342596b015f5624c016c2b5ba70b925cd252ee8905ce024fb85a30ea0616e652886c03b400fab1fe07685f4bf60baf124a90b7540f70d6cde5672ba6a8a6fe7518933925bf6723cc24e072b8f7b86e6d840719223fde17a582ad7cb8d264c252593d57ee1fbd90c800922230e198dec8416fdc47df68ecc964590f45c3938ff2465cbee882b663c625297fbd4fdfd7080c709168e257d578bbcc6220fd8bb673353a099bb3a98c57908d7f7e526127065ab7de437a15733dd1d6c0811e67f84438d40637e4ca97c0a909dcd63b1e167769db48536dba1c1372ae4730e6d6c01adbdf6b7f31b0c2870fc1117bc638057008cdf98b0903694dc0780d2259c374158e6c48af75629fe0cce0a475b8a613dae0de7ed1e054360d1ff4911ba0f726d72ef8cc45eb1e7bb78213da94683da37e2f0ff896bb808f5d7ee8f9d7ed2d6db953791d8c76dae2f1e121bcbaeb590bd195499aadb4294436b3bfef2c1b180b0f79d81a73c761b4677378b2946ef488e2600d453f5d2f6542e86f737d808a7e5ac5230884bd80c3550593d4a83e88ece064476ec68447859417a18e9aaf5d8d6237618e92a2f2523452ff375737e0c3814f1fc906429477e191e423f2bda06fe2c199541b9f2ee36526080559be9d743c826209ce8cafcf0f60d799912e1712a5ef7bf0ca3f717c8103382e8de69ee4085f03542c1a9a76e77670d07936e7d9a3389023c130d111c5fb8c44279a994fbf4a0a2506dfe253f27abbe4b5f2c9ff334c3d24023bffacef65fbff9c12c327fcb9b5293fd42d8a6abdb3d7137af8c25309b033c4f6333c4d028bf7119b5f93998dade3e40480ffc295379e1b7144493ff72bfab0a2167545a2de1a9637ad75de6167611f41cab06cc2a363b9aa5546114f64c146390e2e6dab48bb69892f10100000000000001901000000000000a9bd313a7d4e3dfe04739d6c2d2da714aa758a5a86531eca116a5183cd70ba97d5e1ceb709bbfa331dbfa60de9c4d35c7773b414058a9c68b0519de033848cf847bf364ec9ec4e90bb99404b8c84f075f438df95e97105201e1680e4d22215e9374e65592c199d121943689f08d5a7f20775f5ee22da5ded345b16d49dd6a30fe29cbc0d628e93dd8894514109d177a2fcfc569220d30941690e949192bc58131f9dac2ce673d3de02dc24345aef97b4992ccf2e9e4c8069cb20023b3cc76080fcc510ae51d40f752105d65c5947a360cba23aac56c1841e2a1e75fdda04d824943933faba8d5d85a3d72ead4d3ebc8233809c38cbf64dd3752047fb7cc7c96bac56a51fa897f6e9ef420809eef2d6862eca79eb25d65a0e934d0d4a215671ddc76964b6769e5f2d44e984c44b2e24220a4d946226fd44dd942b05e66b19291544e7e631948f09f72ed35a219eb348e2fddb94de8c51d82ef4030706cfd40a848d95c77a4446fe675780a41287c4754a3b3786bd900cdd1e61380d6fe19c4c8883eb98e8acc24a3faecdaf3273ccba0835eba215cc0002cf60ea9e1fceb8a08603d495e8c037e5af30e5ff5fd10338da1658cc3a128557db3d0630514ff5657f2a09fc4864852523a15c43c36b0ed9257c880a3749ea23cfbf2b2adc3c3c9a96db8787ef9f20c1b86b68437739dab0c8899039d00d7eb55a3f58006d817ac82740e757b0b2c3b9a1dd25540cf2b004166e384db6ba072a90769d26ec0e6ff2991b6668955d69209a05bf48beed38ccb77fa583fbee23133e8fac4aa40516df91e4aeb14d0d7b43552df9ec4b20794796c18ca350bac42cd2e2ab4c72153301f19f2e15112dc94fdda19270353476e8b4fa17f04dce63110fd1a9047183415c4a2b09ee8f788b3ffadd0846f733b4f9c4fc37009e72492bfb904baee3b600c402c86c396c021a90be69a0352aa4be2e94bfe2697e5ac65804c5b1c9d181e6ec70287cb1f853af98701fa6a53926f7e76df420f81f23c172597fb830e19a0f1dbbc238966dc5dcc8ab63106d34adb3de9792311aa7c3a8612bc7fff9d53491edd06536bc1f43e05cb836648d5b5c192e62540f15f5fc322d85c1df6191d4523101dc7ee69f8aca7c4b954cf98033b2cfbd3c5513bf57e2884ab87bbc22c2c55c60f1b3a03e894ba9b615be5998e3c299131281e67c445b4fb97675f46913e9e5f4ec67ac4be8b1ad1c15eab53a65ecb92fbc191a3ae887d8e22bafdd918ca654af1e5ecd66eb2d9155f9566d509fa7636698c06c158dbc68d426e2efb1105cca3eace369952e7c4059cfeb6c4c97fee2c2dd5c4ac6bedb4985c170a705feae43bb2a865daec5582eb08569c45096f63028a7af39420530cef9a92c1586d6737f6b598d08a5e26e0120262eeaa4ae551753a6654d636dc8ac289602303cec4d3ae16c271adbdea8589110c65ecad86d6b04283170cea59bbc9abe67b5dc50c298596c50587a7a2156cee105a3cc9fad78ad8ae6b62f89ae9a3c77c02836bcce48ab45c345b2df199af3b2fbf3f6fc738ee6f12b84adbd3ea6e80f162bdb12abead9fa69329840fefc2cdfca81e7191700542c3a1d6753124124b93cd6c3a95785d49624af77a30821dda2736dcaca585dd355a15abb8aff6b210244fb73667f384814490d7991d11295cd122e0f2b58f38bcb4f34245a5b4e22041b5d827f98ef82f1f26d77900db8ea1831a6db7ce7633dd21bd32b11d76800598ada4792f3415c31963fb2cd452bab02ef23483bcf377ca3592b7bee0d69916bd412a0a47357e0bfdfd1507efd8615c9cb2cd4fa1ae2f9c4d5a674a136ad1d43da98e0b1c5de9480d92ac37e3d0bdb4163a0dcd4382f8c7964707b3ced7ad58612e73ddbbd683be520537b0b525afe4de5f4d6e99b66dbdc5f6a085b404461f2acd12787ea43f31cad4bc78e19f7dd4c9c7187f4410e3ee8105f2ecb6d83bd0c405b55394b18dcd312daa831d05ed770b3bd0a767915c12aa9e4065a2b53da585e96309027b94f87f6e0e30733b580df5bdcde36ff924bcafac651d4e08a880bc17c41f9114ce0f3779a1cd50877640dba56c36f38c8ab9b0b2d55ff68f0e49af5c33282d097819c9f81bf58a32c6156c6da7aeef559d91c9dabcc6e3519518ef2a134a5050de3600cee5af82f67397dd820a99f8735343c09a68f2bc783488671d12b823ed50d7f22846bcdcfe73386072b2fd6e1ed8543ba1b2ff34d37b40856ea764f54a38919820a52e93d0da00470b79592f3100ea03384c044b87bf0007d21e124237dd202f73a48b1b3d255285177a995f3ee6b258d7bf0634ab4b5440279c24a8c9b7a8f408bda4f223b65c3af0cfb02b2f8a2c289426356cb0cd59799e97ad8bf245a84705bc320f51f05d64b5593a41e0daa7a0ba39d22ad1cc5960a36ef8a20d98cb4fc930750d00d6a528ca99658f965781b10deee2f172c31a1e37d001af40d5ed04a83d15e2146935808bf8d8bdfa3ed22f65a0cbec4c42fa5513a41fa273e6e2329173d9e81cbe664bc02cc8c9991d833943148b547526c54db5ba0428f092627a981369de4b29b7a2c4c4d12e57ba728524d964235d040bd614ebd22173d1e1b826ce8751ff93aa42b9f254687d047e244fef95f53cf797516115c08ead3cfee718302becbcd44bc2d511cfc061c42a7a96bdc7f5fd0162fc031286e73876f455050fa2d6e26f519e5de4dfa7a1815dfffbcc7c7caf8c277aaede8b86bedddc316054db6b0c959bb8c6fd3153f9a01baef78b704645711b2a773dc7de7122957c5d331b71a8a696108922b31985fc29d142a5f74d38e19aaaee2e3e171d5388bf5b910be8dee9de45eeef4792fb63808b551ddfdb1fc9ef1ee3950b4452f2ae302da61407445a38a823070408c720869ea7beb1e2909d6a8e0fefbddd8798450cdb107512cab5f26ab9ecad90a3ba43255ff819e8ec84c903d5fce1daa661847a912a6396f97260797dc3db37bf15abcc74fdb1e8e70872c455f452a536b3054d19ef628c68c4c5295c0b1e33e1f0fd99501afc9411353b68d58d45ad2139c642b1538ac6792571d5aef070a5cf8ca2a607f444765232f4c035c2ea19e033297e951a605d56bfc332f3f80dbc8798e1147d7490531a0cad6dc6d94f693119df8f538296ad7b97f62295109d06c5338b6d3b6367c6bcfcf6cdacaddb7cc13ee0328ef7a81b03851c9b7a9e495da1398c2cd590fdcca638636ced8c7b39e8a3ba8647871d21cb7d3ea4781dd6fc2efa93686a0fd0f5c39dcaec172ba901a192705fcf1cbbc2b935c63517757f4435194952fbbe01e7d5e4c43a4abb8bfe7690cefb5265da2e521215550cbebaec197890fa1b5d06afe9e3d7841d8d665f1e91583d304ed5cea75d4442e12ecdebc2c9ec5851a543d7b32e127ad360240ec6546b95bcb9e937cdc8d8003da6bbad67a3cefb1c1586e7ca74fb96c18111f487b144d9649f563419fc75bec28a2b672e6e57796e3b1f9d44ee013448b486aaf9868ff95499614d3765cf728f96a9a13d6b94664d2b8883bede93f9352c07c57dc988807cee3a4a361e9b54a28c557d0e1f2eebfefb7457972b0fbb69f614f83b7d7afc71b0fc0a6231e12a6a1ee064da0452a211b7dd6292d697b5e24ffc581eb476f09b8571799c69ae441eca353efdcb63c2f5c659f4a453d0b453459c8ca7cdc8a4e3f796d0d1a43aa319825e8761f71c14193230f9e84130f8ea08030deec7a8ce903f545b0a129c0a9b11963d8fa53ffffbf221666c11eb54229efc457407c6c778c6b81e9da598cc5780f0c7b91979cb9dc6a2d5cc96dcbdfd2f71521eec1e60158fbc706a3aee695aacb8d10a237dc9c726884d3c8cb0dbb3153f621a33ab7168d0c788621a176d3f56e8789be72fd014413d728272cea4ffc533caeb03ae55b9c7e1f1b930b442f9b5d1c752206f9084c1649c8d2adec1179c9645a0379dc4065f48cb076a5df3b367b2ac911c91e861121416170fafb803a988217ea993a624b865590a89093cc67f46c18b9a21b253f34c3e7693275af1ea46f66dedfde2baadd16d79b0ef4b42aca33dc633ea9e35e1c44d194511183f84bc372b1c8d539b2653fc6716e5a916b0f42208822012ce712527e8c50ea326342337c00ff50f0ca7b4ea9c325702d991e3315ecd6ac2857abe9df361efd387e38f77687814dc2167f4f4e7d1ebd96ca80b9acaafd629cd2c2f966431cf0bf6c0fbd7726260be089cf53f9a80cf91fa7100f23c068bfd16acb87ab67494eacd5365becd078cdc9a0d890b4b6a72fc4bbb729b6ea9feca7b30afbc66a4c775c41baa5978a6f9d43fdaf57e8902d9a15b42f3b4a407a10bff15fc9db9189ea6a84a12ac332105e681c26f4b8be6723f4ead5ac58d030fd0d1ad4c24279e824e68de44b48b141aaea09e4d724d01e7d9e7475755158cc9fcde3f057898897c593167a4debb31206c5f21ec268efa7f8b371ff9864b8dbe9f1b7898f6d30eccd7e9130912e67f72bb984ffac19197191d7d5b6320f323d2fac566ac594e7ce6aa58661e9aff27624eba1c5b90322e150955d66ae17e848c2e0e5261ed3628dac5e16fa5fa52737e6669217729b9003c5a1d8cfe8b8ca2525ca039f3515175d4f230f6b6850a02de04c3debb46204f40fc7bce2b1ec846c31aa33cd345921818701bcd0d81777d1a144a27b109f7451e22128cfcb48cf660c0fac818320b39de8cc68aa51de84f8909dcb69e5ea7c075de0d90b2be9352f12a27cf44e1be5a8b7204827845c92b58c998b39ef554dbd18bf43a9596e4fab4af60052acaad2bd30f768d8d078cb350c04c26fa0cd2e68d3fc0f41445eb4d29918e6347f3362ea27334bf41682fdf33e35770c1938fdc3b93472fd494bd0831d6aed47e6154b8f20af7b451c10ef1069da896d4261a3db83956fb93e4cee9c598208e6964d55336449e021d95fdfbd82754525ec8f42bd1e186e581be7c72864ce78e495ffeb7b3529e40c4be9b71a16f0455249f93a888ae841428154264c5538f726caea81012d8dffb359396ed12f4829831cb277df185182757d8314da6d73079be254bb65104e31e547f16eda4795de007a2b2dadbc8fdc78ce124744c9fa6853154d34cbb4321634f8fb6103f9b27b0ca905c3146c72d771dd6ffc7f5c3fa487ff59a2c51a5a7ae941e3deecef47a6583a3cd76cd2e426a42210f2dbf5fe648c4b315719d3579d3904766f133ab63edbec3e9a85df1209f84ce7b3fa005809394f932021a94618be46fb8d7b6d264fc56cb734c92d9525f09675dd8ede4ccae0f6caf8686f9910bda5f15ef4614ca1cb4e86f54ee7d6487985913bc9ae3afed5921d7c0f3baf49ff8683dff2e1e8cd24fdaf707d520be0161c7e26e7c66d5a0be630c7a52d114a2af173cb4b38f7feb12aeccbd1968af4aeca418130b1146e47577e40243d2f4ce11aa5bafb40ff8a7a3772588106e91e1a9d121794a54a35141592897cd0cbfb45c96e3f279007e61db6194243927015c7217c6893ad2d7fb065ca864a162843af8955409dc4ffbbb52674aa84e642294631104aeafb9bc82978eedac0393a8f7882a7098278c1684a77c739b4f9ac63c8223aa681b6b7aa8df6d1e652a627398d55df9c40938c92f88f9c5139e1edf0722d95a6d7726e79fb6f3e7464c0956ef56862aaea93a0bb6bae2533cb647edb541b5ac4f70d478121feb0711c8132ca5efc82847afe2646180d90e13644aead924a5706fc5dcf30b43a493e912cce50fd270b8e8fe000000000000000080100001f0000008877df0f25ce40dd94ff8020301a77abcd0daafe04a6f73a5bd7993c5e3cab8868c9e1cd1ecab9e4207922ee8eaaeaf56a03552c2d84eb9c7f0d4f1b1465120d7d9af0ba9460882db107371b6fd092236e018f4e97dbd6b09c62dcaa9f9c999dc1339e30ad10cb9b9d09e2d9bbd318287137a0eb9180da9c4355a59b965016b35d8bcaebd37de1147d97ab92ede710e05bc4843d9f3431c35492bae652c47d9817fc515ef9803713925231626b945cd632560b81951e18c7b33847ab4648e73991065a3d9fe8f72d069d050000000000c00000000000000019010000050000004b226d5f9936502f8b2b1645af7c85d3086095ab2eb28b7d5d6df38ed7d37423ac949c6b6e136c2752bee77204996cdb8b31d16765f17ce44a5a707ad5d471726f0b2b1bf4ce070662f0315f4973ad3ea5cdcd7854a9770e86ab0feba8d4ae0797dde2cfeaa040998a0111e8293cf39bdff683b0d5f44826af3dfff1653bf38c5e39589dd308b1f9c540eeaf82c000ac4a1d071ba201e7cee97bb866ed9a71ac9b45d2106163e0a4f232c6834e00000010000000000000000e010000ffffffff78000000000000000c01000000000000feca96daee255dfcd802d82d18eaccb4e1281f1904fd7b082d226c3cee22f83bed3a07fdb648adbda20842a0f57d31e7423fa21208e481d760bc390fddb6605041a4ced6ba38b286cbdb1a710d23b558d8193f45ebdc77681880f5e2f010116500ef32fc00000000c000000000000000110000000700000045e39ca804dae0d3d302964727491dee2d0d97f6dff69a3156fabf9e76cb3ecde1b8f39009dc8c11503ad1c1edb3e4c472d484bdda5d5a8aed26bb19f666f1a4327e374b182b0d7ccc0eea87281d76b9fd44767c620cbc1f2fe5f138b4de008b093369f239d8be032229a5934e98ae8766f8e7a6f4a157013e935751449a330c642a90bbbff5feef0ecb995c351bb07cb97b7935fc00f1f4877e6fc9f56c865f520408150601b149bfb8816bd9922700a19719c960c09de9ffee93d9f61de1b88a61d62edaa92e327657cd2b98e53da959fa3435eb8724e25b9875cdd94f61c3a14893e2905f5711415579ac6ad42698b05a108014d154db7048000000"], 0x23c0}, 0x4000000) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000040)={0x2c13, 0x2, 0x0, 0x3, 0x1c7f, 0x100, 0x3, 0x4, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYBLOB="81000400160006003fe266616d9c68db1d0e4512dffc30ebbf205f53cb549aed88511022e4da4324ca73876980d0acef9b01f76d6b86bf40a37992e8ac10b90001cb2e2bebbdc76abf85db4726824f345eeabfeb90b5a637b9d84791b15552"], 0x10) recvmsg(r4, &(0x7f0000000700)={0x0, 0x191, 0x0, 0x30a, 0x0, 0x2}, 0x2000) syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0x7, 0x80000) 10:48:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x3f00000000000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000030003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x60}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1206.788467][ T4995] binder: 4993:4995 BC_INCREFS_DONE u0000000000000000 no match 10:48:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000100003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1206.867263][ T4995] binder: 4993:4995 unknown command 0 10:48:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x77, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd9c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f260819e24134091ec15ef28188179"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000007c0)=0x8) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x204300) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000280)={0x3, 0x0, [0x0, 0x0, 0x0]}) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x82, 0x0) getpeername$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), 0x4) write$binfmt_misc(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x240, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f00000001c0), 0x0}, 0x18) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1206.909768][ T4995] binder: 4993:4995 ioctl c0306201 20000780 returned -22 10:48:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000040003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1206.952230][ T5006] binder: BINDER_SET_CONTEXT_MGR already set [ 1206.958283][ T5006] binder: 5003:5006 ioctl 40046207 0 returned -16 10:48:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0xfdfdffff00000000, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40106309, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000003f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000060003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x68}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x630b, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1207.192395][ T5030] binder: 5029:5030 BC_ACQUIRE_DONE u0000000000000000 no match 10:48:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000a0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1207.240381][ T5030] binder: 5029:5030 unknown command 0 10:48:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000400003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1207.294620][ T5030] binder: 5029:5030 ioctl c0306201 20000780 returned -22 [ 1207.307527][ T5039] binder: 5038:5039 ERROR: BC_REGISTER_LOOPER called without request 10:48:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000c0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1207.379702][ T5039] binder: 5038:5039 unknown command 0 [ 1207.409176][ T5039] binder: 5038:5039 ioctl c0306201 20000780 returned -22 [ 1207.474329][ T5049] binder: 5038:5049 ERROR: BC_REGISTER_LOOPER called without request [ 1207.523098][ T5049] binder: 5038:5049 unknown command 0 [ 1207.536911][ T5049] binder: 5038:5049 ioctl c0306201 20000780 returned -22 10:48:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000600003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000e0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x630c, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40406301, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x77, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd9c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f260819e24134091ec15ef28188179"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000007c0)=0x8) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x204300) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000280)={0x3, 0x0, [0x0, 0x0, 0x0]}) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x82, 0x0) getpeername$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), 0x4) write$binfmt_misc(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x240, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f00000001c0), 0x0}, 0x18) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 1207.818813][ T5064] binder: 5063:5064 unknown command 0 [ 1207.835905][ T5067] binder: 5066:5067 got reply transaction with no transaction stack [ 1207.844237][ T5064] binder: 5063:5064 ioctl c0306201 20000780 returned -22 [ 1207.846296][ T5070] binder: 5063:5070 unknown command 0 10:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1207.864995][ T5069] binder_transaction: 16 callbacks suppressed [ 1207.865013][ T5069] binder: 5068:5069 transaction failed 29201/-22, size 64-16 line 3389 [ 1207.897321][ T5070] binder: 5063:5070 ioctl c0306201 20000780 returned -22 [ 1207.901934][ T5067] binder: 5066:5067 transaction failed 29201/-71, size 64-8 line 2900 10:48:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000058650003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1207.921349][ T5074] binder: BINDER_SET_CONTEXT_MGR already set [ 1207.967166][ T5074] binder: 5068:5074 ioctl 40046207 0 returned -16 10:48:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x630d, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x74}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000810003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000100003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1208.128863][ T5088] binder: 5086:5088 got reply transaction with no transaction stack [ 1208.129723][ T5091] binder: 5087:5091 unknown command 0 [ 1208.205569][ T5091] binder: 5087:5091 ioctl c0306201 20000780 returned -22 [ 1208.210026][ T5093] binder: 5092:5093 transaction failed 29201/-22, size 64-16 line 3389 [ 1208.229773][ T5088] binder: 5086:5088 transaction failed 29201/-71, size 64-8 line 2900 [ 1208.238769][ T5099] binder: 5087:5099 unknown command 0 10:48:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000001b880003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:56 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000003f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1208.255638][T16861] binder_release_work: 15 callbacks suppressed [ 1208.255645][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1208.281277][ T5099] binder: 5087:5099 ioctl c0306201 20000780 returned -22 10:48:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40046302, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1208.352491][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1208.364192][ T5093] binder: BINDER_SET_CONTEXT_MGR already set [ 1208.437781][ T5107] binder: 5092:5107 transaction failed 29189/-22, size 64-16 line 2995 [ 1208.470687][ T5114] binder: BC_ACQUIRE_RESULT not supported [ 1208.491507][ T5113] binder: 5109:5113 got transaction to invalid handle [ 1208.498324][ T5114] binder: 5112:5114 ioctl c0306201 20000780 returned -22 [ 1208.502340][ T5116] binder: BC_ACQUIRE_RESULT not supported [ 1208.519544][ T5093] binder: 5092:5093 ioctl 40046207 0 returned -16 [ 1208.526536][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1208.549320][ T5113] binder: 5109:5113 transaction failed 29201/-22, size 64-8 line 2995 [ 1208.551592][ T5116] binder: 5112:5116 ioctl c0306201 20000780 returned -22 [ 1208.578525][T16861] binder: undelivered TRANSACTION_ERROR: 29201 10:48:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x77, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd9c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f260819e24134091ec15ef28188179"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000007c0)=0x8) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x204300) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000280)={0x3, 0x0, [0x0, 0x0, 0x0]}) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x82, 0x0) getpeername$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), 0x4) write$binfmt_misc(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x240, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f00000001c0), 0x0}, 0x18) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 10:48:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010ffffa8880003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000400003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40046304, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1208.761385][ T5125] binder_fixup_parent: 8 callbacks suppressed [ 1208.761395][ T5125] binder: 5124:5125 got transaction with invalid parent offset or type [ 1208.783585][ T5129] binder: 5128:5129 unknown command 0 [ 1208.804212][ T5129] binder: 5128:5129 ioctl c0306201 20000780 returned -22 10:48:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010ffffff9e0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000600003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1208.816588][ T5123] binder: 5122:5123 got transaction to invalid handle [ 1208.826297][ T5125] binder: 5124:5125 transaction failed 29201/-22, size 64-16 line 3389 [ 1208.843686][ T5123] binder: 5122:5123 transaction failed 29201/-22, size 64-8 line 2995 [ 1208.868250][ T5134] binder: 5128:5134 unknown command 0 [ 1208.877357][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1208.894299][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1208.901266][ T5142] binder: 5124:5142 got transaction with invalid parent offset or type [ 1208.911574][ T5134] binder: 5128:5134 ioctl c0306201 20000780 returned -22 [ 1208.925480][ T5142] binder: 5124:5142 transaction failed 29201/-22, size 64-16 line 3389 10:48:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40046307, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010ffffffc30003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000058650003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1208.967934][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1209.067187][ T5150] binder: 5149:5150 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 1209.128117][ T5157] binder: 5156:5157 got transaction to invalid handle [ 1209.134057][ T5150] binder: 5149:5150 unknown command 0 [ 1209.160891][ T5157] binder: 5156:5157 transaction failed 29201/-22, size 64-8 line 2995 [ 1209.168292][ T5150] binder: 5149:5150 ioctl c0306201 20000780 returned -22 [ 1209.179913][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1209.194323][ T5159] binder: 5149:5159 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 1209.213711][ T5157] binder: 5156:5157 got transaction to invalid handle [ 1209.220517][ T5159] binder: 5149:5159 unknown command 0 [ 1209.220537][ T5159] binder: 5149:5159 ioctl c0306201 20000780 returned -22 [ 1209.258733][T22747] binder: undelivered TRANSACTION_ERROR: 29201 10:48:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x77, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @local}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd9c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f260819e24134091ec15ef28188179"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000007c0)=0x8) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x204300) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000280)={0x3, 0x0, [0x0, 0x0, 0x0]}) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x82, 0x0) getpeername$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000000c0), 0x4) write$binfmt_misc(r1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x240, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f00000001c0), 0x0}, 0x18) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 10:48:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x300}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000810003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fffffff00003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40086303, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1209.681266][ T5174] binder: 5172:5174 got transaction to invalid handle [ 1209.693783][ T5170] binder: 5166:5170 BC_FREE_BUFFER u0000000000000000 no match [ 1209.706693][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1209.716266][ T5176] binder: 5164:5176 got transaction with invalid parent offset or type 10:48:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fffffffc0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010ffffa8880003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1209.727462][ T5170] binder: 5166:5170 unknown command 0 [ 1209.737979][ T5170] binder: 5166:5170 ioctl c0306201 20000780 returned -22 [ 1209.760366][ T5178] binder: 5164:5178 got transaction with invalid parent offset or type [ 1209.803872][ T5183] binder: 5166:5183 BC_FREE_BUFFER u0000000000000000 no match 10:48:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x500}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1209.854275][ T5183] binder: 5166:5183 unknown command 0 [ 1209.861305][ T5187] binder: 5186:5187 got transaction to invalid handle [ 1209.891304][ T5183] binder: 5166:5183 ioctl c0306201 20000780 returned -22 10:48:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fffffffe0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x4008630a, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1209.952026][ T5193] binder: 5192:5193 got transaction with invalid parent offset or type [ 1210.037499][ T5202] binder_alloc: 5192: binder_alloc_buf, no vma [ 1210.037712][ T5193] binder: BINDER_SET_CONTEXT_MGR already set [ 1210.066981][ T5203] binder: BC_ATTEMPT_ACQUIRE not supported [ 1210.073273][ T5203] binder: 5201:5203 ioctl c0306201 20000780 returned -22 [ 1210.081834][ T5193] binder: 5192:5193 ioctl 40046207 0 returned -16 [ 1210.108636][ T5205] binder: BC_ATTEMPT_ACQUIRE not supported [ 1210.118734][ T5205] binder: 5201:5205 ioctl c0306201 20000780 returned -22 [ 1210.289176][ C0] net_ratelimit: 20 callbacks suppressed [ 1210.289186][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.300833][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.306693][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.312527][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:48:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'nr0\x01\x00', 0x801}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x214480, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = pkey_alloc(0x0, 0x3) pkey_free(r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000040)) close(r0) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) socket$unix(0x1, 0x7, 0x0) 10:48:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010ffffff9e0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x600}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01088a8ffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40086310, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1210.529151][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.535132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.541212][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.547108][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.558194][ T5217] binder: 5212:5217 BC_DEAD_BINDER_DONE 0000000000000000 not found 10:48:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1210.575909][ T5215] binder: 5214:5215 got transaction with invalid parent offset or type [ 1210.606429][ T5217] binder: 5212:5217 unknown command 0 10:48:58 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000015b40003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000f0ffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1210.630229][ T5223] binder: 5214:5223 got transaction with invalid parent offset or type [ 1210.638037][ T5217] binder: 5212:5217 ioctl c0306201 20000780 returned -22 [ 1210.681607][ T7891] binder: release 5225:5226 transaction 5276 out, still active [ 1210.709169][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1210.729517][ T5231] binder: 5212:5231 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1210.748306][ T7891] binder: release 5225:5226 transaction 5277 out, still active 10:48:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x700}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:59 executing program 2: getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, @perf_bp={0x0}}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x40000) r2 = dup(r0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000440)={0xfffffffffffffd66}, 0x45e) write$P9_RLERRORu(r1, &(0x7f0000000040)={0x35, 0x7, 0x1, {{0x28, '(cpuset,\x87-.ppp1md5sum#ppp1vmnet0userself'}, 0x4}}, 0x35) [ 1210.777997][ T5231] binder: 5212:5231 unknown command 0 [ 1210.781016][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:48:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010ffffffc30003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1210.825603][ T7891] binder: send failed reply for transaction 5276, target dead 10:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0109effffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1210.877932][ T5231] binder: 5212:5231 ioctl c0306201 20000780 returned -22 [ 1210.890694][ T7891] binder: send failed reply for transaction 5277, target dead [ 1210.914676][ T5240] binder: 5238:5240 got transaction with invalid parent offset or type 10:48:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fffffff00003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1210.929153][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1210.935018][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1210.961492][ T5250] binder: 5238:5250 got transaction with invalid parent offset or type 10:48:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x400c630e, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:59 executing program 2: socket$inet(0x2, 0x100000003, 0x9) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x14, 0x100007, 0x2, 0x0, {0x2, 0xf0ffff, 0x600}, [@typed={0x34, 0x0, @binary="582f45cff97465821b0965512fe4fa59a835ee66e0000002fd3953ffee03d79dc442c6bb0c00000055a7374efe"}]}, 0x48}}, 0x0) r1 = geteuid() r2 = getpid() sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f00000013c0)={&(0x7f0000002980)=ANY=[@ANYBLOB="041400003a00200b2dbd7000fcdbdf251d000000547d421870484ca4bfe9ee90b98dc6ebb2c35016d45c62e5439ca60726f053b8cc173fd60e8f92a3fb505fcbff70dbcc63d1ea4da1ebacf921bd69417158f9b4bbc24b3d284528fb55c752208cffe66ab2338ed7b6e75f807afa024ecf20e98f87ce7a1743490e1b6f7b9d8fde37232ec3b07ccb72b6cc4b4bdef80cadec927e970685ed27f590ed6be584117f001715c8461b6f623c596ded86161494080088c0", @ANYRES32=r1, @ANYBLOB="140050000000000000000000000000000000000008006c00", @ANYRES32=r2, @ANYBLOB="08003400000000009b0deae1fbf88c12a9f5ec42276a7acd06b0650bc1488f89ec86e5f5d2c3f5f5c64da6b9abe00807e24def950dbdae17463a38b86f5694c016cddd9daac44877b72eeccd47b371ba904db96905cd1f4bcb2590dc6f26bda24ce2c51ca04bfab7e300d03f07690166fd301c156d6f9f270e8b796b0518f9b5a989c855c2facedab4037c704e31960d178b4cc29cdd4b811a9dbfbba2f5cda3b19e03d06b0016863d07cea01e6f50c72cd6e46c1769885b5eb2dade041d829abb7eaf35bd5e9b558d8eb50a1ae117e81aeccc31b9dcb87dbb1ca9e38ce9921cab9fc7973f1fd2f3e4ce7e7f3a5bee22b8a91a86c8ee673c34a3e77b45b893099b9509bf9713414b8a21b4f503c4b1c45aecd42290af708f94c92a78f6f775d207a0b1302bff93b9fd3786150edc0bd7254ebfb9f778234ac84ce291c6f8764858be673ad0450e61d4715e29db1908b746646d5fa43bc20b2ed8702d85ec2bfab9020bc9bf996785d9af4b6a3436ffae493ecc0becf90ddb9288f151ae5f2eddb7ebcccd7568fbbea5c0a05b4d186b965731bff79f23777522eac5e3a38c98ab6cde2515ed1f87a165a870146fed1e0decc27f5ec538e28fc84a7be8982faa40aeb157b4792dfe911d69046eb23d0d7345fad60889b759ea010178a2ba4649fc25c6992b9847736b21b64a6f4f4362b1d69e3e30ac768ce8488fdbf2f4a7a5d10f16b5594df739ae0ed4ab297a7c0855dc73aa2358605267d06466000b324773eb37256d9e11b0a7af693831adc1cd88ed9a445bce3920164cc8dad278b9e29500c055efe38e396089281d13db36097a253d4d989b50ac8f48c403a800cf0b5a9de1715740a0344f1dd7cd5d6fad56a6c8c0b270d581e1f60ec635306006faf4a40f8b72c497d916e274d6e1e6bb1cdcf5fd250585e4bf907ebc8d7ef9f7ddb40e0f5facc5e7d7e92fb3377e4ca85ab7f63803b5f25d464443b28a35310f3918c4d0c3509dcda1e3f6c57b98fd059e4967bd3cd11f7e46f746c7f3cdc37438db4efafd5278d7e9eff7188cc4645724957e3f6359e63a3c400ed2544e3fbb44783713a50dd0cae5dcaf7465bf5f0c112e2d6ec890385115bc48c9535b5f37dba3ab69015f2e73416950eb513232c40efff0a754ce512bfa43c35b08ffc8ede19f7bd268c3db08951d73a7b6fd8a22d3685eee2792248676b4a641bb26af703fc911397f9922bc05a1930c76c803eda42eeb4c5101ec09cbac45154ca0640f5e87d2c8536b6d0c07f605ebd10d55afc6b3ec1d32d63b117a6adddbeb1f3aa52357ad3a0c87d9f74559d8dde6689701af24187b6e04e887f205c1a0e0bc6a78a314b90201c34e59e21ff38e1dbf6b30be825691dbb049aba8346ce81629f82ce25535338ab13a1a3cecb8e72340e52f0b8f0c0ef29d76f04c0cdabcfc3051fd029073a35451786ddca2e87ee6c33b5dc9313bb7716b45b25aad272a5dfeef094cc0df852241be36e332254c3805986caa209e81728a17875d436ac88d0b797bc133c68ad2ec16c5961bf90eca58432b9eb73dba02143967f1dead4f9aaba530f4e37e144874895d358589526b35a3b7c51c3cbc5cd7fa7424d606f90d81fa4b60906610baf0129db07b157d46fa6231974b22162321a58e2354bfdfbe4ac63844c673420d166575720393faeec65543204894fbd2a8d886878d1ddc85e638a35c4c0589d3aea51cd610dc9ffd4f69c11e6bd46c72d6442f50f1e529bf7dc666246392e104a04823c18ba842c9fde51508d7535a381096f9abbba845651c38c3e3199e6cbab7854dd97cbf113b48d8acb5f9c8775846aebeb21f5473b417d375758e02ff070f38e7965073a2c35a038e53b37d1c5642c0042d2afa191afb7ad047f91a9cd4eb620077555cf78df2629d103f722ae3b8275205a5ed4e5c0a1488a3d5cbe3c7d3df1f44a053130ff9b7b65f225247a580c69e1a7d4edcadca6d7e5b71853d1b8a4b3bde75c1572c3f46094b5137badf0c1b0ce074d61e7d0fe743d0131e8ad9fe2a3bac97fc76dc486c9aa0a3b49ad4319ddc2919454e209e36950c31821494f464de281a9a93a589d4dcd24798578abfb870c91c26292f625fc749f03328d7e0e34c2655dcb736142c8c191180c5b83fb1c28e9e66946203a2086cb61160e21208db5384988eaefd1ee7e7fb950d71a33e78529b1c9fcda6c07bc06ffbc93aa7a091dda5ae7133204792f8cc1fddaf51bae11b02388accbb87e6e488e708ce905dfdf0e5111d5aff2a866054070c3a4adcae0d51115828dff0652e83e3c77c5c2603f5ee24d4129868ddb9df8d3d4e0d8539cd6ccbb011ff0203773ea7758963b6a9d140ca87e24636179ff9f2f8c83212a97f493d4e63a6bb073c12dc09a7f5d1b128da82a176c03a86fb0ecd219f13661b1959e796228179617d1fb8fd0f5e8fd261b26bb084c456fcb149eedeeb8e6989b42f14a815a0d4356c385853479d5d69ebde996c239293f7136b07574a7d6f06a0e6359a01fc4d71538c538edb1db424c62198555bb747c25101b1e408ba99906970611e75e6a07a33ed8568bb16c015892e2a1aef3768dfe795db6ea07ed7f182c3ce6eeff9866cf68aad237df8757b6cc4450187b1d090bd37e32018658a08b8992b773992c30da0fec0c2c4bf97b62acc624da1008ba55ef6fb3c0d2b1ad8234961d8ebe60dde6bbbde944c87f41c89400e8e0b148d55b7f45bfdb74967e4d3cb59e4825d167e10ba96c7e42a3389fedb41cb40c644cb47af3cc0c2cf47d7561529deab8a48de5cc7f194f47e32abbc6d6df68fd938d883d0665d7dd5fdaa50b08f197bf143b16e3786096937ca47fe758641e75ca91f86a3f2376062a93dddc2fd177c0bd5640a32f6e05675b91b9e9c5d11e36e97ed15072728bf78f9de3d0b70b9f3914c54f4d41546d96d98c2ab040406a749c273c2cc44102874878931af575a7c4efeb1cf1abdb34e84cbfe465f7a05831c869f7e775066622fba031ad259a7052aba3c46cf98c5332141de8d5127d9745779ab09360b31650338ea51476c30f3627c4c1559c035e3aebcf87ed2bb94f8337805aa8a998ee60768101ec2cada4a92fb71de9efc298e144658cae5e8b3e4ade376d217c7d011c0d840db103369aa312b724f2a77b81ce9d33cc57be93b77136802bde90440a17ab7ff17871d7ef592ddaf172a45f0c0347fceea1a37715fb108e3ab61304f3c7ce049913cc4eae7a363e63163ad9a2c3213d118606373d7b691d172d85395f4bc90d27585327f925dcf150dcd0536864f4b5a91a9bcf47d498efe9de2b201d442f74df1bfac1aa67c7f2eab1a1f8cad85de7368cb1c7bec1045121dd6710731be8a6be47cfa7b02d08ed92cd1052b8317548125b227b45e4ced0c3ef7b4a080ccb1aa4fee6f9dbf15d2ac998e9ec7482618c1187c615c675b4163e1f1c761b4ba9f3fbc4d40aa8e7ea06f9058ae17865b83d5d563c4528c1a22b9a9c1be158f191cfff1f65c2246a8ba847592da8c8fa976030d3d5dd46936d789694a6785e337c1f6862753d52184f1d3be9b7e51c8969641402616289382e895a47328fc392819539a44ffb9ce762f199e412814797006df24d20805b02c6fab966e236f6974096ae7413f0ffe2095ed98646c481326684d40e27cc259cb3653e5732a820c83f99b0b20c337e5c1fbfc3524ec1c389f8af6c278019476509c06d29e5180ee57c3bc3565e29886c275504413b7c77ceada2908418ddeea99bda3e154fac5a47df6918d956b1b46aba0e2e0533e8d0e188e5caf53f417e782889478de9ec73ccfb04a7070d7deaa660d107d9fa416e57fb8e69f3652c3c7141e1ee6e0be1147415e9da82f0bc97d465769884186f236d0f7a95019cfd179bf53c4ba81c43f8fc893c84b7a6e5136e582ece32a804a33a02f40c942bc4c099a8a9c5e5729645931a7b5030b0060bb8ef4c633a19db7108080e33883f8e366b2ed023165113ad552b1e1ef583bb236dc9ebed60d273f593cb1cfe5d17db622672352d79da50ec2cb2680d45d617155377a4e7e2a63ebb78b52e3b6429222e9eea4a65d6573289819e81b338762e838da37ce697f387db20228dc1c99d9ba4f1794e72898a8ab840dbd4fae3ac1203bbaaeca71e68a8014f0d8873b4989e965d4aa3ec5935412d00566801b5c6e9b9466b134ae986a4b4d1a4218158cecc3eef0792ae7efa7d6d570eb9d6299b2549355ee4af0eb0c41289bc28450d0e36a156b5295613ce206bee77b4698c0b68fe74c6bed5259490c66a789ac45add6d6ad774864ddab8b3505d3e0eb8d0aed4acaaa091af40c6fb0c0dc067d19c75e8d7bde489d87f2b62cd02d7f72d995a53e8c213763940bf1a1e44b56be1f4d2ca4e80d6608093d930b761a3337f639a79e3a143ae1ee55ef6da5590c67a6ea86f5f43dcc1ec1a6279d13d0deec28b5fc6099190842e8867aec999ef90dee3b8c1315a785cd3c8cefa2f2bc6d101e5ba8d8dae4052d4c94e0bcd2ec5afd322afd1beb720d933e9b6997030e8be3a8fe816fab60d1df62b1af8db15afb29f81df1e4ec316c83d2001958a311d6787ef72572866340be3e9eb623c0af99f3dff0789cee51f8cf9feab0b1be1f2d4f19bbeb2915b64e33e99fcaf01f4d432a9a8dd89e1170e0e4cbf12185dc16f2fa1d1c8b803dba88c60382c270b5beb97f22e0cdb45fe9c8f0fbb21db6f11f7aaeac2491dcd3d247d0de0ee4edfcc8d7d08ba9671ffde0e5f1e4594b81697714a1398d9e638a6bf94a328a88c6aba65bfd7ab285b039c5b0993918ba489e4c0f1072a74b4184e80400bf5e5d381d94b3176f20996313871b3aa8fac04f3f4a7fe86529eec2f0b3655bdb64cb48dfa38b53e19b12cb3ffd37dccaf1a3a387f96c2f5b949c525266c08bbea287202255f241253a216a5d50072f45d5da48a79a762eb05b0629be23ffd5030b7ecb5bcbedf31158b1748a1a4b6856e7493b317dfe482ea110b4579c1c69b6296bc5a197a66899a2a550fec0f413c63eb29af685cd5f8708296d04c2a48f7d353d6e9f1f2f078609e07a71b6e56fb5aa5897e1a15c1b19d53461094e34b9db07f34651b3a3ca7e8f8ea7472668a80dc014a3d5780f6f9042384e6b69cd384b2d66b229f324594e0f644bdbd3cfd7f5bdc08e998c92e80767fd505a42dfa4a5a8c87a24a5c928d7d134c620cc858cf3768b2e659d068dac155e25844aebaf469a9ca49b95099f3692ced6d057bb6f996e6f426312db818c883a4ce07adf2631b95f49fd9460131ae18991901e848132e6409bf101421af6229bbb836692efb5bfc274e6a0a8646a3c6f1bd044f13c62f3ad7088c9db0b4fba318c598f4798fd36a41c288c7b31732cbcfc2665305b051fc16ed32c7a4f661a1251b1d09f57c576cc63f5f2aec67d78ed159e7146768f968ee07f7697adffac7b66deb174240e6cce19467b943b0b917122b3021dd3a48cb8b2657e03bc866ab9a45d95595248d8b134f019a2a9fc69e04abe4c4d98296cb342c81bed4175da90a106639ad25ab82e754c530bb5c8d51b5d392333db57c35fba999e53754d68ad0798679d639ad86487f63d6d923613345b056a3cd009911b061caf37422cd5f55942c9a1edfa21351be9be0f5524113973119113183fec02fd950ca4d3ba65230d79951f44e08f1e5d2fa518b23a9085ae429ea03bea760e01be66890e8e58ff60ce36a0cca02e3b8c14131cbda761857089916c128aa1da2b1595bbd6c5107e0e62e6f0effd8c40e3c4c56ea08987846fa1b8ffe52ca0be74fe6b215f2283a1ab399d4749810d62e9ab6c6aa906b02106812a19cb0b58a8ff9745c4c3dc1c45c9bfd06cd3fd0f525a490ce69c5f2bbbb76452a92091fa72a7babe7929b225d6e40d62dbcacd66db5361f722744a56550158ecd3507db24f0f16a96e248afd3725ab6ddc1365355bb590e64bd205dc10f52e0110ab24af7b390005adfdd46f61a0c5d2a287fe6f4445f9400886529121d12c11a197abbaafcfa77ca716bc326293b5f136b9c1076626a25f357ca5ef2b44daff2112bb6bbe84fb3632c4c799b509f82e4ee6d6861aa997c806bfa15c2fcfb78aa5393b10709f9fef95a845e1ad66eb68b79ecce9ead7c076a8d6b84fa10f2de76823d53e2731e407df65c2244208d634a8b4a4ef14a514a7d08b9b919e71f02ad9a93c2f7eeab28778b963373d7a96c9c21702af74d08c127637ef99186b00000058011100712b5a5eaf45caba7e54bff7ff81f78acee680e4654a633bdc5d1ba54c2c48b2f39c57d6fcb91af547d285a6766f922bb3f0d30c9eb65ee39bf16da790f77ad778bc92fecf451f1ae9a8c60c02db4db8dcdb8a6548e93c486da77b29ff34a142ebf564e5d53ce11d2587e9d60f54d15dd3bbc8a779434b74119d9d5b78c345f2c734a2acd241cc3e5ecd981b39654b63db4f6ec197fbc5dfba949d3d90edf6477c160e591af876e6c034a8e553f57d9d2acccd62cf3d99c682c8de3832cf041304835bccd4b6e48b13071762ae9ee947a591d8bb6e23fd3b0994f7b0d787d12f3d2ec8da5ff54725c6bc22876c6559f3ba6e669dd8399dba8d17bcfcc6bc37867762545cc4b668e2833aef235a0b40d3d605c602fc1d120ab12db843fff1f589df19e1ef526620371ac75ee8b47077978d09c181b3ab51cbb4f5455d889b125e57bb126aa8f74dca338a48175b8293788a00c80004a96e965d5e67996884f6a29f3b745653d96a615b465acaf9a52120c6bc34b3cd10e1bd4bcc968babe47ab6fc20ea28c940819b9cfd6f2f71f9ef3dbe816e8a88545983d5e36c52a3afa966b4b920ec136accf4b1b10c60e6817e60e2322734c6e4fb4fd930fc22b33170ecd88f9bb7e8cd8d7d20c100c5f6d582e552f7c4ab7763bcea1ff3b4000000a28be97dd563bb42b4672765864acb5b26091844b752cd3c8ec524f9e604a446643817b43c9feb46da8af6adf87a40ed06e30fbc630721e49acaae35d87652875d5ab067f3cfe60791fb0e137d0bd864c5ca9764feea6aa33e42b15d1706afc26f010bb1ef1a5c323f94792ace0ca9a57b9391ea975824e9d4ae7a3475f28a0b8eb78e0e25054915934cd5f701a0371e0599e063d2ad1a15a55d4fd2ac966a18cd52925a8acdf7e3b0ae78c8976df9e0b53ff7de9ca968363efd8b0762870776b2"], 0x1404}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) [ 1211.053976][ T5261] binder: 5260:5261 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1211.089706][ T7891] binder: release 5256:5259 transaction 5286 out, still active 10:48:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1211.103566][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1211.113677][ T5261] binder: 5260:5261 unknown command 0 10:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010c3ffffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fffffffc0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1211.148590][ T7891] binder: send failed reply for transaction 5286, target dead 10:48:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:59 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500000018007fafb72d1cb2a4a280930206000000a843096c2623690f00080004000c0816000b770000a3c728f1c46b7b31afdc1338d544", 0x38}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001400)={0xfffffffffffffffc, {{0x2, 0x4e24, @remote}}}, 0x88) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000017010000040000000000000000000000980000000000000017010000020000007e000000e80422218f03f4a8037e3c8203e5516edc9eeb1cc1606741d0f70684ba032aff2a845ccc97661d524788abc8bf5f07ef8bd6c865e36e9d76a6389b20608fe4cb022bb912ae0f06c59d51fe736fbd3901acb58a85d441b292140e31d2ce563bb24d80c38cb7b7ab02d96cf203af5678000000000000000039f9de10c4614c0000000000000aeb59dc52ab2f1680b38ccd1ac8c6b56c2482f1a4c0cae5dde7d2adf35fc3e4d5d7c7c15dea2f92bd35f030ea4890fcbc896ff089d104efae"], 0xb0}], 0x1, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x30}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x2}, 0x8) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000400)="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") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000002c0)=0xc) ptrace$getenv(0x4201, r3, 0xb5, &(0x7f00000014c0)) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x2}}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x80000000, 0x10000, 0x4, 0xfffffffffffffffb, 0x7f, 0x7, 0x6ab162f4, 0x200, 0xfffffffffffffff8, 0x20, 0xfffffffffffff103}, 0xb) [ 1211.219237][ T5261] binder: 5260:5261 ioctl c0306201 20000780 returned -22 [ 1211.231420][ T5271] binder: 5268:5271 got transaction with invalid parent offset or type [ 1211.259580][ T5278] binder: 5260:5278 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1211.292506][T16861] binder: release 5279:5280 transaction 5291 out, still active [ 1211.293536][ T5278] binder: 5260:5278 unknown command 0 [ 1211.318671][T16861] binder: undelivered TRANSACTION_COMPLETE [ 1211.330355][ T5271] binder: BINDER_SET_CONTEXT_MGR already set [ 1211.348523][ T5278] binder: 5260:5278 ioctl c0306201 20000780 returned -22 [ 1211.357115][ T5271] binder: 5268:5271 ioctl 40046207 0 returned -16 10:48:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010f0ffffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:59 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="91f6a3460a99", 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 10:48:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fffffffe0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1211.367199][T16861] binder: send failed reply for transaction 5291, target dead [ 1211.391471][ T5284] binder_alloc: 5268: binder_alloc_buf, no vma 10:48:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x400c630f, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:48:59 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01088a8ffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:48:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:48:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fcffffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1211.563356][ T5301] binder: 5300:5301 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1211.580244][ T5301] binder: 5300:5301 unknown command 0 [ 1211.589231][ T5301] binder: 5300:5301 ioctl c0306201 20000780 returned -22 [ 1211.682191][ T5310] binder: 5300:5310 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1211.706126][T16861] binder: release 5312:5316 transaction 5302 out, still active 10:49:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000f0ffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1211.737206][ T5310] binder: 5300:5310 unknown command 0 [ 1211.741224][T16861] binder: undelivered TRANSACTION_COMPLETE 10:49:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x3800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010feffffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:00 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="130000004e0007041dfffd946f6105000a0000", 0x13}], 0x1}, 0x0) [ 1211.778416][T16861] binder: send failed reply for transaction 5302, target dead [ 1211.814447][ T5310] binder: 5300:5310 ioctl c0306201 20000780 returned -22 10:49:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40106308, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0109effffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000200000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1212.005809][ T5339] binder: 5338:5339 BC_INCREFS_DONE u0000000000000000 no match 10:49:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x22d, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0x3, 0x65ad}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') preadv(r2, &(0x7f0000000140)=[{}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000280)=""/79, 0x4f}, {0x0}, {0x0}, {&(0x7f0000000480)=""/80, 0x50}], 0x6, 0x1f000000) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xc0, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x6, @remote, 0x9}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0xffff, @loopback, 0x24}, @in={0x2, 0x4e24, @rand_addr=0x7414}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x5, @local, 0x3}, @in6={0xa, 0x4e23, 0x80000000, @loopback, 0x8}]}, &(0x7f0000000300)=0x10) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000540)='}\'^lo\x00', 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={r3, @in={{0x2, 0x4e21, @multicast1}}, [0x4, 0x1, 0x5, 0xffff, 0x1f, 0x2b, 0x3, 0x8, 0x4, 0x20, 0x6, 0x7fffffff, 0x6, 0x6, 0x44a2]}, &(0x7f0000000500)=0x100) [ 1212.055018][ T5339] binder: 5338:5339 unknown command 0 [ 1212.083302][ T5339] binder: 5338:5339 ioctl c0306201 20000780 returned -22 10:49:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010c3ffffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1212.141884][ T7891] binder: release 5346:5348 transaction 5316 out, still active [ 1212.156513][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1212.168403][ T5347] binder: BINDER_SET_CONTEXT_MGR already set [ 1212.179839][ T5356] binder: 5338:5356 BC_INCREFS_DONE u0000000000000000 no match 10:49:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000300000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1212.187604][ T5356] binder: 5338:5356 unknown command 0 [ 1212.203025][ T5347] binder: 5345:5347 ioctl 40046207 0 returned -16 10:49:00 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x10, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e53fe8)) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x10800, 0x0) write$smack_current(r0, &(0x7f0000000080)='nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x1d) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000017000/0x4000)=nil, 0x4000}, 0x3}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000cd8ff4)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)={0x0, 0xdc, "767a87891fe16cbbd748df53415c070551fb6d2875e5a9c08b01e8b643aedcf6cf4afce674d3c92525bdd85ac9608583e1d76475095670601fd13aac2f8ad63cba300330b8a60394fe47b75a3e38f8faea15e6c06aaec74ff2df5f04e870eacba5efb9d041994d91f8e40321391ed93c1882ecf71d4788deab040711bd17321f0ba5013862133166bdd4c4daeaba6e701120a26bbe1eaabfab109aa5400072d828b10aa5af918533e9efa5ab69f777ddd85fa236fde352134c12f7e94a461bdafca35903eb32d92293b4db9a51182546898214fb8c12946a54d2d4b5"}, &(0x7f00000000c0)=0xe4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r2, 0x1}, 0x8) syz_open_dev$sndseq(0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x19, 0x2, 0x2e0, [0x20000740, 0x0, 0x0, 0x20000770, 0x200009f0], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x38d) 10:49:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1212.249239][ T5354] binder_alloc: 5345: binder_alloc_buf, no vma [ 1212.249319][ T7891] binder: send failed reply for transaction 5316, target dead [ 1212.280424][ T5356] binder: 5338:5356 ioctl c0306201 20000780 returned -22 10:49:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010f0ffffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40106309, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000400000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:00 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010fcffffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1212.528318][ T5379] binder: 5378:5379 BC_ACQUIRE_DONE u0000000000000000 no match [ 1212.538842][ T5379] binder: 5378:5379 unknown command 0 [ 1212.545466][ T5379] binder: 5378:5379 ioctl c0306201 20000780 returned -22 [ 1212.608205][ T5386] binder: 5378:5386 BC_ACQUIRE_DONE u0000000000000000 no match [ 1212.642954][ T7891] binder: release 5387:5388 transaction 5327 out, still active 10:49:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1212.659731][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1212.678705][ T5386] binder: 5378:5386 unknown command 0 [ 1212.692615][ T7891] binder: send failed reply for transaction 5327, target dead 10:49:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000100)={0x0, 0x0, "593387db3d67e03ff89c1d86c0e55f1d27594f19b8b40655b37b0af3c44f6bf5"}) r2 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) fstatfs(r0, &(0x7f0000000180)=""/111) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x1, r1}) r3 = memfd_create(&(0x7f0000000280)='IPVS\x00', 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) fallocate(r2, 0x11, 0x0, 0xc00000) 10:49:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010feffffff0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000600000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1212.718753][ T5386] binder: 5378:5386 ioctl c0306201 20000780 returned -22 10:49:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1212.840979][ T5395] binder: BINDER_SET_CONTEXT_MGR already set 10:49:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000a00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000200000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1212.933094][ T5407] binder_transaction: 27 callbacks suppressed [ 1212.933114][ T5407] binder: 5406:5407 transaction failed 29189/-22, size 64-8 line 2995 [ 1212.963361][ T5395] binder: 5394:5395 ioctl 40046207 0 returned -16 [ 1212.973645][ T5410] binder: 5409:5410 transaction failed 29189/-22, size 24-8 line 2995 10:49:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x5000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1213.059389][ T5412] binder: 5409:5412 transaction failed 29189/-22, size 24-8 line 2995 [ 1213.127985][ T5422] binder: 5421:5422 transaction failed 29189/-22, size 64-8 line 2995 [ 1213.155319][ T5424] binder: 5423:5424 transaction failed 29201/-22, size 64-16 line 3389 10:49:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000300000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000c00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40406301, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1213.208615][ T5426] binder: 5423:5426 transaction failed 29201/-22, size 64-16 line 3389 [ 1213.339428][ T5436] binder: 5435:5436 got reply transaction with no transaction stack [ 1213.392399][ T5436] binder: 5435:5436 transaction failed 29201/-71, size 24-8 line 2900 10:49:01 executing program 2: r0 = socket$inet(0x10, 0x3, 0x40000000000000c) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000020107081dfffd946fa2830020200a000900120000090000000000000000ff7e", 0x24}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x5, 0x402000) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000140)={0x3, "70f460b145f0cd242a6d55a205884feec18d65ba13b5458334f7a3110cbdc0be", 0x1, 0xffff, 0x6, 0x1002000, 0x2, 0x2}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 10:49:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000e00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000400000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1213.454344][ T7891] binder_release_work: 31 callbacks suppressed [ 1213.454353][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1213.464069][ T5443] binder: 5435:5443 got reply transaction with no transaction stack [ 1213.475225][ T5443] binder: 5435:5443 transaction failed 29201/-71, size 24-8 line 2900 [ 1213.509916][ T5449] binder: 5448:5449 transaction failed 29189/-22, size 64-8 line 2995 [ 1213.521086][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1213.529261][ T5451] validate_nla: 2 callbacks suppressed [ 1213.529274][ T5451] netlink: 'syz-executor.2': attribute type 18 has an invalid length. [ 1213.547762][ T5450] binder: 5446:5450 transaction failed 29201/-22, size 64-16 line 3389 10:49:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000f00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1213.560445][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1213.574296][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1213.584709][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1213.594126][ T5450] binder: BINDER_SET_CONTEXT_MGR already set 10:49:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000600000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1213.617812][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1213.624910][ T5450] binder: 5446:5450 ioctl 40046207 0 returned -16 [ 1213.712901][ T5465] binder: 5463:5465 got reply transaction with no transaction stack [ 1213.751473][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 10:49:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6800}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010001000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1213.765250][ T5468] binder: 5463:5468 got reply transaction with no transaction stack 10:49:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000a00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1213.824991][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1213.844479][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1213.853977][ T5476] binder_fixup_parent: 11 callbacks suppressed [ 1213.853987][ T5476] binder: 5470:5476 got transaction with invalid parent offset or type [ 1213.923680][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1213.949610][ T5480] binder: BINDER_SET_CONTEXT_MGR already set [ 1213.989238][ T5480] binder: 5470:5480 ioctl 40046207 0 returned -16 [ 1213.989338][ T5483] binder: 5470:5483 got transaction with invalid parent offset or type [ 1214.026169][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1214.094819][ T5451] netlink: 'syz-executor.2': attribute type 18 has an invalid length. [ 1214.103359][ T5451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:49:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'yam0\x00', 'yam0\x00', 'veth1_to_team\x00', @link_local, [], @dev, [], 0x70, 0xd8, 0x108}, [@common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x210) ioctl$void(r0, 0x5451) getgid() 10:49:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010006000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000c00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1214.227316][ T5497] binder: 5496:5497 got transaction with invalid parent offset or type [ 1214.255297][ T5498] binder: 5491:5498 got transaction to invalid handle [ 1214.264955][ T7891] binder: release 5489:5499 transaction 5366 out, still active 10:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000f000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000e00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1214.268467][ T5497] binder: BINDER_SET_CONTEXT_MGR already set [ 1214.284321][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1214.307471][ T5505] binder: 5491:5505 got transaction to invalid handle 10:49:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1214.329820][ T5497] binder: 5496:5497 ioctl 40046207 0 returned -16 [ 1214.336619][ T7891] binder: send failed reply for transaction 5366, target dead 10:49:02 executing program 2: keyctl$dh_compute(0x17, &(0x7f00000002c0), &(0x7f0000001400)=""/4096, 0x1000, &(0x7f00000013c0)={0x0}) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="ed62b4c6adc6888c936d780492fa52b0026cd6a66682096d8074502a3edcf4add3414be0c71abb3dfaf66e8226addf74379ed63f55e8adcebf352578deb85f30f7204eaa493e58bf94c32bb023a7b44ed6b791f2d6bf66d03ce1e3e36672a3776b9ef8f147799421a66bb9dbefdf5d86551fab6fc319bc9d161175038a227ce68af9f52f495218034215be59bcf7180a9136590e5b589ceac0fcd991ae60673fbbd32ee6738263a5e0a8fed61932b35c98d7017b9c7dbcaf6b88483a1be25d9d03df429cd427f0f0ceecf05fff1d", 0xce, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x7e, 0x4000) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x8, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x20000, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000240)={r1, 0x10000, 0x3, r2}) 10:49:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7400}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000003000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000f00000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000006000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1214.561004][ T5527] binder: 5526:5527 got transaction to invalid handle [ 1214.575112][ T5525] binder: 5523:5525 got transaction with invalid parent offset or type 10:49:03 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x101080) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040)={0x9, 0x80000000}, 0x2) 10:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010001000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1214.636090][ T5534] binder: 5526:5534 got transaction to invalid handle [ 1214.671718][ T5538] binder: 5523:5538 got transaction with invalid parent offset or type 10:49:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1214.753579][ T7891] binder: release 5539:5542 transaction 5379 out, still active [ 1214.769867][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000a000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1214.846470][ T7891] binder: send failed reply for transaction 5379, target dead [ 1214.873328][ T5555] binder: 5554:5555 got transaction to invalid handle 10:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010006000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8000, 0x0) ioctl(r0, 0x6, &(0x7f0000000180)="6eb963a22535fb3783f979ae5af5f2de31caed1055a348c36f0d0ef1bc5ce6835715e973a5525c6a0a9c1ad62208b7819d84a25859ed4c285fa8b07b03c6e2694ae05ef116b62f1775677d0c84241817fad3364422fe2110e538fd0be4a033a6420c83ae774adef50db1bfc7f8523fac53ff287244b38994f3f976f72244e320760332d4ab7d7e6c65c1c1885283386e49abb8ae0a33170026d71f2b42294fe6ce2e72229f2d8b") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x6) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x6) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0xfffffe8e, 0x12, 0x100000000004002, {0x8, 0x4, 0x1}}, 0xfffffefd) write$UHID_CREATE(r1, &(0x7f0000000300)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0}, 0x120) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x7da5, 0x4) [ 1214.895058][ T5553] binder: 5552:5553 got transaction with invalid parent offset or type [ 1214.956939][ T5563] binder: 5554:5563 got transaction to invalid handle [ 1214.968356][ T7891] binder: release 5561:5562 transaction 5386 out, still active [ 1214.972729][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 1214.984515][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1214.994663][ T5564] binder_alloc: 5552: binder_alloc_buf, no vma 10:49:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000c000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1215.018324][ T5553] binder: 5552:5553 ioctl 40046207 0 returned -16 [ 1215.021013][ T7891] binder: send failed reply for transaction 5386, target dead 10:49:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000f000000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x1000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000e000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1215.157237][ T5583] binder: 5582:5583 got transaction to invalid handle 10:49:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1215.212303][ T5588] binder: 5582:5588 got transaction to invalid handle [ 1215.222249][ T5587] binder: 5586:5587 got transaction with invalid parent offset or type 10:49:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000003000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000f000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1215.295179][ T5594] binder: 5586:5594 got transaction with invalid parent offset or type 10:49:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1215.532744][ T5609] binder: 5604:5609 got transaction to invalid handle [ 1215.554329][ T5611] binder: 5604:5611 got transaction to invalid handle 10:49:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x1000, 0x80000) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8b8f950a81c17efc}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@alg={0x108, 0x10, 0x100, 0x70bd2a, 0x25dfdbfd, {{'poly1305\x00'}, [], [], 0x2400, 0x2400}, [{0x8, 0x1, 0x78c}, {0x8, 0x1, 0xd8}, {0x8, 0x1, 0xfffffffffffffffd}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x3}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x400, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) 10:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000881b000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000006000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1215.907499][ T5626] binder: 5617:5626 got transaction with invalid parent offset or type 10:49:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000003f000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1215.960942][ T5632] binder: 5617:5632 got transaction with invalid parent offset or type 10:49:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000a000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590fffffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) modify_ldt$write(0x1, &(0x7f0000000000)={0x10000000000000, 0x100000, 0x0, 0x3, 0x5, 0x8, 0x3, 0x5, 0xfffffffffffffffc, 0x9}, 0x10) [ 1216.071138][ T5640] binder: 5639:5640 got transaction with invalid handle, 0 [ 1216.082785][ T7891] binder_thread_release: 1 callbacks suppressed [ 1216.082799][ T7891] binder: release 5636:5641 transaction 5414 out, still active 10:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000040000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1216.132519][ T7891] binder_release_work: 1 callbacks suppressed [ 1216.132526][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1216.152272][ T5648] binder: 5639:5648 got transaction with invalid handle, 0 10:49:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x3000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1216.180699][ T7891] binder_send_failed_reply: 1 callbacks suppressed [ 1216.180708][ T7891] binder: send failed reply for transaction 5414, target dead 10:49:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000c000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:04 executing program 2: r0 = semget$private(0x0, 0x3, 0x2) semctl$SEM_STAT(r0, 0x1, 0x12, &(0x7f0000000000)=""/102) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000100)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000002c0)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, r2, 0x0, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0xb8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x21eb}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket$kcm(0x29, 0x5, 0x0) 10:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010006558000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1216.368058][ T5666] binder: BINDER_SET_CONTEXT_MGR already set 10:49:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000e000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1216.409785][ T5666] binder: 5662:5666 ioctl 40046207 0 returned -16 10:49:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x80000000) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) syz_open_procfs(0x0, &(0x7f0000272000)) 10:49:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1216.529206][ C0] net_ratelimit: 20 callbacks suppressed [ 1216.529221][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.540738][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.546608][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.552431][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000060000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000f000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1216.673416][ T5689] binder: BINDER_SET_CONTEXT_MGR already set [ 1216.689885][ T5689] binder: 5688:5689 ioctl 40046207 0 returned -16 10:49:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010006558000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010005865000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1216.769143][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.775092][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1216.781158][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1216.787024][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x5000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000b415000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000081000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:05 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x0, 0x0, 0x0, 0x7}}) r1 = getpid() sched_getaffinity(r1, 0x8, &(0x7f0000000000)) 10:49:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000003f000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1217.039567][ T5729] binder: 5728:5729 got transaction with invalid handle, 0 10:49:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1217.097573][ T5733] binder: 5728:5733 got transaction with invalid handle, 0 10:49:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010001b88000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1217.169135][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1217.174952][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:05 executing program 2: io_setup(0x8000, &(0x7f0000000000)) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = accept4$packet(r1, 0x0, 0x0, 0x80800) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6erspan0\x00', r3}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000140)=0x9, 0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x20000000}) recvmmsg(r1, &(0x7f0000002a00), 0x0, 0x0, 0x0) 10:49:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000040000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1217.267321][ T5745] binder: BINDER_SET_CONTEXT_MGR already set 10:49:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000f0000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1217.350307][ T5745] binder: 5742:5745 ioctl 40046207 0 returned -16 [ 1217.386918][ T5756] binder: 5755:5756 got transaction with invalid handle, 0 10:49:05 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010006558000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1217.433623][ T5764] binder: 5755:5764 got transaction with invalid handle, 0 [ 1217.446153][ T7891] binder: release 5763:5765 transaction 5455 out, still active [ 1217.456274][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffff00003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1217.536667][ T7891] binder: send failed reply for transaction 5455, target dead 10:49:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000060000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1217.652131][ T5774] binder: BINDER_SET_CONTEXT_MGR already set [ 1217.673628][T16861] binder: undelivered transaction 5460, process died. [ 1217.685195][ T5774] binder: 5770:5774 ioctl 40046207 0 returned -16 [ 1217.696578][T16861] binder: undelivered TRANSACTION_COMPLETE 10:49:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:06 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x14) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7, 0x1013, r0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200002, 0x0) ioctl$int_in(r0, 0x280081000005008, 0x0) poll(&(0x7f0000000100)=[{r0, 0xfffffffffffffffc}], 0x1, 0x0) 10:49:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000103f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x10000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010005865000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1218.073717][ T5800] binder_transaction: 59 callbacks suppressed [ 1218.073735][ T5800] binder: 5799:5800 transaction failed 29189/-22, size 24-8 line 2995 [ 1218.100028][ T5803] binder: 5802:5803 transaction failed 29189/-22, size 64-8 line 2995 10:49:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000203f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1218.117498][ T5808] binder: 5799:5808 transaction failed 29189/-22, size 24-8 line 2995 10:49:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000081000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1218.157696][ T5804] binder: 5798:5804 transaction failed 29201/-22, size 64-16 line 3389 10:49:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000303f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100015b4000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1218.269721][ T5825] binder: 5798:5825 transaction failed 29201/-22, size 64-16 line 3389 [ 1218.289308][T16861] binder: release 5822:5823 transaction 5475 out, still active [ 1218.297097][T16861] binder: undelivered TRANSACTION_COMPLETE [ 1218.373761][ T5832] binder: 5831:5832 got transaction with invalid handle, 0 [ 1218.418260][ T5832] binder: 5831:5832 transaction failed 29201/-22, size 24-8 line 3274 [ 1218.431626][ T7891] binder: send failed reply for transaction 5475, target dead [ 1218.463162][ T7891] binder_release_work: 58 callbacks suppressed [ 1218.463170][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1218.477804][ T5840] binder: 5831:5840 transaction failed 29189/-22, size 24-8 line 2995 [ 1218.512641][T16861] binder: undelivered TRANSACTION_ERROR: 29189 10:49:07 executing program 2: select(0x40, &(0x7f0000000000)={0xffffffffffffff7f, 0x4, 0x8, 0x2, 0x2, 0x100000001, 0x513, 0xfff}, &(0x7f0000000040)={0x7, 0x7f, 0x40, 0x9, 0x100000000, 0x5, 0x6d, 0xe4}, &(0x7f0000000080)={0x8, 0x100000000, 0x7, 0x4, 0x3f, 0x0, 0x8, 0xfffffffffffffff8}, &(0x7f00000000c0)={0x77359400}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 10:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000403f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x20000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000f0000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1218.801567][ T5851] binder: 5850:5851 transaction failed 29201/-22, size 64-16 line 3389 [ 1218.811361][ T5852] binder: 5845:5852 got transaction with invalid handle, 0 [ 1218.822173][ T7891] binder: release 5846:5847 transaction 5483 out, still active [ 1218.830955][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000603f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffff00003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:07 executing program 2: r0 = memfd_create(&(0x7f0000000040)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x0019\xd9\x02\xa1\x1b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) write$sndseq(r0, &(0x7f0000000000), 0xffd7) [ 1218.847001][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1218.852434][ T5852] binder: 5845:5852 transaction failed 29201/-22, size 24-8 line 3274 [ 1218.863121][ T5858] binder_fixup_parent: 10 callbacks suppressed [ 1218.863133][ T5858] binder: 5850:5858 got transaction with invalid parent offset or type [ 1218.935419][ T7891] binder: release 5861:5862 transaction 5487 out, still active [ 1218.937043][ T5858] binder: 5850:5858 transaction failed 29201/-22, size 64-16 line 3389 [ 1218.967621][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1218.978901][ T5872] binder: 5845:5872 got transaction with invalid handle, 0 [ 1218.989638][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 10:49:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000103f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000a03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1219.029538][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1219.042758][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 10:49:07 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = dup(r0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000140)=0xe8) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0x6, r2, 0x2d, r1}, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x720, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x3f, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 10:49:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x28000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1219.095205][ T7891] binder: release 5874:5875 transaction 5489 out, still active [ 1219.112484][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1219.118526][ T7891] binder: send failed reply for transaction 5483, target dead [ 1219.202512][ T5889] binder: 5888:5889 got transaction with invalid parent offset or type [ 1219.214917][ T7891] binder: send failed reply for transaction 5487, target dead [ 1219.230165][ T5891] binder: 5890:5891 got transaction with invalid handle, 0 10:49:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000203f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000c03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1219.246003][ T7891] binder: send failed reply for transaction 5489, target dead [ 1219.258387][ T5889] binder: BINDER_SET_CONTEXT_MGR already set [ 1219.292346][ T5889] binder: 5888:5889 ioctl 40046207 0 returned -16 [ 1219.305153][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1219.329124][ T5893] binder_alloc: 5888: binder_alloc_buf, no vma 10:49:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1219.357158][ T5903] binder_alloc: 5888: binder_alloc_buf, no vma [ 1219.369825][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 [ 1219.376176][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 10:49:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x38000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1219.430406][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 10:49:07 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000e03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000303f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x28000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1219.521488][ T5913] binder: 5912:5913 got transaction with invalid parent offset or type 10:49:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1219.573448][ T5922] binder: BINDER_SET_CONTEXT_MGR already set [ 1219.589444][ T5922] binder: 5921:5922 ioctl 40046207 0 returned -16 [ 1219.596637][T16861] binder: release 5923:5926 transaction 5505 out, still active [ 1219.617009][T16861] binder: undelivered TRANSACTION_COMPLETE 10:49:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000403f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1219.647709][ T5930] binder: 5921:5930 got transaction with invalid parent offset or type [ 1219.653630][ T5927] binder: BINDER_SET_CONTEXT_MGR already set 10:49:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1219.749697][ T5927] binder: 5912:5927 ioctl 40046207 0 returned -16 [ 1219.750427][ T5931] binder: 5912:5931 got transaction with invalid parent offset or type 10:49:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'team_slave_1\x00', 0x400}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x20) [ 1219.800813][ T7891] binder: release 5941:5942 transaction 5514 out, still active [ 1219.808528][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000603f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000001003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x40000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1219.967114][ T7891] binder: release 5956:5957 transaction 5517 out, still active [ 1219.992481][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1219.998488][ T7891] binder: send failed reply for transaction 5505, target dead 10:49:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1220.057969][ T7891] binder: send failed reply for transaction 5514, target dead [ 1220.091995][ T7891] binder: send failed reply for transaction 5517, target dead [ 1220.112027][ T5974] binder: 5963:5974 got transaction with invalid parent offset or type [ 1220.138447][T16861] binder: release 5973:5975 transaction 5523 out, still active 10:49:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000003f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000a03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1220.168598][ T5974] binder: 5963:5974 got transaction with invalid parent offset or type 10:49:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x48000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000004003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000c03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1220.335806][T16861] binder: send failed reply for transaction 5523, target dead 10:49:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1220.446922][ T6001] binder: 5995:6001 got transaction with invalid parent offset or type 10:49:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000e03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @rand_addr=0x40}}, 0x9, 0x0, 0x6, 0x9}, &(0x7f00000002c0)=0x98) fcntl$getflags(r0, 0x1) r3 = gettid() sched_getaffinity(r3, 0x8, &(0x7f0000000440)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') readlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/237, 0xed) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000080)=0xfffffffffffffe00) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xa30000}}, 0x20, 0x0, 0x0) [ 1220.493531][ T6007] binder: 5995:6007 got transaction with invalid parent offset or type 10:49:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000006003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r0, 0x5) r1 = dup(0xffffffffffffffff) mknodat(r1, &(0x7f0000000000)='./file0\x00', 0x8008, 0x81) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000180)) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000100)=0x17, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) 10:49:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1220.695621][ T6029] binder: 6024:6029 got transaction with invalid parent offset or type [ 1220.734880][ T6032] binder: BINDER_SET_CONTEXT_MGR already set 10:49:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000001003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000586503f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1220.768989][ T6032] binder: 6024:6032 ioctl 40046207 0 returned -16 [ 1220.806237][ T6037] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 10:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x50000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1220.861175][ T6037] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 10:49:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x60000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000008103f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000586503f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000003f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1221.143045][ T6073] binder: BINDER_SET_CONTEXT_MGR already set [ 1221.168671][ T6073] binder: 6063:6073 ioctl 40046207 0 returned -16 [ 1221.175660][ T6068] binder_alloc: 6063: binder_alloc_buf, no vma 10:49:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8001, 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x2, 0x6}}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x03\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'bridge_slave_1\x00', 0x600}) 10:49:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000001b8803f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000004003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1221.204939][ T6070] binder_alloc: 6063: binder_alloc_buf, no vma 10:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x68000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000006003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000ffffa88803f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:09 executing program 2: msgget$private(0x0, 0x40a) r0 = msgget(0xffffffffffffffff, 0x2) msgctl$IPC_RMID(r0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x58002, 0x0) name_to_handle_at(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="ce00000007000000c8b86b3f7b63e507a14386fbbf0ea1b072761aa1b6a9ac59e38347b75d3b345e01a1b519273966b2c9aa568f0000000001e9a995d6704982cead657be0ba4e084ce1f4b7c9b26dde04f796e67e7e1e119624c85ebfc7c098810055c3ef3241b80a6cbe79a163715c59009d2c8b4bc46309e8f3c53f42c2f64844881f86d937d63e1ee1530d9607c3733ae3163b397e993d3053183669e7e2f777ac377491c70d5b06e618d4f7f4bfca88d7043f0cd25798d9680cad05baab8d5ff3efc6fda1efbf8b1c953363a508"], 0x0, 0x1400) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x4001, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffceb, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x20) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000040)={0x2, 0x100000001, 0x7, 0x8, 0x7, 0x4}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, 0x0, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r3, 0x4000000020000000) getpgid(0xffffffffffffffff) getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r3, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2000000000002900, {0x0, 0x4c00, 0x5400, 0x0, 0xf4010000}, 0x1600}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 10:49:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000586503f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000ffffff9e03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1221.667413][ T6120] binder: BINDER_SET_CONTEXT_MGR already set [ 1221.694100][ T6120] binder: 6118:6120 ioctl 40046207 0 returned -16 10:49:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x74000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000008103f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000ffffffc303f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:10 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x14, 0x1}, &(0x7f0000000080)=0x0) timer_gettime(r1, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x2, 0x80001) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x10, r2, 0x8000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="c4a27d35a90c000000f466baf80cb870bf988fef66bafc0cb000eef0448154e40303000000b9100800000f3265362665652e2e460f01ca0f017b280fc71ab805000000b9efdf31750f01d936660f38815265", 0x52}], 0x1, 0x0, 0x0, 0x20d) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x100) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) 10:49:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1222.027578][ T6157] binder_translate_handle: 11 callbacks suppressed [ 1222.027590][ T6157] binder: 6155:6157 got transaction with invalid handle, 0 10:49:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1222.073985][ T7891] binder: release 6159:6160 transaction 5600 out, still active [ 1222.083032][ T7891] binder_release_work: 1 callbacks suppressed [ 1222.083045][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffffff003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000ffffa88803f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1222.115256][ T6163] binder_alloc: 6144: binder_alloc_buf, no vma [ 1222.129242][ T7891] binder: send failed reply for transaction 5600, target dead 10:49:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1222.233716][ T6169] binder: BINDER_SET_CONTEXT_MGR already set 10:49:10 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000005b080008001d0004000000", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000100)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) [ 1222.282282][ T6169] binder: 6165:6169 ioctl 40046207 0 returned -16 [ 1222.303183][ T7891] binder: release 6174:6175 transaction 5607 out, still active 10:49:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffffffc03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000ffffff9e03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1222.339749][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1222.346361][ T6180] binder: 6179:6180 got transaction with invalid handle, 0 [ 1222.376398][ T6182] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 10:49:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x3f00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0xfdfdffff}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1222.407699][ T7891] binder: send failed reply for transaction 5607, target dead 10:49:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffffffe03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffffff003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000015b403f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x1000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1222.605599][ T6198] binder: BINDER_SET_CONTEXT_MGR already set [ 1222.645674][ T6198] binder: 6195:6198 ioctl 40046207 0 returned -16 10:49:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100088a8ffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000ffffffc303f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0xfffffdfd}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x3f000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:11 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dsp\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c0044ffd, &(0x7f0000000040)=0xf000000) read$FUSE(r0, &(0x7f0000000100), 0x1000) read$FUSE(r0, &(0x7f0000001200), 0x1000) [ 1222.769135][ C0] net_ratelimit: 20 callbacks suppressed [ 1222.769152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.780673][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.786522][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1222.792341][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1222.920621][ T7891] binder: release 6232:6233 transaction 5622 out, still active [ 1222.924397][ T6229] binder: 6228:6229 got transaction with invalid handle, 0 [ 1222.928339][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000f0ffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x100000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0xfdfdffff}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffffff003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1223.009154][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.014001][T16861] binder: send failed reply for transaction 5622, target dead [ 1223.015048][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1223.028504][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.034432][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1223.104630][ T6245] binder_transaction: 74 callbacks suppressed [ 1223.104657][ T6245] binder: 6244:6245 transaction failed 29201/-22, size 64-16 line 3389 [ 1223.139844][ T6247] binder: 6246:6247 transaction failed 29201/-22, size 64-8 line 3389 10:49:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010009effffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:11 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffffffc03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0xfffffdfd}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1223.181049][ T6253] binder: 6252:6253 got transaction with invalid handle, 0 [ 1223.212381][ T6253] binder: 6252:6253 transaction failed 29201/-22, size 24-8 line 3274 [ 1223.257223][ T6258] binder: 6252:6258 got transaction with invalid handle, 0 [ 1223.269380][ T6260] binder: 6244:6260 transaction failed 29201/-22, size 64-16 line 3389 [ 1223.291363][ T6258] binder: 6252:6258 transaction failed 29201/-22, size 24-8 line 3274 10:49:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000c3ffffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x200000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1223.330890][ T6264] binder: 6262:6264 transaction failed 29201/-22, size 64-8 line 3389 [ 1223.409115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1223.414994][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1223.429913][ T6269] binder: 6267:6269 transaction failed 29201/-22, size 64-16 line 3389 [ 1223.485070][ T6276] binder: 6275:6276 got transaction with invalid handle, 0 [ 1223.498241][T16861] binder_release_work: 75 callbacks suppressed [ 1223.498249][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1223.516601][ T6269] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.527498][ T6276] binder: 6275:6276 transaction failed 29201/-22, size 24-8 line 3274 [ 1223.532022][ T6269] binder: 6267:6269 ioctl 40046207 0 returned -16 [ 1223.546768][ T6278] binder: 6267:6278 transaction failed 29189/-22, size 64-16 line 2995 [ 1223.547152][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1223.572441][ T6279] binder: 6275:6279 transaction failed 29189/-22, size 24-8 line 2995 [ 1223.574491][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1223.604564][T16861] binder: undelivered TRANSACTION_ERROR: 29189 10:49:12 executing program 2: r0 = socket(0x10, 0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x1208400, 0x4) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x896c, &(0x7f00000000c0)={'tunl0\x00', @ifru_ivalue}) 10:49:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fffffffe03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x100000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000f0ffffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x300000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1223.811120][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1223.826745][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1223.833768][ T6297] binder: 6287:6297 got transaction with invalid handle, 0 [ 1223.839550][T16861] binder: undelivered TRANSACTION_ERROR: 29201 10:49:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fcffffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100088a8ffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000380)={@broadcast, @loopback, 0x0, 0x3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x1c) r1 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x4, 0x8000) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000340)=[0x8001, 0x1]) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x40, 0x0) getpeername$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000ff300001e5510400"/20], 0x14}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924924924924f0, 0x0) connect$tipc(r3, &(0x7f0000000400)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x3}}, 0x1000001de) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000180)={{0x3, 0x7}, {0x2b1, 0x100000001}, 0x3, 0x1, 0x2}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x6, [@broadcast, @multicast2, @loopback, @rand_addr=0x3, @multicast2, @local]}, 0x28) [ 1223.863088][ T6285] binder: BINDER_SET_CONTEXT_MGR already set [ 1223.878164][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 [ 1223.878797][ T6285] binder: 6283:6285 ioctl 40046207 0 returned -16 [ 1223.922223][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 10:49:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x3f00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000f0ffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000feffffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xe2b3, &(0x7f0000000100)="b64a498114342ca74f56b30b3d07bb") ioctl(r0, 0x1000008912, &(0x7f00000004c0)="0adc1f123c123f319bd070eb00b32bd3014f9daef256a5126ce74f512bf8108fde29c21848063b5bc5736bba8f40e510414cf7f21ae35399fc4b437194722e5c1b02988fcc8e92eb64d7fb8e8ce2cf53cbf813f3e89aeb2cc1cde702bd0be4b488f7e6fe99344a9e09f3deb2df026744344b9d082ee7b048a524653ba558e4d513d39e15188acbcac6778a0ba52276cc2056f801541c3041b4a14e4d8e5d861aae094fb5de1a3015232a4f3799a756e15fe5e1faf928f09d78b9166c3233c9856f0f8d3eb8daa9f6ede5918b6cff9681cefc7a3579ac4f75ff454cd8b00a38a8753581a493ddaa6c7f8e67") r1 = socket$inet6(0xa, 0x10000000, 0x9163) setsockopt$inet6_int(r1, 0x29, 0x200000000200011, &(0x7f0000000000)=0x200000000002, 0x1) getsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f0000000280)=""/119, &(0x7f0000000240)=0x77) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200200, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0x8011, 0x3}, 0x14) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xffffffffffffffff, 0x0, @mcast2, 0x4}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 1224.095094][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1224.125317][ T6318] binder_fixup_parent: 19 callbacks suppressed [ 1224.125328][ T6318] binder: 6315:6318 got transaction with invalid parent offset or type 10:49:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0xfdfdffff00000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010009effffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1224.248532][ T6318] binder: BINDER_SET_CONTEXT_MGR already set [ 1224.265264][ T6318] binder: 6315:6318 ioctl 40046207 0 returned -16 10:49:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000400f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:12 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) rt_sigtimedwait(&(0x7f0000000140)={0x2}, &(0x7f0000000280), &(0x7f0000000300), 0x8) ioctl(0xffffffffffffffff, 0x1000008914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x8}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x80000000000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@loopback, 0x0, 0x0, 0x0, 0x1}, 0x20) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffaaaaaa0dba61cd9da8f2e4120000000000019078ac2315bbac141411030590780000000045000000000000000004"], 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000003c0)={{0xa, 0x4e20, 0x0, @local}, {0xa, 0x4e23, 0x7, @local, 0x7ff}, 0x8, [0x4, 0xff, 0x5, 0x0, 0x3, 0x1000, 0x1, 0x4]}, 0x5c) unshare(0x40000000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)=0x6, 0x4) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00000c0002000b590482aa6dd37c1a80600704aa2dad99f444763d6c8ea10d0c0181cc39e99edd34548ee0507aa9bcff3e80650db0ec2e913496e265b2e8778765d6d3e0fa132a148f951bcb45395e89d3023b3e306446f26b45e3c42d9813f0a1ecccaf8419a32cd0a7d6e62314e2d6f69738182a89f23c8fbb85150282c282cd3756f7d8616f4a52bed7b0e25b7c7f943ec4b6bd8353b2018df60762e448f40e2201238929b1f554e376221b18050c3aa5561deaab385c4b"]}) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{}], 0x20000000000000e6, 0x0) accept$alg(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x3ff, 0x400, 0x0, 0x81, 0x8}, 0x14) 10:49:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0x3f00}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x500000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000c3ffffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000001f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1224.487499][ T6346] IPVS: ftp: loaded support on port[0] = 21 [ 1224.522861][ T6360] binder: 6359:6360 got transaction with invalid parent offset or type 10:49:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0x1000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1224.608983][ T6372] binder: 6359:6372 got transaction with invalid parent offset or type 10:49:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000f0ffffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1224.712240][ T6377] binder: 6376:6377 got transaction with invalid handle, 0 [ 1224.720982][ T6379] binder: 6378:6379 got transaction with too large buffer [ 1224.733408][ T6380] binder: 6376:6380 got transaction with invalid handle, 0 10:49:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x600000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000002f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1224.954109][ T6394] binder: 6393:6394 got transaction with invalid parent offset or type [ 1224.980496][ T6399] IPVS: ftp: loaded support on port[0] = 21 [ 1225.037561][ T6404] binder: 6393:6404 got transaction with invalid parent offset or type 10:49:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0x1000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0x3f000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000fcffffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000002000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x700000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000feffffff03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000003000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1225.192079][ T6414] binder: 6413:6414 got transaction with invalid parent offset or type 10:49:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:13 executing program 2: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, 0x0, 0x0) 10:49:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0xfdfdffff}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1225.270424][ T6426] binder: 6413:6426 got transaction with invalid parent offset or type [ 1225.329906][ T6432] binder: 6430:6432 got transaction with invalid handle, 0 [ 1225.342328][ T6437] binder: 6436:6437 got transaction with too large buffer 10:49:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x1000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000400f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7e000200002000000040143a96c1e88adf05edc21cfebb7080ecc77334cbf2a1c66d0a") socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/239, 0xef}], 0x1, 0x0) 10:49:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000004000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0xfffffdfd}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1225.503930][ T6445] binder: 6444:6445 got transaction with invalid parent offset or type 10:49:13 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000001f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1225.606760][ T6454] binder: 6444:6454 got transaction with invalid parent offset or type 10:49:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='IPVS\x00', 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="07dc1f123c123f319bd070f6605053aa93813a53f9dc1a58d0eb047bd541843f40b22035746dfa2cc0a6bfaaeeba404111d2bf31fa0df92b14183d033360d4926274355a39403c8611cfba41aad11935d9755db3843bff7a1e51e53c6a5e48e63340dee10ce11883ea430748459ac27e8c745d72a875a0df6cf185ed11aac6a5f3b0c1a55237ec8c762af0b070cca3d2cf69801024717057c0216cd9c665cc3db301dec30c6f0796435a20b4ef69b4f0d4c1268422ed55d796b4a8f2cbe9789e11e0fe47bc08") ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 1225.650538][ T6462] binder: 6460:6462 got transaction with too large buffer 10:49:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000006000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0x100000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000002f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000a000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1225.899803][ T6473] binder: 6472:6473 got transaction with invalid parent offset or type 10:49:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0x3f00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000000)=0x55) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x1, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0x4020565b, &(0x7f0000000180)) 10:49:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1225.992647][ T6490] binder: BINDER_SET_CONTEXT_MGR already set [ 1226.036625][ T6490] binder: 6472:6490 ioctl 40046207 0 returned -16 10:49:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000002000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000c000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1226.124750][ T6503] binder: 6502:6503 got transaction with too large buffer 10:49:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x2800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000e000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:14 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x88bd, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x67, "7f6bf6e1a55491eb4e487a6848b9306bbf989e16af982f807301d125c41a960d2241e67117d51cb535a72411de0148a9fcd5420b94b616ed39ed1326e22cc585817eb405fa2b23f9d0bb0f9984d849bdea144730960d20c66bbec359ea73cee464db9b919ef3d1"}, &(0x7f00000002c0)=0x6f) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r2, 0x7}, &(0x7f0000000340)=0x8) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x2) 10:49:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000003000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85, 0x0, 0x0, 0xfdfdffff00000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x3800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000f000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000004000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:14 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x101a01) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) sendto$inet(r0, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="55c1237d068b70478a2e10e6d971d7e16de2f30ddcca71430d684ef8f19b2c9a666c601f34f2966855bd552b623234e809ded1e0a6103134561f0609496aac24941e1aaa191ab1c0aa5057a5ed913bb0235026ab2127bdd81ccdf4dbe6dee983521977118c541a540f0721de52bd0465fd8b328e5eaa48047dcf8735baa79ce7ff4578bb4071d9a09c0d1c76f54e2287d563ac331d412b6659a54523844fe185e397ebe3d2dac55a9c459382d4ce"], 0x1}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) getrusage(0xffffffffffffffff, &(0x7f0000000240)) recvmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/186, 0xba}], 0x1}}], 0x2, 0x43, 0x0) 10:49:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x3f00}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000010000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000006000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1226.688393][ T6550] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:49:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x1000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000a000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1226.847359][ T6557] binder: BINDER_SET_CONTEXT_MGR already set 10:49:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000060000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x801, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) write$uinput_user_dev(r1, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) [ 1226.890966][ T6557] binder: 6556:6557 ioctl 40046207 0 returned -16 10:49:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x3f000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000c000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000f0000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1227.135163][ T6583] input: syz0 as /devices/virtual/input/input9 10:49:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000030003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000e000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0xfdfdffff}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1227.264709][ T6600] binder: BINDER_SET_CONTEXT_MGR already set [ 1227.311901][ T6600] binder: 6599:6600 ioctl 40046207 0 returned -16 [ 1227.329709][ T6583] input: syz0 as /devices/virtual/input/input10 [ 1227.388223][ T6611] binder_translate_handle: 10 callbacks suppressed [ 1227.388233][ T6611] binder: 6610:6611 got transaction with invalid handle, 0 [ 1227.417413][ T7891] binder: release 6612:6613 transaction 5772 out, still active 10:49:15 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x4, 0x8) setsockopt$packet_int(r0, 0x107, 0xc, 0x0, 0x0) 10:49:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000060003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1227.442943][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x4c00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0xfffffdfd}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000f000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1227.492363][ T7891] binder: send failed reply for transaction 5772, target dead 10:49:15 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f000000cfe4), 0x1c) sendmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[]}}], 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000040)=""/20, &(0x7f0000000080)=0x14) 10:49:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000a0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x5000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000010000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x100000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000c0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1227.811891][ T6649] binder: 6645:6649 got transaction with invalid handle, 0 10:49:16 executing program 2: r0 = socket$isdn(0x22, 0x3, 0x24) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x0, 0x5}, 0x8) r1 = socket(0x8000000000000010, 0x802, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x20}, {r1, 0x2080}, {r1, 0xc4}, {r1, 0x183}, {r1, 0x1}, {r1, 0x2200}, {r1, 0x1080}, {r1, 0x410}], 0x8, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)={0x5}, 0x8) write(r1, &(0x7f0000000040)="24000000210005fb006b000420ed382002190008fd10b5000010ffea08000100050000b7", 0x24) setsockopt$inet6_dccp_int(r1, 0x21, 0x11, &(0x7f0000000180)=0x81, 0x4) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000001c0)={'vlan0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@llc={0x1a, 0x0, 0x15ee, 0x9, 0x1, 0x9, @local}, {&(0x7f0000000000)=""/8, 0x8}, &(0x7f0000000080), 0x41}, 0xa0) socket$rxrpc(0x21, 0x2, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000440)={r2, 0x44, 0x5, [0x0, 0x1, 0x0, 0x9, 0x0]}, &(0x7f0000000480)=0x12) [ 1227.868445][ T6656] binder: 6645:6656 got transaction with invalid handle, 0 [ 1227.889839][ T7891] binder: release 6650:6654 transaction 5792 out, still active [ 1227.897583][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000060000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1227.971606][ T7891] binder: send failed reply for transaction 5792, target dead 10:49:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x3f00000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000e0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1228.115016][ T6671] binder_transaction: 78 callbacks suppressed [ 1228.115034][ T6671] binder: 6663:6671 transaction failed 29201/-22, size 64-16 line 3389 10:49:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000f0000003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1228.242902][ T7891] binder: release 6676:6677 transaction 5800 out, still active [ 1228.263432][ T6683] binder: 6680:6683 got transaction with invalid handle, 0 [ 1228.285944][ T6671] binder: BINDER_SET_CONTEXT_MGR already set 10:49:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0xfdfdffff00000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1228.295317][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1228.314328][ T6671] binder: 6663:6671 ioctl 40046207 0 returned -16 [ 1228.315902][ T6689] binder_alloc: 6663: binder_alloc_buf, no vma [ 1228.322528][ T7891] binder: send failed reply for transaction 5800, target dead [ 1228.328617][ T6684] binder: 6663:6684 transaction failed 29189/-22, size 64-16 line 2995 10:49:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000030003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1228.381051][ T6683] binder: 6680:6683 transaction failed 29201/-22, size 24-8 line 3274 [ 1228.395883][ T6689] binder: 6688:6689 transaction failed 29189/-3, size 24-8 line 3148 [ 1228.426724][ T6696] binder: 6694:6696 transaction failed 29189/-22, size 64-8 line 2995 [ 1228.452551][ T6700] binder: 6688:6700 transaction failed 29189/-22, size 24-8 line 2995 10:49:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000881b0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1228.506926][T16868] binder_release_work: 76 callbacks suppressed [ 1228.506934][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:49:16 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) socketpair(0x7, 0x0, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040), 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='em1useru\x00') ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) [ 1228.566079][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:49:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6800000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000060003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x3f00}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000003f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1228.712392][ T6713] binder: 6712:6713 transaction failed 29189/-22, size 64-8 line 2995 [ 1228.735986][ T6717] binder: 6714:6717 transaction failed 29189/-22, size 24-8 line 2995 10:49:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl(r0, 0xfffffffffffffffe, &(0x7f0000000000)="0adc1f123c123f319bd070") prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000001200)) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfffffffffffffff9, 0x101000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x3, r2, 0x1c, 0x0, @in={0x2, 0x4e21, @broadcast}}}, 0xa0) [ 1228.768730][ T6720] binder: 6719:6720 transaction failed 29201/-22, size 64-16 line 3389 [ 1228.799584][T16868] binder: undelivered TRANSACTION_ERROR: 29189 [ 1228.811902][ T6724] binder: 6714:6724 got transaction with invalid handle, 0 10:49:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000a0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1228.819359][T16868] binder: undelivered TRANSACTION_ERROR: 29189 [ 1228.861552][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1228.868833][ T6724] binder: 6714:6724 transaction failed 29201/-22, size 24-8 line 3274 [ 1228.881253][ T6720] binder: BINDER_SET_CONTEXT_MGR already set 10:49:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000400003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x1000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1228.921946][ T6720] binder: 6719:6720 ioctl 40046207 0 returned -16 [ 1228.922538][ T6731] binder_alloc: 6719: binder_alloc_buf, no vma 10:49:17 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000100)="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") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getpid() syz_open_dev$vbi(&(0x7f0000001100)='/dev/vbi#\x00', 0x2, 0x2) bind$isdn_base(r0, &(0x7f0000001140)={0x22, 0x7fffffff, 0x8, 0x6, 0x100}, 0x6) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0x5000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") dup2(r1, r3) [ 1228.972540][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1229.009087][ C0] net_ratelimit: 20 callbacks suppressed [ 1229.009095][ C0] protocol 88fb is buggy, dev hsr_slave_0 10:49:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000c0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1229.020634][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1229.026474][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.032275][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1229.038551][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 10:49:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x6c00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000065580003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000e0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:17 executing program 2: pipe(0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='syzkaller1\x00') setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x6f) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0xfffffe54}], 0x1, 0x44001) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0xc, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) [ 1229.147722][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 [ 1229.169578][T16868] binder: undelivered TRANSACTION_ERROR: 29189 [ 1229.179135][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 [ 1229.249140][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.255139][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1229.261162][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.267262][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x3f000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0xfdfdffff}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1229.406816][ T6758] binder_fixup_parent: 14 callbacks suppressed [ 1229.406827][ T6758] binder: 6757:6758 got transaction with invalid parent offset or type 10:49:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x3f00}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000600003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x4b564d04, 0x3], [0xc2]}) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$P9_ROPEN(r3, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x1, 0x1, 0x1}, 0x7}}, 0x18) [ 1229.549447][T16868] binder: release 6776:6778 transaction 5824 out, still active [ 1229.570238][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1229.596812][ T6784] binder: 6781:6784 got transaction with invalid handle, 0 [ 1229.604889][ T6758] binder: BINDER_SET_CONTEXT_MGR already set 10:49:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000b4150003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1229.649152][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1229.654996][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1229.672458][T16868] binder: send failed reply for transaction 5824, target dead [ 1229.680510][ T6758] binder: 6757:6758 ioctl 40046207 0 returned -16 10:49:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7400000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x1000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000058650003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0xfffffdfd}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000003f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:18 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2c, @broadcast, 0x4e23, 0x0, 'sh\x00', 0x1a, 0x5, 0x2b}, 0x2c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0xe0fb00, 0x0, 0x0, 0x0) 10:49:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x3f000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000810003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1229.997195][ T6809] binder: 6806:6809 got transaction with invalid parent offset or type 10:49:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000400003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x100000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1230.071586][ T6809] binder: BINDER_SET_CONTEXT_MGR already set 10:49:18 executing program 2: sendto(0xffffffffffffffff, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000001a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1025}, {&(0x7f0000000400)=""/120, 0x64}, {&(0x7f00000001c0)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x251}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0xfffffffffffffdcc}}], 0x4000000000001de, 0xa, &(0x7f0000003700)={0x77359400}) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x40100, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x500, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) [ 1230.138076][ T6809] binder: 6806:6809 ioctl 40046207 0 returned -16 [ 1230.182599][ T6820] binder: 6819:6820 got transaction with invalid handle, 0 [ 1230.182620][ T6818] binder: 6806:6818 got transaction with invalid parent offset or type [ 1230.218861][ T6830] binder: 6819:6830 got transaction with invalid handle, 0 10:49:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000001b880003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1230.260160][ T7891] binder: release 6828:6831 transaction 5839 out, still active [ 1230.270000][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x7a00000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000065580003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0xfdfdffff}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1230.330117][T16868] binder: send failed reply for transaction 5839, target dead 10:49:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@dev}}, 0xe8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x9, 0x10000) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000140), 0x4) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000001c0)="1414d59e6826b40f27000000", 0xc) 10:49:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x3f00000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000600003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0xfdfdffff00000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000f00003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1230.509826][ T6850] binder: 6847:6850 got transaction with invalid parent offset or type 10:49:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0xfffffdfd}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:18 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="4800000000000000140100000100"/24, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/156], @ANYBLOB="0503080000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00'/44], @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/67], @ANYBLOB='C\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad54e5533542e8d91f3fe500"/209], @ANYBLOB="c600000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/15], @ANYBLOB="0f00000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/54], @ANYBLOB="ffff070000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00'/42], @ANYBLOB='*\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/77], @ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB='\x00'/244], @ANYBLOB="f400000000000000", @ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/219], @ANYBLOB="db00000000000000"], @ANYBLOB='\a\x00'/24], 0x48}, 0x0) dup3(r0, r0, 0x80000) pwrite64(r0, &(0x7f0000000280)="b010d8ed8ba4aba2db67631ed6a434ab71238177424ba7968cbf4fad685b579b9b7fdf7a37d9e38c3e2eecab051756d262c27d72d932813416a069dce2725b2467850cc0140eec06816201a58746ec1446eb9846e2155039e45dda9887", 0x5d, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000240)={0x8000000000000, 0x2f5, [0xe5a, 0x4, 0x6, 0x8, 0x7fffffff, 0xa4ff, 0x5, 0x3]}) [ 1230.618891][T16868] binder: release 6862:6863 transaction 5847 out, still active [ 1230.627552][ T6866] binder: 6847:6866 got transaction with invalid parent offset or type [ 1230.645008][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000058650003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1230.698453][ T6871] binder: 6870:6871 got transaction with invalid handle, 0 10:49:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x0, 0x3f00}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x8000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000004f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1230.761090][ T6873] rdma_op 00000000724caa5c conn xmit_rdma (null) [ 1230.776248][ T6877] binder: 6870:6877 got transaction with invalid handle, 0 [ 1230.795595][T16868] binder: send failed reply for transaction 5847, target dead 10:49:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x20201) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x10000000) connect(r1, &(0x7f00000001c0)=@un=@abs, 0x80) 10:49:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000810003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1230.901403][ T6891] binder: 6889:6891 got transaction with invalid parent offset or type 10:49:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x0, 0x1000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000005f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1230.963194][ T6894] binder: 6889:6894 got transaction with invalid parent offset or type 10:49:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x100000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1231.063869][T16868] binder: release 6897:6903 transaction 5862 out, still active [ 1231.080778][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0xfdfdffff00000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x0, 0x3f000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1231.111104][ T7891] binder: send failed reply for transaction 5862, target dead 10:49:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000006f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0x8000000000000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000015b40003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x3f00000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1231.290840][ T6926] binder: 6918:6926 got transaction with invalid parent offset or type [ 1231.295244][ T6924] binder: BINDER_SET_CONTEXT_MGR already set [ 1231.327468][ T6924] binder: 6923:6924 ioctl 40046207 0 returned -16 10:49:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000010f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000f00003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1231.346374][ T6929] binder: 6918:6929 got transaction with invalid parent offset or type 10:49:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x0, 0xfdfdffff}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1231.388087][ T6934] binder: 6923:6934 got transaction with invalid parent offset or type 10:49:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0xfdfdffff00000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1231.478647][T16868] binder: release 6941:6942 transaction 5878 out, still active [ 1231.492275][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:19 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000004f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000020f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85, 0x0, 0x0, 0xffffffff00000000}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x0, 0xfffffdfd}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:19 executing program 2: mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='./control\x00', 0x200000000001ff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x2) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) [ 1231.560931][ T7891] binder: send failed reply for transaction 5878, target dead 10:49:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x66642a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000005f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x0, 0x0, 0x3f00}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x0, 0x100000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000025f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:20 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x100) ioctl$KDENABIO(r0, 0x4b36) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x111000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000040)=""/146) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0xb2c, 0x1, 0x100000001, 0x80000000, 0x0, 0xb902, 0x20000, 0x9, 0x8, 0x8, 0x400, 0x4, 0x0, 0x401, 0x100000001, 0xfffffffffffffffe, 0x80000000, 0x2, 0x7, 0xff, 0x9, 0x40, 0x3, 0x7, 0x0, 0x80, 0x2, 0x5, 0xfffffffffffffff8, 0x7fff, 0xfffffffffffffff7, 0x9, 0x3f6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x9}, 0xa00, 0x7, 0x3, 0x4, 0x7, 0x9, 0x7}, r2, 0x9, r1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0xe75, 0x20, 0x2, 0xff, 0x5, 0x0, 0x1d08000000000000, 0x3, 0x5, 0x3884, 0x2}, 0xb) r3 = semget$private(0x0, 0x0, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x2, r4, 0x1c, 0x1, @in6={0xa, 0x4e22, 0x9b3, @mcast1, 0x1}}}, 0xa0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000380)) write$input_event(r1, &(0x7f00000003c0)={{}, 0x4, 0x197, 0x197}, 0x18) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000400)=0x7) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@loopback, 0x4e21, 0x3f, 0x4e23, 0x9, 0xa, 0x80, 0x80, 0x2f, r5, r6}, {0x7, 0x3, 0x8000, 0x6, 0xfffffffffffff001, 0x5, 0x3, 0x7}, {0x4, 0x3, 0x1ff, 0x2}, 0x2, 0x6e6bbb, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d2, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3503, 0x4, 0x1, 0x401, 0x8, 0x1, 0xff}}, 0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000740)={r5, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={r5, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x27}}, 0xc) r7 = openat$cgroup_ro(r1, &(0x7f00000007c0)='cpuset.effective_mems\x00', 0x0, 0x0) readlink(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)=""/253, 0xfd) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000940)="9e141647f435a991c59873fa474eda46db222682a189021ba26c8e1201747abb365297fd0d334cc9586a7035526adf76e22f18bc6e99bbbf301e1dde405be013fd3dc90b19a5496ce8a081086c551f2090083d81319a7ad747ca937c1bf7b0c2901189c075713572a99a713b0c5533b99b9f9bd4f4775816faef2913c1be90e57d7f8c3d92d0bcf6f3fdee8c27419ebd6d5b70fed952a4902e9a0120d3459d8525ca8ddb6381af495602227ec44165c3bc6545ba6cfb0c2b908c913fe71e48d9e36e33cfd3e9dcaa") write$FUSE_WRITE(r0, &(0x7f0000000a40)={0x18, 0x0, 0x6, {0x100}}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000a80)=""/27, &(0x7f0000000ac0)=0x1b) prctl$PR_GET_TIMERSLACK(0x1e) connect$rxrpc(r7, &(0x7f0000000b00)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @remote, 0x80000000}}, 0x24) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000b40)=""/106) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='trusted.overlay.redirect\x00', &(0x7f0000000cc0)='./file0\x00', 0x8, 0x1) semop(r3, &(0x7f0000000d00)=[{0x4, 0x8}, {0x0, 0x9, 0x800}, {0x4, 0x1, 0x800}, {0x3, 0x2, 0x800}, {0x4, 0x8, 0x800}, {0x4, 0x80000001, 0x1000}, {0x3, 0x8000, 0x800}, {0x7, 0x5}, {0x1, 0x1000000000, 0x1800}], 0x9) [ 1231.913325][ T6979] binder: 6977:6979 got transaction with fd, 0, but target does not allow fds 10:49:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x0, 0x0, 0x1000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1231.953981][T16868] binder: release 6978:6984 transaction 5896 out, still active [ 1231.981017][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1231.983976][ T6989] binder: 6977:6989 got transaction with fd, 0, but target does not allow fds 10:49:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000000000400480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000006f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:20 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) 10:49:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x0, 0x3f00000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000010f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x66646185, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000020003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x0, 0x0, 0x3f000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:20 executing program 2: ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x80800) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000240)={"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"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1232.270178][ T7006] binder_alloc: 6977: binder_alloc_buf, no vma [ 1232.278787][ T7891] binder: send failed reply for transaction 5896, target dead 10:49:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000030003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x0, 0xfdfdffff00000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000020f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x0, 0x0, 0xfdfdffff}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1232.491469][ T7023] binder: 7020:7023 got transaction with invalid parent offset or type 10:49:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000040003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1232.557071][ T7033] binder_translate_handle: 4 callbacks suppressed [ 1232.557082][ T7033] binder: 7032:7033 got transaction with invalid handle, 0 [ 1232.573205][T16868] binder: release 7034:7035 transaction 5910 out, still active [ 1232.583195][ T7023] binder: BINDER_SET_CONTEXT_MGR already set 10:49:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x28000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000300)=0x1f) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) r2 = msgget$private(0x0, 0x200) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000340)=""/147) [ 1232.609293][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1232.637479][ T7023] binder: 7020:7023 ioctl 40046207 0 returned -16 10:49:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000025f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x3f00]}}}], 0x0, 0x0, 0x0}) [ 1232.667485][T16868] binder: send failed reply for transaction 5910, target dead 10:49:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x73622a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000060003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000000000400480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x0, 0x0, 0xfffffdfd}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/121) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000400)=0xe8) r5 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, 0xffffffffffffffff) r7 = getegid() getgroups(0x3, &(0x7f0000000540)=[0xee00, 0xee00, 0xee01]) r9 = getegid() r10 = getgid() getresgid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000640)={{}, {0x1, 0x7}, [{0x2, 0x7, r3}, {0x2, 0x7, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}], {0x4, 0x3}, [{0x8, 0x2, r7}, {0x8, 0x1, r8}, {0x8, 0x2, r9}, {0x8, 0x3, r10}, {0x8, 0x1, r11}], {}, {0x20, 0x1}}, 0x6c, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:49:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x1000000]}}}], 0x0, 0x0, 0x0}) [ 1232.909073][T16868] binder: release 7057:7058 transaction 5914 out, still active [ 1232.916709][T16868] binder: unexpected work type, 4, not freed [ 1232.923361][ T7067] binder: 7066:7067 got transaction with invalid handle, 0 [ 1232.936287][ T7058] binder: BINDER_SET_CONTEXT_MGR already set [ 1232.965216][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1232.991697][ T7891] binder: release 7057:7069 transaction 5918 out, still active [ 1233.005193][ T7058] binder: 7057:7058 ioctl 40046207 0 returned -16 10:49:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000020003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1233.019077][ T7891] binder: unexpected work type, 4, not freed [ 1233.049518][ T7075] binder: 7066:7075 got transaction with invalid handle, 0 10:49:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000a0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1233.061355][ T7073] binder: 7072:7073 got transaction with invalid offset (16777216, min 0 max 64) or object. [ 1233.072628][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x0, 0x0, 0x100000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x73682a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x3f000000]}}}], 0x0, 0x0, 0x0}) [ 1233.193678][ T7891] binder: send failed reply for transaction 5914, target dead [ 1233.213079][ T7891] binder: send failed reply for transaction 5918, target dead 10:49:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000c0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1233.273751][ T7090] binder_transaction: 56 callbacks suppressed [ 1233.273769][ T7090] binder: 7089:7090 transaction failed 29189/-22, size 24-8 line 2995 10:49:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000030003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1233.334624][ T7094] binder: 7093:7094 got transaction with invalid handle, 0 [ 1233.348444][ T7097] binder: 7095:7097 got transaction with invalid offset (1056964608, min 0 max 64) or object. [ 1233.370093][ T7098] binder: 7089:7098 got transaction with invalid handle, 0 [ 1233.408607][ T7094] binder: 7093:7094 transaction failed 29201/-22, size 64-16 line 3274 [ 1233.425947][ T7097] binder: 7095:7097 transaction failed 29201/-22, size 64-8 line 3242 [ 1233.449893][ T7098] binder: 7089:7098 transaction failed 29201/-22, size 24-8 line 3274 [ 1233.495164][ T7104] binder: BINDER_SET_CONTEXT_MGR already set [ 1233.515973][ T7104] binder: 7093:7104 ioctl 40046207 0 returned -16 [ 1233.516006][ T7891] binder_release_work: 54 callbacks suppressed [ 1233.516013][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1233.537867][ T7105] binder: 7093:7105 got transaction with invalid handle, 0 10:49:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000e0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:21 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000040003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1233.565716][ T7105] binder: 7093:7105 transaction failed 29201/-22, size 64-16 line 3274 [ 1233.589257][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1233.659330][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 10:49:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000040003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0xfdfdffff]}}}], 0x0, 0x0, 0x0}) 10:49:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x0, 0x0, 0x3f00000000000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x77622a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000060003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1233.970242][ T7126] binder: 7123:7126 transaction failed 29189/-22, size 64-8 line 2995 [ 1233.996559][ T7128] binder: 7127:7128 got transaction with invalid handle, 0 [ 1233.999925][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 [ 1234.010992][ T7120] binder: BINDER_SET_CONTEXT_MGR already set 10:49:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000100003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1234.017038][ T7120] binder: 7119:7120 ioctl 40046207 0 returned -16 [ 1234.023229][ T7891] binder: send failed reply for transaction 5935 to 7119:7120 [ 1234.032935][ T7128] binder: 7127:7128 transaction failed 29201/-22, size 24-8 line 3274 [ 1234.039472][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1234.049634][ T7129] binder: 7119:7129 transaction failed 29189/-22, size 64-16 line 2995 10:49:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000a0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1234.066194][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 10:49:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0xfffffdfd]}}}], 0x0, 0x0, 0x0}) 10:49:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000600003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:22 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8b0, 0x101100) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000140)="2521745fae3ee3b7777ba29b9abb1a7401755af121464e2725d889427f", 0x1d}, {&(0x7f0000000180)="afe20b710defdb577a0c2c75c99ca6051fc664b3def798ce6bb233a81ca2fe42df0ee628f4bf91b516ac4ba28eee6ea8f06426b7d3660d8dc8ab578f14397d6ce34c8ca2674e477649bc0563b2aee99e561eb55e86070575ad20cfc99f515fe2181b1e616876c9a32a62d9668780b5327621be31dc1ee7da0bc4a942675e5b48d95919f97db67d1b316487c8f0421af81140ccba5c8854edf00cd3cb55b2aef3fc5caa809a8d6d0180330858be99eae4f7ca1c2bbffa7fa18fccac711aaf78438de26129cbd8963fbecc04da9d9dc0940dec653727d84cdca7a9df3ae8a4e7b8d0ffab3a121fc4396bb48321cf114f64d5fe6e", 0xf3}, {&(0x7f0000000280)="19e0041d148ce6dce2db96e208785fcd12160dd4b8e5f6fd0f4d7cef19422dab5f937da8e10d41f0b50355f71ae082af523db4cb1eac6865b1c66614765bd2a725696c486eeb4b6bced8992f", 0x4c}, {&(0x7f0000000300)="c8cd352c6c6c9d7cbfaa3733bb0bb4799894e59148010d88977f8b75b338bca3fb14ab95b6a8a1d8cf791118cebf5646f15b312cdf7054cb4d28bbd72b74f1d715876438915339c5caefb8f3b648683894cf0c9a00c06064e06b517616f02f052ba232e7e54ce62ba0ab278bd439b02f914c9bf60d9612d0880f3a9e17f5c99b2788755b8a5fa2a2de44e02307b1c6b65ee9203948867730b99d99665822ba4c6896b948d527f95c5e4aa77ed075e3b1ae77c0", 0xb3}], 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1234.122542][T16868] binder: undelivered TRANSACTION_ERROR: 29189 [ 1234.138566][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1234.147178][ T7137] binder: 7127:7137 transaction failed 29189/-22, size 24-8 line 2995 10:49:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x77682a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1234.202221][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:49:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85, 0x0, 0x0, 0xfdfdffff00000000}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1234.262666][ T7145] binder: 7144:7145 transaction failed 29189/-22, size 64-8 line 2995 10:49:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000c0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000f00003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1234.332346][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 [ 1234.343364][ T7152] binder: 7150:7152 got transaction with invalid handle, 0 [ 1234.354955][ T7154] binder: 7153:7154 got transaction with invalid handle, 0 10:49:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x100000000000000]}}}], 0x0, 0x0, 0x0}) 10:49:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000e0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1234.405682][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1234.429675][ T7163] binder: 7150:7163 got transaction with invalid handle, 0 10:49:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) sendto(r1, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x1, 0x401, 0x3f, 0x40, 0x5, 0x2}) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_procfs(0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1008}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 10:49:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x3f00]}}}], 0x0, 0x0, 0x0}) 10:49:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000303f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0x1000000, 0x0}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1234.527745][ T7170] binder: 7168:7170 got transaction with invalid offset (72057594037927936, min 0 max 64) or object. 10:49:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000603f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000000f0003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x1000000]}}}], 0x0, 0x0, 0x0}) 10:49:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x3f00000000000000]}}}], 0x0, 0x0, 0x0}) [ 1234.690145][ T7891] binder: release 7182:7183 transaction 5956 out, still active [ 1234.710086][ T7183] binder: BINDER_SET_CONTEXT_MGR already set [ 1234.712767][ T7891] binder: unexpected work type, 4, not freed [ 1234.752709][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1234.780020][ T7183] binder: 7182:7183 ioctl 40046207 0 returned -16 [ 1234.786705][ T7891] binder: send failed reply for transaction 5956, target dead 10:49:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x400) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/228) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 10:49:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000a03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0xfdfdffff00000000]}}}], 0x0, 0x0, 0x0}) 10:49:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x2}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000100003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x3f000000]}}}], 0x0, 0x0, 0x0}) [ 1234.945519][ T7205] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1235.026721][ T7205] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 10:49:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'\x01\x00\x00\x00\b\x00\x1a\xc2\xa1$\xe9\xff\xff\xff\x00\xcb', {0x2, 0x0, @empty}}) [ 1235.079798][ T7220] binder: 7217:7220 got transaction with too large buffer 10:49:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0xfdfdffff]}}}], 0x0, 0x0, 0x0}) 10:49:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000600003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}, 0x3f00}}], 0x0, 0x0, 0x0}) 10:49:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000c03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1235.166294][ T7228] binder: 7217:7228 got transaction with too large buffer 10:49:23 executing program 2: clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10800, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x19f7b7b9ba8625e0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x10', 0x3, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) modify_ldt$read_default(0x2, &(0x7f0000000140)=""/104, 0x68) 10:49:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x3}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1235.249148][ C0] net_ratelimit: 20 callbacks suppressed [ 1235.249157][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1235.260700][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1235.266561][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1235.272396][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000e03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000f00003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1235.368675][ T7251] binder: 7247:7251 got transaction with too large buffer [ 1235.377471][ T7234] binder: 7232:7234 got transaction with invalid offset (4261281791, min 0 max 24) or object. 10:49:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}, 0x1000000}}], 0x0, 0x0, 0x0}) 10:49:23 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x30) r1 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x1, 0x200) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/current\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/179, 0xb3}], 0x1, &(0x7f0000000500)=""/249, 0xf9}, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000740)={0x0, 0x70, 0x5, 0x280000000000, 0x6, 0x66dc, 0x0, 0x101, 0x8000, 0x1, 0x10001, 0x0, 0x480, 0x8, 0x1, 0x6c, 0x7fffffff, 0x3, 0x343fecb2, 0x6, 0x20, 0x3, 0x0, 0x0, 0x9, 0x8, 0x80000001, 0x8001, 0x7, 0xb, 0x8, 0x4, 0x0, 0x4, 0x9, 0x400, 0xffffffffffffff8f, 0x8, 0x0, 0xfffffffffffeffff, 0x1, @perf_bp={&(0x7f0000000700), 0x8}, 0x88, 0x1, 0x7, 0x7, 0x2ddb, 0x1ff, 0x1ff}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) r6 = syz_open_dev$adsp(&(0x7f00000007c0)='/dev/adsp#\x00', 0x9, 0x402) r7 = socket$caif_stream(0x25, 0x1, 0x1) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000800)=0xffffffffffffffff, 0x4) r9 = socket$netlink(0x10, 0x3, 0x8) r10 = perf_event_open$cgroup(&(0x7f0000000840)={0x5, 0x70, 0x8000, 0x3, 0xffff, 0x100, 0x0, 0x100000000, 0x140, 0x1, 0x7ff, 0x8542, 0x4, 0x7, 0x8, 0x2, 0xd3f, 0x800, 0x5, 0x20, 0x10000, 0x1, 0x6, 0x0, 0xffffffff, 0x6, 0x5, 0x2, 0x8, 0x5, 0x1, 0x200, 0x1, 0xb3, 0x2, 0xfffffffffffff1cd, 0x0, 0x3f, 0x0, 0x3, 0x7, @perf_config_ext={0x5}, 0x4000, 0x4, 0xbe38000000000000, 0x7, 0x8, 0xd2e, 0x1}, 0xffffffffffffff9c, 0x10, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000008c0)=[r1, r2, r3, r4, r5, r6, r7, r8, r9, r10], 0xa) r11 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r11, 0xc2, 0x0) [ 1235.458817][ T7251] binder: BINDER_SET_CONTEXT_MGR already set [ 1235.489191][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1235.495149][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1235.501168][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1235.506532][ T7258] binder_alloc: 7247: binder_alloc_buf, no vma [ 1235.507025][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1235.513399][ T7251] binder: 7247:7251 ioctl 40046207 0 returned -16 10:49:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000002ec0)=0x6) read(r0, &(0x7f0000000140)=""/185, 0xb9) r1 = syz_open_pts(r0, 0x284000) ioctl$TCXONC(r1, 0x540a, 0x0) 10:49:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0xfffffdfd]}}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}, 0x3f000000}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000303f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}, 0xfdfdffff}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x100000000000000]}}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000603f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000881b03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1235.794033][ T7285] binder: 7284:7285 got transaction with too large buffer [ 1235.816462][ T7288] binder: 7284:7288 got transaction with too large buffer 10:49:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x5}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1235.889128][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1235.895037][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x3f00000000000000]}}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}, 0xfffffdfd}}], 0x0, 0x0, 0x0}) [ 1235.961985][ T7304] binder: 7299:7304 got transaction with too large buffer [ 1235.985399][ T7305] binder: 7299:7305 got transaction with too large buffer [ 1236.084404][ T7311] binder: 7310:7311 got transaction with invalid offset (4539628424389459968, min 0 max 24) or object. 10:49:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@empty, @loopback, 0x1, 0x2, [@empty, @rand_addr=0x200]}, 0x18) unshare(0x2000400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000000c0), 0x4) 10:49:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000003f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000a03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}, 0x100000000000000}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0xfdfdffff00000000]}}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}, 0x3f00000000000000}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000c03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1236.556143][ T7331] binder: 7330:7331 got transaction with too large buffer [ 1236.586117][ T7335] binder: 7330:7335 got transaction with too large buffer 10:49:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0x3f00}}], 0x0, 0x0, 0x0}) 10:49:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000004003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000001200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x100000004e21, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x400000000000174, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x6, 0x7}, 0x14) write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4) r3 = syz_open_pts(r0, 0x80000000006) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000001c0)={0x2f, 0xff, 0x1ff, 0x2, 0x800}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)=0x5, 0x4) r4 = dup3(r3, r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) write$UHID_INPUT(r4, &(0x7f0000001640)={0x300, "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", 0x1000}, 0x1006) ioctl$KDADDIO(r4, 0x4b34, 0x10001) 10:49:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}, 0xfdfdffff00000000}}], 0x0, 0x0, 0x0}) 10:49:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0x1000000}}], 0x0, 0x0, 0x0}) 10:49:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000e03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000655803f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1236.833041][ T7356] binder: 7355:7356 got transaction with too large buffer [ 1236.942170][ T7364] binder_alloc: 7355: binder_alloc_buf size -144678142324244408 failed, no address space 10:49:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x10}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000006003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1237.025212][ T7364] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 10:49:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1237.091229][ T7371] binder_alloc: 7355: binder_alloc_buf, no vma 10:49:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x3f00, 0x0, 0x0}) 10:49:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0x3f000000}}], 0x0, 0x0, 0x0}) [ 1237.249733][ T7387] binder: 7386:7387 ioctl c0306201 20000780 returned -14 [ 1237.284454][T16868] binder: release 7386:7387 transaction 6041 out, still active 10:49:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000b41503f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1237.300241][ T7389] binder_alloc: 7374: binder_alloc_buf size 1056964640 failed, no address space [ 1237.312400][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1237.327222][ T7389] binder_alloc: allocated: 72 (num: 1 largest: 72), free: 12216 (num: 1 largest: 12216) [ 1237.370877][ T7891] binder: send failed reply for transaction 6041, target dead 10:49:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000001200)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x100000004e21, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x400000000000174, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x6, 0x7}, 0x14) write$UHID_DESTROY(r1, &(0x7f0000000200), 0x4) r3 = syz_open_pts(r0, 0x80000000006) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000001c0)={0x2f, 0xff, 0x1ff, 0x2, 0x800}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)=0x5, 0x4) r4 = dup3(r3, r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) write$UHID_INPUT(r4, &(0x7f0000001640)={0x300, "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", 0x1000}, 0x1006) ioctl$KDADDIO(r4, 0x4b34, 0x10001) 10:49:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000586503f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x28}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x1000000, 0x0, 0x0}) 10:49:25 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000003f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0xfdfdffff}}], 0x0, 0x0, 0x0}) 10:49:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000004003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000008103f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1237.654874][ T7407] binder_alloc: 7400: binder_alloc_buf size 4261281824 failed, no address space [ 1237.688357][ T7407] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 10:49:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x38}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1237.733283][ T7406] binder_alloc: 7400: binder_alloc_buf, no vma [ 1237.747093][ T7406] binder: 7405:7406 ioctl c0306201 20000780 returned -14 10:49:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0xfffffdfd}}], 0x0, 0x0, 0x0}) 10:49:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x3f000000, 0x0, 0x0}) 10:49:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000655803f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1237.961566][ T7430] binder: 7429:7430 ioctl c0306201 20000780 returned -14 [ 1238.030259][T16868] binder: release 7429:7430 transaction 6065 out, still active [ 1238.089528][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1238.113430][T16868] binder: send failed reply for transaction 6065, target dead 10:49:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0x3f000000}}], 0x0, 0x0, 0x0}) 10:49:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c0100000001b8803f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0x100000000000000}}], 0x0, 0x0, 0x0}) 10:49:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x48}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000006003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0xfdfdffff, 0x0, 0x0}) [ 1238.281181][ T7449] binder_transaction: 61 callbacks suppressed [ 1238.281199][ T7449] binder: 7448:7449 transaction failed 29189/-22, size 24-8 line 2995 [ 1238.314133][ T7453] binder: 7450:7453 transaction failed 29201/-22, size 64-16 line 3357 [ 1238.322909][ T7452] binder: 7451:7452 ioctl c0306201 20000780 returned -14 [ 1238.327338][ T7455] binder_alloc: 7450: binder_alloc_buf size 1056964640 failed, no address space [ 1238.346041][T16868] binder: send failed reply for transaction 6071 to 7451:7452 [ 1238.357927][ T7457] binder: 7450:7457 transaction failed 29201/-22, size 64-16 line 3357 [ 1238.371164][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000586503f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000000f003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1238.382035][ T7455] binder_alloc: allocated: 72 (num: 1 largest: 72), free: 12216 (num: 1 largest: 12216) [ 1238.404194][ T7456] binder_alloc: 7450: binder_alloc_buf, no vma [ 1238.410949][ T7455] binder: 7454:7455 transaction failed 29201/-28, size 24-8 line 3148 10:49:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0xfffffdfd, 0x0, 0x0}) [ 1238.430401][ T7456] binder: 7448:7456 transaction failed 29189/-3, size 24-8 line 3148 10:49:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4c}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0x3f00000000000000}}], 0x0, 0x0, 0x0}) [ 1238.493124][ T7467] binder: 7466:7467 ioctl c0306201 20000780 returned -14 [ 1238.494375][ T7891] binder: send failed reply for transaction 6078 to 7466:7467 10:49:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000400f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0x3f000000}}], 0x0, 0x0, 0x0}) 10:49:26 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000008103f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1238.578149][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1238.590547][T16868] binder_release_work: 66 callbacks suppressed [ 1238.590555][T16868] binder: undelivered TRANSACTION_ERROR: 29189 [ 1238.635704][ T7471] binder_alloc: 7472: binder_alloc_buf size 4539628424389460000 failed, no address space 10:49:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x100000000000000, 0x0, 0x0}) [ 1238.719789][ T7471] binder_alloc: allocated: 80 (num: 1 largest: 80), free: 12208 (num: 1 largest: 12208) [ 1238.746934][ T7471] binder: 7470:7471 transaction failed 29201/-28, size 24-8 line 3148 [ 1238.750381][ T7473] binder: 7472:7473 transaction failed 29201/-22, size 64-16 line 3357 [ 1238.763868][T16868] binder: undelivered TRANSACTION_ERROR: 29201 10:49:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000e01f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000015b403f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1238.767157][ T7487] binder_alloc: 7472: binder_alloc_buf size 4539628424389460000 failed, no address space [ 1238.790324][ T7487] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1238.812104][ T7483] binder_alloc: 7472: binder_alloc_buf size 1056964640 failed, no address space [ 1238.830088][ T7487] binder: 7470:7487 transaction failed 29201/-28, size 24-8 line 3148 [ 1238.842463][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1238.859510][ T7492] binder: 7472:7492 transaction failed 29201/-22, size 64-16 line 3357 [ 1238.870496][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1238.890712][ T7483] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1238.909812][T16868] binder: undelivered TRANSACTION_ERROR: 29201 10:49:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0xfdfdffff00000000}}], 0x0, 0x0, 0x0}) 10:49:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000000f003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000203f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1238.919892][ T7483] binder: 7479:7483 transaction failed 29201/-28, size 24-8 line 3148 [ 1238.932703][ T7488] binder_alloc: 7472: binder_alloc_buf, no vma [ 1238.948921][ T7488] binder: 7486:7488 ioctl c0306201 20000780 returned -14 10:49:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x50}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1239.003052][T16868] binder: undelivered TRANSACTION_ERROR: 29189 [ 1239.035723][T16868] binder: undelivered TRANSACTION_ERROR: 29201 10:49:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x3f00000000000000, 0x0, 0x0}) [ 1239.073317][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:49:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000303f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x3f00, 0x0, 0x0}) [ 1239.124658][ T7509] binder: BINDER_SET_CONTEXT_MGR already set [ 1239.139645][ T7509] binder: 7508:7509 ioctl 40046207 0 returned -16 [ 1239.146312][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1239.156818][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:49:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}, 0x3f000000}}], 0x0, 0x0, 0x0}) 10:49:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000400f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1239.179975][ T7513] binder: 7512:7513 ioctl c0306201 20000780 returned -14 [ 1239.230947][ T7520] binder: 7519:7520 ioctl c0306201 20000780 returned -14 10:49:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x60}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000403f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x48}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1239.301878][ T7527] binder: 7519:7527 ioctl c0306201 20000780 returned -14 10:49:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0xfdfdffff00000000, 0x0, 0x0}) 10:49:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x68}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000e01f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x1000000, 0x0, 0x0}) 10:49:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000603f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1239.472160][ T7541] binder: 7537:7541 ioctl c0306201 20000780 returned -14 [ 1239.507225][ T7542] binder: BINDER_SET_CONTEXT_MGR already set [ 1239.562432][ T7542] binder: 7539:7542 ioctl 40046207 0 returned -16 [ 1239.562445][T16868] binder: release 7537:7541 transaction 6114 out, still active [ 1239.591349][ T7550] binder_translate_handle: 1 callbacks suppressed [ 1239.591361][ T7550] binder: 7548:7550 got transaction with invalid handle, 0 10:49:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000180)={0x80102, 0x1}) bind$inet(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xdc, "d179ca8da18aca662eb9be175a6d548c2514528eca904bf170e146b91107d5523deb1b49e4a666b9b27647ac66b3ad1ee3a5a6661acac1f65676b75662db7ff852cf7e847cc8d3b8d7538157646d78904f4e958271266382d409c2c69a63bedbe93a96f6f8e43677a876bb6ae7c6dd5e2a8d258fea8747fe65202c5483d99a5f7f99580cebd1cf2bbd714caa4adb1e5ded75840652c525e646dee7dad816fb46e7dc0ff3a429b40474c9e667b8886deccb9a3974d9a9f2b4ee83a0e4e9fe85f5afd83532a024ac77ac116591043373b23b69f954708622139af1d574"}, &(0x7f0000000000)=0xe4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x4}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000200)=0xfff) 10:49:27 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000203f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x3f00, 0x0}) [ 1239.609752][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1239.619802][ T7551] binder_alloc: 7538: binder_alloc_buf, no vma [ 1239.625304][T16868] binder: send failed reply for transaction 6114, target dead 10:49:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000a03f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1239.705543][ T7550] binder: 7548:7550 ioctl c0306201 20000780 returned -14 [ 1239.740259][ T7566] binder: 7548:7566 ioctl c0306201 20000780 returned -14 10:49:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000303f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000c03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6c}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x3f000000, 0x0, 0x0}) 10:49:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x1000000, 0x0}) 10:49:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000403f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1239.987967][ T7585] binder: 7577:7585 ioctl c0306201 20000780 returned -14 10:49:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000e03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x3f000000, 0x0}) [ 1240.059452][ T7588] binder: 7577:7588 got transaction with invalid handle, 0 [ 1240.187514][ T7588] binder: 7577:7588 ioctl c0306201 20000780 returned -14 10:49:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') getsockopt$TIPC_SOCK_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14, 0x19, {0x0, 0x0, 0x0, 0x400}}}}, 0xffffffffffffff9b}}, 0x0) 10:49:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x74}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000603f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0xfdfdffff, 0x0}) 10:49:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0xfdfdffff, 0x0, 0x0}) 10:49:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000001003f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1240.458712][ T7611] binder: 7610:7611 ioctl c0306201 20000780 returned -14 [ 1240.478660][ T7614] binder_transaction: 18 callbacks suppressed [ 1240.478671][ T7614] binder: 7605:7614 got transaction with too large buffer 10:49:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0xfffffdfd, 0x0}) 10:49:28 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000a03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") open(&(0x7f0000000080)='./file0\x00', 0x100, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x7fff, 0x1000, 0x2, 0x4, 0xb5, "c07a8cf19ede1f20ae989a60a89407005a4eb4", 0x4db, 0x6}) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000180)) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000140)) preadv(r1, &(0x7f00000017c0), 0x324, 0x400000000000) [ 1240.527430][ T7619] binder: 7610:7619 got transaction with invalid handle, 0 [ 1240.564923][ T7622] binder: 7605:7622 got transaction with too large buffer [ 1240.617133][ T7619] binder: 7610:7619 ioctl c0306201 20000780 returned -14 [ 1240.622981][T16868] binder: release 7625:7626 transaction 6145 out, still active [ 1240.644876][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0xfffffdfd, 0x0, 0x0}) 10:49:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000006003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7a}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x100000000000000, 0x0}) [ 1240.697428][T16868] binder: send failed reply for transaction 6145, target dead 10:49:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000c03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:29 executing program 2: acct(&(0x7f0000000000)='./file0\x00') futex(0x0, 0x112000000000086, 0x0, 0x0, 0x0, 0x0) [ 1240.794763][ T7642] binder: 7640:7642 got transaction with too large buffer [ 1240.832689][ T7646] binder: 7636:7646 got transaction with invalid handle, 0 [ 1240.844716][T16868] binder: release 7641:7643 transaction 6150 out, still active [ 1240.859638][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1240.872735][ T7646] binder: 7636:7646 ioctl c0306201 20000780 returned -14 [ 1240.885000][ T7642] binder: BINDER_SET_CONTEXT_MGR already set 10:49:29 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000bfa000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000200)="f082b72f89d066b9800000c00f326635001000000f30660f3a627cb700ba2000ec660f3a4051007d660f3a0a1fe966b9260b00000f32640f2fb598670f01ba000026640fc71f", 0x46}], 0x1, 0x12, &(0x7f0000000280)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x10001, 0x0, 0x8a0, 0x0, 0x8}], 0x1) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/128, &(0x7f0000000300)=0xf) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r3, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x2, 0x1, 0x2}}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x0) fcntl$setsig(r2, 0xa, 0x41) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000500)={0x10000, 0x1f, 0x0, 0xffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000666ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc0") getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) 10:49:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000e03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000005f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x3f00000000000000, 0x0}) [ 1240.907276][T16868] binder: send failed reply for transaction 6150, target dead [ 1240.922269][ T7642] binder: 7640:7642 ioctl 40046207 0 returned -16 [ 1240.930730][ T7656] binder: 7636:7656 ioctl c0306201 20000780 returned -14 10:49:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x300}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x100000000000000, 0x0, 0x0}) 10:49:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0xfdfdffff00000000, 0x0}) 10:49:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000f03f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000006f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1241.197715][ T7681] binder: 7678:7681 ioctl c0306201 20000780 returned -14 [ 1241.236973][ T7675] binder: 7674:7675 got transaction with too large buffer 10:49:29 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4000, 0x703381) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000001a40)={@initdev, 0x0}, &(0x7f0000001a80)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f0000008280)=[{{&(0x7f0000001ac0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001b40)=""/69, 0x45}, {&(0x7f0000001bc0)=""/169, 0xa9}, {&(0x7f0000001c80)=""/235, 0xeb}], 0x3, &(0x7f0000001dc0)=""/235, 0xeb}, 0x800}, {{&(0x7f0000001ec0)=@l2, 0x80, &(0x7f0000003080)=[{&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/143, 0x8f}, {&(0x7f0000003000)=""/68, 0x44}], 0x3, &(0x7f00000030c0)=""/254, 0xfe}, 0x8}, {{&(0x7f00000031c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003240)=""/162, 0xa2}, {&(0x7f0000003300)}, {&(0x7f0000003340)=""/85, 0x55}, {&(0x7f00000033c0)=""/231, 0xe7}], 0x4, &(0x7f0000003500)=""/197, 0xc5}, 0x2}, {{&(0x7f0000003600)=@rc, 0x80, &(0x7f0000004880)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000004680)=""/45, 0x2d}, {&(0x7f00000046c0)=""/178, 0xb2}, {&(0x7f0000004780)=""/179, 0xb3}, {&(0x7f0000004840)=""/42, 0x2a}], 0x5}, 0x3ba}, {{&(0x7f0000004900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005a80)=[{&(0x7f0000004980)=""/12, 0xc}, {&(0x7f00000049c0)=""/138, 0x8a}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x3, &(0x7f0000005ac0)=""/11, 0xb}, 0x6}, {{&(0x7f0000005b00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005b80)=""/60, 0x3c}, {&(0x7f0000005bc0)=""/5, 0x5}, {&(0x7f0000005c00)=""/66, 0x42}], 0x3, &(0x7f0000005cc0)=""/23, 0x17}, 0x6}, {{0x0, 0x0, &(0x7f0000008100)=[{&(0x7f0000005d00)=""/255, 0xff}, {&(0x7f0000005e00)=""/143, 0x8f}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/221, 0xdd}, {&(0x7f0000006fc0)=""/114, 0x72}, {&(0x7f0000007040)=""/4096, 0x1000}, {&(0x7f0000008040)=""/191, 0xbf}], 0x7, &(0x7f0000008180)=""/230, 0xe6}, 0xbb}], 0x7, 0x40000040, &(0x7f0000008440)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008480)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000008580)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000085c0)={'veth0_to_team\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008600)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000008700)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000089c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000008980)={&(0x7f0000008740)={0x218, r1, 0x210, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x12c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa48}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff3cdc}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}]}}, {{0x8, 0x1, r5}, {0xc8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x7, 0x4, 0x10001, 0x7}, {0x9, 0x7, 0x9f, 0x6}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x840}, 0x20008080) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1241.257458][ T7689] binder: 7678:7689 got transaction with invalid handle, 0 [ 1241.274977][ T7693] binder: 7674:7693 got transaction with too large buffer 10:49:29 executing program 2: r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)="bbfa2601500b667ebf65ce2922257a3da57b8e0ce8bb9333d5db851ed652cd880033b24a1a57130787a7a9c4db4dd7c01579ac3eef15dfdab8e34f2876e01363617b27a4f650629608048086165a13c5009fc2d15582ec00d631c64a862d7d50678805d580b3f65f797290455701c7dffbc7adfa1a843367a19f1068c9b0df75ebeaf6bcee9cf1ff09605aaf71d8a74394b5f8ae8a242dce1917b331adeb3fe38cd18adbc11161230636aa8e6681c75b18b3219d7a4aed69a1afb4f0bfd42ef1acade81cf0efb2f1701f6f81df1e3d0d4cbd41403493225c6fa02c8826d993dbf24b2b8af9995be95712429ea8ff0b18f8e4d1d5", 0xf4, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000001c0)={r0, 0xfffffffffffffffe, 0x5}, &(0x7f0000000200)={'enc=', 'pkcs1', ' hash=', {'cbcmac(tea)\x00'}}, &(0x7f0000000280)="0dba581620786b73ac9ae784dcacda523074eaa024eb5a76e6c1d18f7abcb795127b7c828d74fc98b1d2df80f45242e338b5f7ca7403fd4d22d81465cf67bc845a1704bfdb0d8d8c35fa83d648446e79db87e136d89b919845b90694322a3a179c6610433cde41f023c99bd1ac88108b67303dbe51176a22210a49da0a4e8c210aaa6f23116a458d0ca5cd1c1c53ad342be2361f77e857cdba1e61f071431ab7b776e3c17ecc3819cdbb888af46d4e94aa0887dfafe91839cc59b427ba46992063cefa35cb", &(0x7f00000005c0)=""/234) r1 = socket$kcm(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x46, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f0000000480)='/dev/dsp#\x00', 0x0, 0x2001) lsetxattr$security_evm(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='security.evm\x00', &(0x7f0000000580)=@sha1={0x1, "0ec45c98a3185b503a23c5dfb2df785cd044f573"}, 0x15, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f00000004c0)=0x7ff) keyctl$set_timeout(0xf, r0, 0xffffffffffffffff) [ 1241.316330][ T7689] binder: 7678:7689 ioctl c0306201 20000780 returned -14 10:49:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000001003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000020f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x3f00000000000000, 0x0, 0x0}) 10:49:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x500}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:29 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) syz_open_dev$video(0x0, 0x1, 0x2) r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x32) r2 = dup2(r0, r1) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000002c0)={0x0, 0x2}) msgget(0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sched_getattr(0x0, &(0x7f0000000480), 0x30, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000b788a5b63170794282f71af3540d2f3c688b0ca20bc0ba020fdd989c79433b176e909e55c587b266a77a53d9eddb6fb749116a6aee1077ee285b4736d12278564cebd93ff05337fe555a3701e401bd5a7603", @ANYRES16=r4, @ANYBLOB="100029bd7000fcdbdf25050000000c000300080008000500000024000200080006000800000008000600020000000800030007000000080005000000000008000500000000000800040007000000"], 0x54}, 0x1, 0x0, 0x0, 0x40000000004}, 0x8010) arch_prctl$ARCH_GET_CPUID(0x1011) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000300)) 10:49:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x8400) sendto$inet6(r1, &(0x7f0000000100)="82340f1b3411a5d3721aaa4063ba6dc20deaa7146db199dbf1bcdca8286983a2ba5475cda94c84fdea41336a8b06f1a6c6c231a0795ceb3e8b8fb5f1c362cb2794edfb9a80249a72783af34a51e40d7ee99b54aad62e401e3a821bfdfb3de34b88a61e3a215c", 0x66, 0x84, &(0x7f0000000080)={0xa, 0x4e23, 0x3f, @mcast1, 0x6}, 0x1c) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0}) [ 1241.489166][ C0] net_ratelimit: 20 callbacks suppressed [ 1241.489175][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.500835][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1241.506714][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.512542][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000006003f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000025f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1241.553212][ T7710] binder: 7709:7710 ioctl c0306201 20000780 returned -14 [ 1241.583828][ T7717] binder: 7709:7717 ioctl c0306201 20000780 returned -14 10:49:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0xfdfdffff00000000, 0x0, 0x0}) [ 1241.683928][ T7728] binder: 7724:7728 got transaction with too large buffer 10:49:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) ioctl$KDADDIO(r1, 0x4b34, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0xffffffffffffff2b, 0x7]) 10:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000005f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1241.730730][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.737964][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1241.745080][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1241.752080][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1241.762099][ T7733] binder: 7724:7733 got transaction with too large buffer 10:49:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000000000400480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1241.810865][ T7737] binder: 7735:7737 got transaction with invalid handle, 0 10:49:30 executing program 2: r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, 0x0, 0x203) r1 = msgget(0x1, 0x100) msgsnd(r1, &(0x7f0000000000)={0x2, "c6caaf63d04244e61fc27ef5871b8526a12d057580459de07a45eabb2f2e7d3a2aae7f6d3776a200c40e63133d466b548a5258976085f876bee5eb2c00fb2efe4857081b256815728c9afb684c823565937a60b324"}, 0x5d, 0x800) [ 1241.854992][T16868] binder: release 7741:7742 transaction 6176 out, still active [ 1241.876294][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1241.889617][ T7737] binder: 7735:7737 ioctl c0306201 20000780 returned -14 10:49:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x7, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000380)) r2 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)="c4939c1bedc34e3f24697292b697a5ecdc7deb16bfee6e47fcd8da32c2e700e80536e96fa73379bf1d25f614b76ac52661ee44bc1b0f3fd7f71b46e139ffb6daa273c7f0b0247d71c69728c141392fe45efe4de8ea067f8d213820076b0ed6cac539d8e476a8b435de003a63a37afe0385554f9734591eb430307f5f9f1a265590bd0bf3d8a587dc65ab6084edb814416a4f2522d7a5dc495cddce70752e83982423de4118ff58c2610cb593621da9ae82ca2f2b3c8f9528066944df0dbe71c645a7e60e3f4ec6acb7b6c5989acde98d46805513549d4cced7d906c7e4919c63e2b6b8782b412f7d566c94baf85b93383cad85946312", 0xf6, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000280)='encrypted\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/binder#\x00', 0xfffffffffffffffd) connect$bt_rfcomm(r1, &(0x7f0000000440)={0x1f, {0x1, 0xade7, 0x7ff, 0xffffffffffffffff, 0x1, 0x10000}, 0xffffffffffff9d31}, 0xa) keyctl$search(0xa, r2, &(0x7f0000000200)='blacklist\x00', &(0x7f0000000240)={'syz', 0x2}, r3) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000140000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1241.916429][T16868] binder: release 7741:7745 transaction 6177 out, still active [ 1241.948016][ T7749] binder: 7735:7749 got transaction with invalid handle, 0 [ 1241.959493][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000006f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1241.971912][ T7749] binder: 7735:7749 ioctl c0306201 20000780 returned -14 10:49:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x600}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000002f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x3f00, 0x0}) 10:49:30 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x400100) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) syz_emit_ethernet(0x168, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x132, 0x2c, 0x0, @dev={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x700, 0xe000000, 0x0, 0xffffff88]}, @local, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, 0x0) [ 1242.026937][T16868] binder: send failed reply for transaction 6176, target dead [ 1242.054581][T16868] binder: send failed reply for transaction 6177, target dead 10:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000020f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1242.129154][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1242.135083][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x28181, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x95, "0accd8cf26744d75f99544b9a5c8451360e398ab5b62a89918ee7318d1b77cafae7f95ab2540a36c9fe9fb1fe7012b0bb82f2111fd2903d9d7dbb78c8d3b3b6733c40f53c8d56477e90225bd0051f9baedf96e87ec81fd446efc294a7f4d9ba61c71c09046d65ced8310040736af0942a3edee0e51916fa0113be7ef61542fc21da24dde4d79e5ad7d28237341010d211b72c8cf2c"}, &(0x7f00000001c0)=0x9d) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0x1f}, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_dev$media(&(0x7f0000000c40)='/dev/media#\x00', 0x9, 0x440100) sendmmsg$inet_sctp(r3, &(0x7f0000000b00)=[{&(0x7f0000000280)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f00000002c0)="04c925aeeb84e471e3601ade42514fb4333b50221ce13ff3e2b22b752699abd7751cfdf1fe192abf56", 0x29}, {&(0x7f0000000300)="1af7c8ab840776ed7461005b7afa28ac33d4265e3149c4d662cf3995a6523ffef4bf9cd1fdd707203d", 0x29}, {&(0x7f0000000340)="8e927c25280825f57a4464671d73b046c0db2c85e5e2951dcfaf26ff17c32dc2c568bd0477a82ede591e4525a9e91e921f4df7f63177aea4c0c1518d9f762eeafb7561789e944ce61d749bc86ac0d29ffb9d1863337977189a0d82164d5ecb4fd918767d30f59cee463b237294e663d799000ba7eb1edf5e97ce19d8bf7b6af1f787b74bcd", 0x85}, {&(0x7f0000000400)="1ea99201ed96da3fb7cc035694d70ca7", 0x10}, {&(0x7f0000000440)="132c41f5cc8bac02fe7a63fd19589f0708e8d61098f5a8970cf2e0ebbc930b54836154efa8f986ab447e4526e3cbd0e3032a613860ab3a1a69a23cbb43ba9ac197e0800a8b069d9114051a2d3deb70ed86cf05bd445c6696933059539a344801ef9c1e83693025f6762753621a172c1a43d854f4d05080cb5dbbbd13f2cd4a6bd8b5926c468a7980f5caf84279b57b", 0x8f}, {&(0x7f0000000680)="b0db1b36dd3974812657ae73044485c91689078d3e34f8213c2fdec5d1bf7b91794d09a187039cb406c811f5713d712ce1aad4c5b89e695ded66708622f9031491ccc8792497c318d6120eafd782facf826a73dba036bbb02dc2cc4da520aa485f8ca6d9e6e80b7a90c7a95efdf60be79b1402632b0d0464b6f27f6fadc346e3b83a4602e2792e7da524f0b7d0b4082d7c0f85bf192ca2475aa852e541cffaf253955287c60a2f6e", 0xa8}], 0x6, &(0x7f00000007c0)=[@sndinfo={0x20, 0x84, 0x2, {0x5, 0x1, 0x90, 0x40, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x4, 0x2, 0x80, 0x100000000, 0x0, 0x2, 0x10001, r2}}, @prinfo={0x18}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}], 0x80, 0x804}, {&(0x7f00000005c0)=@in6={0xa, 0x4e20, 0x8000, @mcast2, 0x3}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000740)="daa65502ab2f5acd3d28b8be0e2cb5cdf2fcf35bffdc9c1ead2ba5d9fc425659d85ae4dd276ab0f13d834bf20a3520ad2211c64254913036", 0x38}], 0x1, &(0x7f0000000880)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xc2da000000000000}}, @authinfo={0x18, 0x84, 0x6, {0x1ff}}, @init={0x18, 0x84, 0x0, {0x62, 0x20, 0x0, 0x100000001}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x0, 0x8, 0x9, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x5, 0x8204, 0x6, 0x57a, 0x2, 0x40, 0x1, r2}}, @init={0x18, 0x84, 0x0, {0xfff, 0x101, 0x6, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @sndrcv={0x30, 0x84, 0x1, {0x1000, 0x2, 0x8003, 0xff, 0x5, 0x4, 0xfffffffffffffffc, 0x80, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x7f, 0x7, 0x200, 0x8, 0x0, 0x2, 0x3, 0x8, r2}}], 0x128, 0x800}, {&(0x7f00000009c0)=@in6={0xa, 0x4e24, 0x100000000, @mcast2, 0x9c05}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000a00)="37cac2a25e8b6f6aabaa34c3f52870717bc6426df6a3c7f5ccb8a5613d98554d1ac5396e80eb0f1ed7138e", 0x2b}], 0x1, &(0x7f0000000a80)=[@sndrcv={0x30, 0x84, 0x1, {0x20, 0x80000000, 0x3, 0x3, 0x5acd, 0x7, 0x3, 0xe7, r2}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x9, 0xee, 0x20, 0x7}}], 0x68, 0x80}], 0x3, 0x1) ioctl$KDENABIO(r3, 0x4b36) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="cb57001e2956fc760601060400"], @ANYBLOB="150068fd0000"], 0x0, 0x0, 0x0}) 10:49:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000004f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1242.226360][ T7772] binder: 7771:7772 got transaction with too large buffer 10:49:30 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xfffe, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000240)=0x4) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000280)=0x26) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0x14b, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x10, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0x20000004) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000000)={0x4, 0x6, 0x9}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x1, 0x0, 0x40, [], &(0x7f0000000200)}) ftruncate(r0, 0xfffffffffffffffc) 10:49:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x1000000, 0x0}) 10:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000025f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1242.294480][ T7784] binder: BINDER_SET_CONTEXT_MGR already set 10:49:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000005f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1242.357918][ T7784] binder: 7771:7784 ioctl 40046207 0 returned -16 [ 1242.358147][ T7786] binder: 7771:7786 got transaction with too large buffer 10:49:30 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1242.444456][ T7798] binder: 7793:7798 got transaction with invalid handle, 0 10:49:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x700}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:30 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="71e67a111fde54fe46b904832c8fff73", 0x10d) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffff00000000010000000100000000000000", @ANYRES32=r0, @ANYBLOB="0020000000010000400000000000000100000000000000002441582847e9ebb8d500000059993bbe95a4bd0a8ec100"]) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bc", 0x10}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) 10:49:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000006f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1242.504608][ T7802] binder: 7793:7802 got transaction with invalid handle, 0 [ 1242.537007][ T7891] binder: release 7804:7805 transaction 6191 out, still active [ 1242.547710][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:30 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c01000000000000400480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x3f000000, 0x0}) [ 1242.592986][ T7891] binder: send failed reply for transaction 6191, target dead 10:49:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="66ee853bcc2285a70635e298beaecb525972cf7c41da952a74701dc40000609a42bc9177b8f29d52a075", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1242.670124][ T7818] binder: 7815:7818 got transaction with too large buffer [ 1242.697491][ T7818] binder: BINDER_SET_CONTEXT_MGR already set 10:49:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x23, 0x20, 0x2}, 0x3c) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000001, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r0, &(0x7f0000000200), 0x0}, 0x18) 10:49:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000002f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000010f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1242.726484][ T7818] binder: 7815:7818 ioctl 40046207 0 returned -16 10:49:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0xfdfdffff, 0x0}) 10:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x2000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x10, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f00000007c0)="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", 0x1000) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback}, &(0x7f0000000100)=0xc) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x401, 0x100000001, {0x0, 0x7530}, {r4, r5/1000+10000}, {0x2, 0x6, 0x2, 0x288}, 0x1, @can={{0x0, 0x3f, 0x4, 0x100000001}, 0x8, 0x2, 0x0, 0x0, "aff72da6aafa92c4"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000004000004dfd1ba5000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000004f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:31 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@empty, @rand_addr, 0x0}, &(0x7f0000000200)=0xc) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="0440b079c924d95333ab09aaa48006eff151e6bcfd538b0d1ed6f8e95ac7276737f06ab707220898261b56eed61c1005905fa02df9d729583d5413f06f00ed224d847e624bf8c840260be74b6baa6681a56fb6f5f4e9c6cde5757f7e74886b0b06440bddb9470ae9b3f44548ae2f06bda3b1880c4173906536c00da243a951b6e6c1e9814db78a8797b6071205"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='udf\x00', 0x0, 0x0) r2 = socket(0x1d, 0xf, 0x7e0c) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000000)) 10:49:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000025f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0xfffffdfd, 0x0}) 10:49:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000005f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_proto_private(r0, 0x89ea, &(0x7f0000000040)="6c84eb83e32c0cfc44220ec8cb000f838e7b018000000000000065b1bddb8375") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x2800}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) read(r0, &(0x7f0000000000)=""/30, 0xfffffe4c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10002, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000000c0)) 10:49:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480200000000ef38bf461e59d7", 0x39}], 0x1) 10:49:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000006f5480000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x3800}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1243.281843][T22747] binder: release 7908:7910 transaction 6220 out, still active [ 1243.293796][T22747] binder: undelivered TRANSACTION_COMPLETE 10:49:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x100000000000000, 0x0}) 10:49:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xf00, 0x1) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000600)=@routing={0xbf, 0x8, 0x2, 0x1f, 0x0, [@remote, @remote, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x2}, &(0x7f0000000180)=0x8) recvfrom$inet6(r0, &(0x7f0000000380)=""/235, 0xeb, 0x2022, &(0x7f0000000480)={0xa, 0x4e21, 0x100000001, @loopback, 0x1cc}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1, 0x2, 0x8a5}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r4, 0x9}, &(0x7f0000000500)=0x8) [ 1243.349601][T22747] binder: send failed reply for transaction 6220, target dead 10:49:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480300000000ef38bf461e59d7", 0x39}], 0x1) 10:49:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000010f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1243.448449][ T7930] binder_transaction: 64 callbacks suppressed [ 1243.448466][ T7930] binder: 7928:7930 transaction failed 29189/-22, size 24-8 line 2995 [ 1243.465666][ T7926] binder: 7924:7926 transaction failed 29201/-22, size 64-16 line 3357 [ 1243.485093][ T7932] binder: 7931:7932 transaction failed 29201/-22, size 3210716889617563249-5147806688564228609 line 3148 10:49:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480400000000ef38bf461e59d7", 0x39}], 0x1) [ 1243.530397][ T7939] binder: 7924:7939 transaction failed 29201/-22, size 64-16 line 3357 [ 1243.544966][ T7940] binder: 7928:7940 got transaction with invalid handle, 0 10:49:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000025f5480000000000ef38bf461e59d7", 0x39}], 0x1) [ 1243.587617][ T7940] binder: 7928:7940 transaction failed 29201/-22, size 24-8 line 3274 [ 1243.624544][T22747] binder_release_work: 62 callbacks suppressed [ 1243.624559][T22747] binder: undelivered TRANSACTION_ERROR: 29201 10:49:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200041c}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x3f00000000000000, 0x0}) [ 1243.659967][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1243.688122][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1243.768032][T22747] binder: send failed reply for transaction 6232 to 7949:7950 [ 1243.778100][ T7954] binder: 7949:7954 transaction failed 29189/-22, size 64-8 line 2995 [ 1243.778390][T22747] binder: undelivered TRANSACTION_COMPLETE [ 1243.798167][ T7953] binder: 7952:7953 transaction failed 29189/-22, size 24-8 line 2995 [ 1243.849152][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1243.857845][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1243.877109][ T7958] binder: 7952:7958 transaction failed 29189/-22, size 24-8 line 2995 [ 1243.902769][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1243.919517][T22747] binder: undelivered TRANSACTION_ERROR: 29189 10:49:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xf00, 0x1) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000600)=@routing={0xbf, 0x8, 0x2, 0x1f, 0x0, [@remote, @remote, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x2}, &(0x7f0000000180)=0x8) recvfrom$inet6(r0, &(0x7f0000000380)=""/235, 0xeb, 0x2022, &(0x7f0000000480)={0xa, 0x4e21, 0x100000001, @loopback, 0x1cc}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1, 0x2, 0x8a5}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r4, 0x9}, &(0x7f0000000500)=0x8) 10:49:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480200000000ef38bf461e59d7", 0x39}], 0x1) 10:49:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480600000000ef38bf461e59d7", 0x39}], 0x1) 10:49:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0xfdfdffff00000000, 0x0}) [ 1244.190115][ T7968] binder: 7967:7968 transaction failed 29189/-22, size 24-8 line 2995 [ 1244.201832][ T7970] binder: 7969:7970 transaction failed 29201/-22, size 64-16 line 3357 [ 1244.213379][T16868] binder: release 7971:7972 transaction 6241 out, still active [ 1244.230622][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480a00000000ef38bf461e59d7", 0x39}], 0x1) 10:49:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480300000000ef38bf461e59d7", 0x39}], 0x1) 10:49:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x135080, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r3, @ANYBLOB="090028bd7000fddbdf250d0000005c00050008000100756470000800010065746800080001006962000014000200080004000000000008000400030000002c00020008000200ffffffff08000200feffffff08000200fdffffff080001000e00000008000400e00000001c0009000800010008000000080002000700000008000200090000001445e3b122816aadf05063536000060008000100"], 0xa0}, 0x1, 0x0, 0x0, 0x400c0}, 0x40) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r4 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x0) bind$isdn(r2, &(0x7f0000000280)={0x22, 0x3, 0x2, 0x4, 0x4}, 0x6) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) [ 1244.237038][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1244.241591][ T7970] binder: BINDER_SET_CONTEXT_MGR already set 10:49:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="00000080000000e8"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$PPPIOCGDEBUG(r2, 0x80047441, &(0x7f0000000080)) [ 1244.314726][ T7974] binder_alloc: 7969: binder_alloc_buf, no vma [ 1244.314749][T16868] binder: send failed reply for transaction 6241, target dead [ 1244.334439][ T7970] binder: 7969:7970 ioctl 40046207 0 returned -16 10:49:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480c00000000ef38bf461e59d7", 0x39}], 0x1) [ 1244.379363][T16868] binder: send failed reply for transaction 6242 to 7971:7975 [ 1244.403009][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1244.423380][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:49:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xf00, 0x1) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000600)=@routing={0xbf, 0x8, 0x2, 0x1f, 0x0, [@remote, @remote, @mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x48) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x2}, &(0x7f0000000180)=0x8) recvfrom$inet6(r0, &(0x7f0000000380)=""/235, 0xeb, 0x2022, &(0x7f0000000480)={0xa, 0x4e21, 0x100000001, @loopback, 0x1cc}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x1, 0x2, 0x8a5}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r4, 0x9}, &(0x7f0000000500)=0x8) 10:49:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4800}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:32 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000380)=0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x7c, &(0x7f0000000180)=[@in={0x2, 0x4e21, @rand_addr=0x100}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0xfffffffffffff001, @mcast1}]}, &(0x7f0000000240)=0x10) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000300)=""/59, &(0x7f0000000340)=0x3b) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r2, 0x9}, &(0x7f00000002c0)=0x8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r4 = msgget(0x0, 0x100) msgctl$MSG_INFO(r4, 0xc, &(0x7f00000003c0)=""/194) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000, 0x0) 10:49:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480400000000ef38bf461e59d7", 0x39}], 0x1) [ 1244.441232][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a5cc0b38cb63f687300200000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200000, 0x0) 10:49:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x2000000084000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}, @in6={0xa, 0x4e22, 0x5, @mcast2, 0xf0}, @in={0x2, 0x4e20, @remote}], 0x48) r2 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x5, 0x1000000000000000) r3 = open(&(0x7f0000000200)='./file0\x00', 0x2002, 0x1a8) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000280)={'nr0\x00', {0x2, 0x4e21, @empty}}) getpeername$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$LOOP_SET_DIRECT_IO(r2, 0x127c, 0x72f07d) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200802, 0x0) 10:49:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480e00000000ef38bf461e59d7", 0x39}], 0x1) [ 1244.610842][ T8010] binder: 8008:8010 got transaction with invalid offset (0, min 0 max 24) or object. 10:49:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000240)=0x5) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a65166ddf002cfd319bd0710000000000") r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000100)={0xff, 0x9, 0x4, @broadcast, 'lapb0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="58f2ae576a61378c1dc945baf80530597e52ca1f6af7cbfca57e7d5aa3dc0da738a237529c4f2134c2d6b8f1576f2bdfdeaa0008000000000000878bc085c95b3cce55d2941722a44f000000806f019d06512cc0000000733d33b1327a27b526a0ec5132677a0278b98cbb078ca8a0"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480600000000ef38bf461e59d7", 0x39}], 0x1) 10:49:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4c00}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") timerfd_create(0x7, 0x80800) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000280)) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="62726f7500000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000004356894d0000000000000000000000000000000000010000000000000000000000000500"/128], 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10800, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x0, 0x8}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r2, 0x10001}, 0x8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8800, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f00000002c0)=r2, 0x4) timerfd_create(0x9, 0x80800) dup(r0) 10:49:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x40) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x17, 0x43, &(0x7f0000000200)="bd47f161d586c3684b7c86cb70b0c9b75c3917c6ebde9feac9ed7649bd0b98635725c482b6d56d1c9e8aa3d7d11a81de2d5d46b3ba0dcfb2e368c653ea2c8468850fc5"}) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x3, 0x40) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000002c0)=[0x3], 0x2) prctl$PR_SET_FP_MODE(0x2d, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r3, 0xc058534f, &(0x7f0000000300)={{0x4, 0x200}, 0x1, 0x8, 0x0, {0x31a, 0x10001}, 0x2, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000002dfbd86db51eaf695240a000000000000109367cd90a355965eada2f3248110ea2bfe5a439c3022c9f9471c4fdc79915cc9e55c16a2b0163e080551d56b083fbb4a5b1bf077dbb45456e8b6a114400d5d260ac1cc799bd6d9e09705197481eca816fcf0f7079570caada600"/125], 0x0, 0x0, 0x0}) 10:49:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480f00000000ef38bf461e59d7", 0x39}], 0x1) 10:49:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f309bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:33 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320\x00'}, 0x58) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x2400) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)={0xff, 0x2}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x6f}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0xffffffffffffff61}, &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000200)=0xffffffffffffffff) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$unix(r3, &(0x7f0000000140), 0xffffffffffffff6c, 0x0, 0x0, 0x429) [ 1244.903323][ T8039] binder_alloc: 8027: binder_alloc_buf size 144115188075855904 failed, no address space [ 1244.914102][ T8028] binder: BINDER_SET_CONTEXT_MGR already set [ 1244.931317][ T8028] binder: 8027:8028 ioctl 40046207 0 returned -16 10:49:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x5000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5481000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480a00000000ef38bf461e59d7", 0x39}], 0x1) [ 1244.961390][ T8039] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 10:49:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x80010, r1, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x400) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)) r3 = fcntl$getown(r2, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000040)='net/rfcomm\x00') write$smack_current(r4, &(0x7f0000000080)='/dev/binder#\x00', 0xd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480c00000000ef38bf461e59d7", 0x39}], 0x1) 10:49:33 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @loopback}}, 0x1e) 10:49:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x8110, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5486000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1245.217102][ T8062] binder: 8061:8062 ioctl 540f 20000140 returned -22 10:49:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480e00000000ef38bf461e59d7", 0x39}], 0x1) [ 1245.258423][ T8076] binder: 8061:8076 ioctl 540f 20000140 returned -22 10:49:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548f000000000ef38bf461e59d7", 0x39}], 0x1) [ 1245.316742][ T8076] binder_translate_handle: 1 callbacks suppressed [ 1245.316754][ T8076] binder: 8061:8076 got transaction with invalid handle, 0 [ 1245.327304][ T8073] binder: BINDER_SET_CONTEXT_MGR already set 10:49:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="040dbacdbba56728ea45e56f7d311b075e57add4be73f0e080bd97335bd2d04a0bc54161d0129c5bd118b269a5f56ea73bd20359809c2d942e7aea01b1d59ab9b61f2f4fc8f0d62ed28c30bc04885d10e0b7ad18ce3f9dbbce025d5798dd07477bfe13794e68195a41a2bada6d658520a25eb0d0ce196546cefdb32a595d5786b382676c12ee581dc5c28f5682f905"], 0xb, 0x3) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x82, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='veth1\x00', 0x10000, 0x9, 0x7}) 10:49:33 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x484802) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="b993c04ba9484f", 0x7}, {&(0x7f0000000100)="6cfe316dec0974882fbc99a8003f1c57ad8ecea32b9e954697b16aaf00c27bf7a31b7bcb5322a5c02ae30e9b25cb411a9f6d808b0ce3545d3b40ad5c3cfddbc94a76e1af32e3f61010c5f88de42c47752af15b82d31de7bd39684dca1aa1f115518d565aa97c25b4f85e64c1db20e1dc8b839fe1419667f223983183caf42adde9a9ccafd512ba6ef6f3cb924e1ec3c99f482ebb7414cdf64340ef059b13f628729eb0a7ac50c44ff29577d367b520cea66ac91f8451126bc6f922c4e31295c1fecab95f217e06d061ed3d4f274675e67af2605b381a80f6dbada42828eede87bbda77f8897f631f9ad7d0", 0xeb}, {&(0x7f0000000200)="da01f75a07c7c927e9f652c9ad6eb9d76fd2286d0e3f4a60233b1f3cd0b36519614ae322e2687d3f0bdcfb82fdd7fa2c399be87a52b1c8c599e3267692f23ac0474453b7c48f933e754c841275e8a72c61cdc76b00a05ebc", 0x58}], 0x3, &(0x7f00000002c0), 0x0, 0x4008004}, 0x24008800) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000002c0)={0x9, 0x7ff, 0x5, 0x1}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000340)={{0x2, 0x4e22, @multicast2}, {0x307, @dev={[], 0x1e}}, 0x4, {0x2, 0x4e21, @multicast2}, 'yam0\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) ioctl(r2, 0xbb, &(0x7f0000000040)) 10:49:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480f00000000ef38bf461e59d7", 0x39}], 0x1) 10:49:33 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10001, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x1000, 0x3, 0x8, 0x2, 0x0, [{0x7, 0x9, 0x8000000000, [], 0x1}, {0xe5, 0x6, 0x7, [], 0x5}, {0x3, 0x6dd7, 0x10000, [], 0x5}, {0x1, 0x821, 0x14, [], 0x4}, {0x8, 0x7fff, 0x7, [], 0x7}, {0x1fdc000000000, 0x1000, 0x1, [], 0x1ff}, {0xff, 0xffffffff, 0x100, [], 0x9}, {0x7, 0xb0, 0x20, [], 0x7ff}, {0x80000000, 0xfffffffffffffff8, 0x6, [], 0x4}, {0x2, 0xfffffffffffffff7, 0x0, [], 0xdb}, {0x100, 0x9, 0xffff, [], 0x8}, {0x8, 0x3, 0x3}, {0x0, 0x4, 0x6}, {0xfffffffffffffff7, 0x4, 0xa618, [], 0x40}, {0x2, 0x3, 0x7, [], 0x9}, {0xcadd, 0x1ff, 0x1, [], 0x5}, {0x1f, 0x80, 0x6, [], 0x3}, {0x2579, 0x28, 0x2, [], 0x4f65861a}, {0x400, 0xfffffffffffffe01, 0xffffffff, [], 0x1ff}, {0x3, 0x7, 0xffffffffffffffff, [], 0x6}, {0x84e, 0x2, 0x0, [], 0x1c1e}, {0x540dfeac0, 0x6, 0x3, [], 0x48da}, {0x1, 0x7, 0x8, [], 0x89f}, {0x7, 0xe4b1, 0x9, [], 0x2}]}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") fallocate(r0, 0x35, 0x7f, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1163489400000000000000000000000000000000000000000000000000000000000000001800"/52, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1245.432342][ T8073] binder: 8071:8073 ioctl 40046207 0 returned -16 10:49:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480003000000ef38bf461e59d7", 0x39}], 0x1) 10:49:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='io.max\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10000, 0x0) accept4$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x800) [ 1245.526293][ T8098] binder: 8097:8098 unknown command -1807195375 [ 1245.550621][ T8101] binder: 8100:8101 ioctl bb 20000040 returned -22 10:49:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6800}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1245.574986][T16868] binder: send failed reply for transaction 6284 to 8100:8101 [ 1245.585616][ T8098] binder: 8097:8098 ioctl c0306201 20000780 returned -22 10:49:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5481000000000ef38bf461e59d7", 0x39}], 0x1) [ 1245.619449][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5486000000000ef38bf461e59d7", 0x39}], 0x1) [ 1245.674373][ T8114] binder_transaction: 14 callbacks suppressed [ 1245.674383][ T8114] binder: 8112:8114 got transaction with too large buffer 10:49:34 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB="258f1887cfd64a8f"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480006000000ef38bf461e59d7", 0x39}], 0x1) 10:49:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a0800023c390d3188b070") io_setup(0x7fff, &(0x7f0000000000)=0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000013c0)={r4, 0x1}) io_submit(r2, 0x3, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffc, r0, &(0x7f00000003c0)="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", 0x1000, 0x7, 0x0, 0x2, r1}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x20, r0, &(0x7f0000000100)="83f25d25012cab3f27c9e81c09f9c581d416c26f8faa888fca76655def29894927b15269cd520f005ed0b4e06997dfa509bb344935cfe262f0d9700fc1b30fd8bbf5ab6c67356fb17443f3046559a24f", 0x50, 0x8001, 0x0, 0x0, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000200)="f7ac2015568f6f1ed2e585a83c881a0574f31e6322b215eca248f5bea05adb95688abe8a0d12b26c531af6bbcbf7b364e3217675ce95bfb2268cabd28404f3c0cdbb2b0505b55cdde9a958af2b1a0c1337c1daf09c87e6e959807b84f13777a63aa710561afeb956bec8f15d5ee5590a2997724c5806300902fd", 0x7a, 0x4, 0x0, 0x3, r0}]) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x0, 0x10001, 0x0, 0xf00}}) [ 1245.751721][ T8120] binder: 8112:8120 got transaction with too large buffer [ 1245.842438][ T8127] binder: 8126:8127 got transaction with invalid handle, 0 [ 1245.880639][T16868] binder: release 8131:8132 transaction 6294 out, still active 10:49:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6c00}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1245.888398][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548f000000000ef38bf461e59d7", 0x39}], 0x1) 10:49:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000a000000ef38bf461e59d7", 0x39}], 0x1) [ 1245.913325][T16868] binder: send failed reply for transaction 6294, target dead [ 1245.935009][T16868] binder: send failed reply for transaction 6295 to 8131:8135 10:49:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80000001, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x7fff, 0x21}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB="00000000400000008383c9ee4dd67f6ec6bd7ff6727d50d9afc13d910b7bc242d503c75672c7a6e2ea375e092b0fccf0c5ddab85dd9c5de0633f8f56e71c26738c5bee7b8cdf9c0d54be62c349b6646e14959295516703fcea030cb9cd99e9cc70d3cc3d20cb19fdfbf0cb19d22d4d203d64635e0493da9226e936359761366ac983d261c653bb43930ed19813830fc2b53a8aaae73859361911d429fd7c29fb3eafa9f4667b5f112cc6c27cb1006b903dc2a563bcb4b0b2d4bd2b9deb24f242c5abfc2352fa948496cb36c6ebbb978be6cdb7268efe83351bed706f5fa9f3acefed"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1245.964724][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1246.030091][ T8139] binder: 8138:8139 got transaction with too large buffer [ 1246.054422][ T8148] binder: 8147:8148 got transaction with invalid handle, 0 10:49:34 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480003000000ef38bf461e59d7", 0x39}], 0x1) 10:49:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x7ff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="9aa38086421cc2ed"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1246.079402][ T8149] binder: BINDER_SET_CONTEXT_MGR already set 10:49:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000c000000ef38bf461e59d7", 0x39}], 0x1) 10:49:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x6d, 0x0, 0x0, 0x8}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r3, 0xfffffffffffffe00}, &(0x7f0000000180)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5485865000000ef38bf461e59d7", 0x39}], 0x1) 10:49:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800f0000000ef38bf461e59d7", 0x39}], 0x1) [ 1249.025498][ T8352] binder: 8336:8352 transaction failed 29189/-3, size 64-16 line 3148 [ 1249.025503][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1249.042387][T16868] binder: undelivered TRANSACTION_ERROR: 29189 10:49:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x10000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e20, 0x5, @mcast1, 0xece4}}, [0x5, 0x50, 0xd36a, 0xc, 0x1, 0x81, 0x9, 0x4, 0xbe00, 0x8000, 0x3, 0x5, 0x7fff, 0x5, 0xfff]}, &(0x7f0000000240)=0x100) 10:49:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000200"/58], 0x48) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007b40)=[{{&(0x7f0000000180)=@l2, 0x5}}, {{&(0x7f0000007500)=@hci, 0x80, &(0x7f0000007680), 0x141, &(0x7f00000076c0), 0x10}}], 0x4000000000003d5, 0x0) [ 1249.190847][ T8379] binder: 8378:8379 transaction failed 29189/-22, size 24-8 line 2995 [ 1249.202800][ T8377] binder: 8375:8377 transaction failed 29201/-22, size 64-16 line 3357 10:49:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fffff00000ef38bf461e59d7", 0x39}], 0x1) 10:49:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="00005f8c11e8d3f31493e4f6000000000014852a74707fffffff00"/58], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480081000000ef38bf461e59d7", 0x39}], 0x1) [ 1249.266681][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1249.281161][ T8386] binder: 8375:8386 transaction failed 29201/-22, size 64-16 line 3357 10:49:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x108) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000140)={0x7f, 0x5, 0xffffffff, 0xb9, 0x1ff, 0xda}) [ 1249.328789][T16868] binder: undelivered TRANSACTION_ERROR: 29189 [ 1249.341352][T22747] binder: undelivered TRANSACTION_ERROR: 29201 10:49:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000100ef38bf461e59d7", 0x39}], 0x1) 10:49:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet(0x2, 0x3, 0x19) connect$inet(r2, &(0x7f0000000140)={0x2, 0xfffffffffffffffd, @multicast1}, 0xffffffffffffffa9) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_group_source_req(r2, 0x0, 0x30, &(0x7f0000000200)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev}}}, 0x108) 10:49:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54815b4000000ef38bf461e59d7", 0x39}], 0x1) 10:49:37 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0xd8b, 0x80) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff000019c4409af0928b44a2dcd000"/53], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0abc1e12b2a6a3999bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB="5368b1966fc1c007"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) mknodat(r2, &(0x7f0000000080)='./file0\x00', 0x800, 0x2) 10:49:37 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800f0000000ef38bf461e59d7", 0x39}], 0x1) 10:49:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000200ef38bf461e59d7", 0x39}], 0x1) 10:49:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = shmget(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000980)=""/171) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = add_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)="8757bfef639d72d778e53d1b8c218bcfe6ec3f0c39657831a8feaeb380f5fcd0822c38ab6fb09ed09a3406644970e4eddd8da5a0a10b4facc50616dac195", 0x3e, 0xfffffffffffffffd) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x6, 0x7, 'syz0\x00', 0xff}, 0x0, 0x4, 0x5, 0x0, 0x6, 0x200, 'syz0\x00', &(0x7f0000000500)=['securityvmnet0\x00', '[\x00', 'user\x00', '-trusted\x00', 'syz', '\x00'], 0x23, [], [0x4, 0x2, 0x3, 0x20000000000000]}) r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="387bf97c082713a46310542a81e3533ddab5f4501d5c77f3fef35a0f678ffde9f040d0c76b8557e7fef960b911880b6d1912ad97a8db0f306eefafe7f68b2e9bf756f056e5f08bdb30c10b62cec2a6458fe080809a76c07ff6f4cb8cb3ae3d10", 0x60, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000140)='ceph\x00', &(0x7f0000000280)=@keyring={'key_or_keyring:', r4}) r5 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) socket$packet(0x11, 0x3, 0x300) r6 = getpgid(0xffffffffffffffff) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000300)={0x3, {{0xa, 0x4e23, 0x94aa884, @mcast1, 0x81}}, {{0xa, 0x4e21, 0x3, @remote, 0x6}}}, 0x108) ptrace$poke(0x5, r6, &(0x7f00000002c0), 0x8) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x199, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000040000000000000000800"/52, @ANYRESOCT=r4, @ANYRES64=r0, @ANYBLOB="0000000000000000ef58084e32aeef9493421ffe81e6780f93b7080e92021194c8e72d346bb44099147dbfa1d54978eb8f5822f09f54528d75f6d37ad145af9e9950816344ee45338a4fc850fa43ef4987841bf68abb3953da12b2037677855803c7300cb158dc48b49356a0f3dea72da2fdb7c3ee0d66b1834814b8cb75505ca302930040b64329f31d236d8d18d10e1a6c9596988ae7202a508374b243091e71c60d5c157d47e196407562632698590cc5e4f211a36318449a7f99b8f2794aba9e99b21eb6928542b8fc8c285926a0f605f1869688394c091eb02ae040a60397cbac1fb8bdb53885d2ce4ced3d2e8d3af78783b0beac1e7683754a687239fca498e96ee8e99e1f6f90d258750a5bd113e36d9c32292c6169a99598b5f231c577376fd437423fc71389ddb336a7312286a69da3c61713bec4de9a7c92cf12e17175cba3010e"], 0x0, 0x0, 0x0}) 10:49:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = getpgrp(0x0) kcmp(r3, r4, 0x0, r2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB="0000000000000a2450c24cb0806d9fb9723e6e5b4f4829440fd0b66032f69489f298e490327774d34f34e4509077eb53073ff4b478a2977200cb018ac142783ae140c811d3f99a48caae78f1273565d9a6239a79c7f1c78015032dd9841b315e"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fffff00000ef38bf461e59d7", 0x39}], 0x1) 10:49:38 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x3, 0x100, 0x5, {0xa6, 0x5, 0x7fffffff, 0x8}}) madvise(&(0x7f0000779000/0x600000)=nil, 0x600000, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="00000f002a0200007a01000007000000f5020000010000000000000000000000d69e6f142b588a56a66d027317538a10e324531719d436994f9dfc37573f9e3efdb09e2a334e588faa7c6a553862f7de76ebe9e95b563a2327368c34d7d446396ec419fc94a78f0bc34710afb65f8c790bf3f8b5330717625e2464d9e1b14545d54981d9a463e70aee8e1e5649776b13eb7a2d79c1a7699eb8e90f9b7f8eed78cabe2bc2dfcf467d05c9f35d378ea7f1c4d5f32c619e5da74b0b08282105378615d81be3df819b1f0105c37cd21353eff5d7c725464532ef47c8cb94afd8ce60f3668a691ed9787f0000000000000000000000000000000000000000be00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000774b4024d3f05b4f2a35a1941402102e2811aa631cd5b881e9650b85ac2ac5406ca632637d86bdd1f7a91f9a0ef052c42680298d67a3040dc6f0ed6e3c7fc320106e9fdf835ef1187df4e9a82fe787"], 0x4e8) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 10:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x10000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000300ef38bf461e59d7", 0x39}], 0x1) 10:49:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000baa8605f4e2abaddcab07fb0400000000"], 0x0, 0x0, 0x0}) 10:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x20000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1249.905952][ T8442] binder_alloc: 8443: binder_alloc_buf size 231714590318407736 failed, no address space [ 1249.944480][ T8442] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 10:49:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000100ef38bf461e59d7", 0x39}], 0x1) 10:49:38 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) connect$can_bcm(r2, &(0x7f0000000140), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002001300020000dfffffff000000000105000600200000000a00000000000000000500e50000070000001f000000000000030000000000000200010000000000000000020000000005000500000000000a00000000000000ff1700000000000000000080000000170000000000000000"], 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r3, @in={{0x2, 0x4e23, @multicast2}}}, &(0x7f00000003c0)=0x84) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 10:49:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000400ef38bf461e59d7", 0x39}], 0x1) [ 1250.025809][ T8453] binder: BINDER_SET_CONTEXT_MGR already set 10:49:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000080)=""/13) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1250.079222][ T8453] binder: 8452:8453 ioctl 40046207 0 returned -16 [ 1250.092953][ T8457] binder_alloc: 8452: binder_alloc_buf size 231714590318407736 failed, no address space [ 1250.116604][ T8457] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 10:49:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000600850a742987cfc446667d60438dd847364207000000000000000050705e3f6202c75c4e40dcb9534f"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) syz_emit_ethernet(0x1e, &(0x7f0000000140)={@empty, @empty, [], {@can={0xc, {{0x0, 0x1, 0xf3, 0x3}, 0x8, 0x3, 0x0, 0x0, "b3b32e9300608666"}}}}, &(0x7f0000000180)={0x1, 0x4, [0xb5a, 0xdeb, 0x4d7, 0x9c2]}) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x400000) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000100)={0x0, 0x2, 0x5, &(0x7f0000000080)=0x2}) 10:49:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$kcm(0x11, 0x80000000000001, 0x0) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000080)=@nfc={0x103, 0x14}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000040)="9cffffffffffba00009b80066558", 0xe}], 0x1}, 0x0) 10:49:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000200ef38bf461e59d7", 0x39}], 0x1) 10:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x28000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x2000000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000600ef38bf461e59d7", 0x39}], 0x1) [ 1250.322353][ T8480] binder: BINDER_SET_CONTEXT_MGR already set 10:49:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1250.367618][ T8480] binder: 8479:8480 ioctl 40046207 0 returned -16 [ 1250.404834][ T8492] binder_translate_handle: 4 callbacks suppressed 10:49:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$packet(0x11, 0x40800000000003, 0x300) syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300002, 0x0, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000180)=0x100, 0x4) recvfrom$packet(r1, 0x0, 0xd01685c4a963322b, 0x0, 0x0, 0xb944a8181ec256ad) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400200, 0x0) [ 1250.404844][ T8492] binder: 8491:8492 got transaction with invalid handle, 0 10:49:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x38000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000300ef38bf461e59d7", 0x39}], 0x1) [ 1250.453947][T22747] binder: release 8495:8497 transaction 6427 out, still active [ 1250.477552][ T8500] binder_alloc: 8479: binder_alloc_buf, no vma [ 1250.477857][T22747] binder: undelivered TRANSACTION_COMPLETE 10:49:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000a00ef38bf461e59d7", 0x39}], 0x1) [ 1250.535188][T22747] binder: send failed reply for transaction 6427, target dead 10:49:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'sit0\x00', 'eql\x00', 'ifb0\x00', 'eql\x00', @link_local, [], @remote, [], 0x108, 0x108, 0x138, [@physdev={'physdev\x00', 0x48, {{'eql\x00', {}, 'vlan0\x00'}}}]}}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x240) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={r1, r2, r3}, 0xc) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) openat$cgroup_subtree(r4, &(0x7f0000000200)='cgroup.subtree_control\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000240)=0x2, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101200, 0x0) lstat(&(0x7f0000000080)='.\x00', &(0x7f0000000180)) 10:49:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x30000, 0x0) signalfd4(r1, &(0x7f00000002c0)={0x200}, 0x8, 0x80800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x18, "b8d3bdf7bd3e3c1f176348c02c4b2bc1b56036b5e13517ee"}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r2}, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="ff0a7400e867c5e5326bf49da49e1275e37ef4716c2e5cce7a71103e113a24c60d29aea7c2e00c18d4cdc8b5a91fb6a46a3f84813f66411ef116716726e8b582caf53e7b9624bb4c5bfd6473da9d95351a08aade02ce659210e342fd010aec06bccdc7bdcfb2626fc2ef6452f13e54f2012bb11d57c25a30e47ea0fe6944ae69867400271ef5e9", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000fbf836e74e10cdb1b0be2d80c356c42059220dbc7c09cec9c2a9975b7644"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r1, 0xfffffffffffffd69) 10:49:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000c00ef38bf461e59d7", 0x39}], 0x1) 10:49:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000400ef38bf461e59d7", 0x39}], 0x1) 10:49:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$getsig(0x4202, r1, 0x80000001, &(0x7f0000000100)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) 10:49:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x40000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x14, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000640)=@nat={'Xat\x00\x00\x00\x00\x00\x00\x03\b\x01\x00', 0x19, 0x3, 0x368, [0x20000000, 0x0, 0x0, 0x20000260, 0x20000290], 0x0, 0x0, &(0x7f0000000000)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x200000001b, 0x0, 0x0, 'sit0\x00', 'erspan0\x00', 'b\x00', 'veth0_to_bond\x00', @remote, [], @broadcast, [], 0xb0, 0x120, 0x158, [@statistic={'statistic\x00', 0x18}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}]}, @arpreply={'arpreply\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'vcan0\x00', 'nr0\x00', 'veth1_to_bridge\x00', 'lapb0\x00', @remote, [], @remote, [], 0x70, 0xa8, 0xd8}, [@snat={'snat\x00', 0x10}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @broadcast, [], @remote, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x3e0) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8000, 0x200) bind$tipc(r4, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10) 10:49:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000600ef38bf461e59d7", 0x39}], 0x1) 10:49:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000e00ef38bf461e59d7", 0x39}], 0x1) 10:49:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = geteuid() getgroups(0x9, &(0x7f0000000040)=[0x0, 0xee00, 0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee00]) r4 = dup(r0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f00000001c0)={0x4, 0xffffffffffffffff}) ioctl$TCSBRK(r4, 0x5409, 0x3e4) r5 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x440000) ioctl$TCSBRK(r5, 0x5409, 0x4) write$FUSE_ENTRY(r0, &(0x7f0000000100)={0x90, 0x0, 0x7, {0x1, 0x0, 0x181, 0x5, 0x1, 0x3, {0x3, 0x8, 0x2, 0x6, 0x1, 0x0, 0x700000000000, 0x0, 0x3, 0x4, 0x81, r2, r3, 0x7, 0x9}}}, 0x90) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) 10:49:39 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}]}]}, 0x50}}, 0x80) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1250.851189][ T8534] binder_transaction: 17 callbacks suppressed [ 1250.851199][ T8534] binder: 8529:8534 got transaction with too large buffer 10:49:39 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000100)={{0x0, 0x3, 0x1, 0x1, 0x1}, 0x100000001, 0x8, 'id0\x00', 'timer1\x00', 0x0, 0x4, 0x840, 0x1, 0x81}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1250.987781][ T8540] x_tables: eb_tables: arpreply target: only valid in nat table, not Xat [ 1251.008354][ T8547] binder: BINDER_SET_CONTEXT_MGR already set 10:49:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000f00ef38bf461e59d7", 0x39}], 0x1) 10:49:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000a00ef38bf461e59d7", 0x39}], 0x1) [ 1251.054231][ T8554] x_tables: eb_tables: arpreply target: only valid in nat table, not Xat [ 1251.057343][ T8547] binder: 8529:8547 ioctl 40046207 0 returned -16 [ 1251.063083][ T8551] binder: 8545:8551 got transaction with invalid handle, 0 [ 1251.079426][ T8553] binder: 8529:8553 got transaction with too large buffer [ 1251.086625][T16868] binder: release 8543:8544 transaction 6440 out, still active [ 1251.095230][T16868] binder: undelivered TRANSACTION_COMPLETE 10:49:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) listen(r1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6, 0x0, 0x1, 0x0, "48acb65b2f70871f84e0dbbd4400100000000000000c011710c650f673ed6c0abc59340ced046cb4ed83dd826899c59d0ab710f0be3e6629a5b33d24e115fc0000000200"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20000007, &(0x7f0000000040)={0xa, 0x2}, 0x1c) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, r3, 0x601, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xba40, @ipv4={[], [], @multicast1}, 0x25}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x470}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x484}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x533}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x768}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x10c}}, 0x44000) 10:49:39 executing program 4: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) ptrace$getsig(0x4202, r0, 0x401, &(0x7f0000000040)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xef7e, @rand_addr="9bf9a7a73e66c28e6e169e9eec41085d", 0x8}}, [0x1ff800000000, 0x0, 0xd1, 0x400, 0x2, 0x7184, 0x3, 0x3, 0x80, 0x5, 0x5, 0x8811, 0x6, 0x2, 0x100000001]}, &(0x7f0000000400)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000440)={r3}, &(0x7f0000000480)=0x8) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="2e5f439d16a7cef5b60000000000000000"], 0x0, 0x0, 0x0}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000280)=0xffffffffffffffff) [ 1251.175283][T22747] binder: release 8564:8565 transaction 6445 out, still active [ 1251.190939][T22747] binder: undelivered TRANSACTION_COMPLETE 10:49:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000001000ef38bf461e59d7", 0x39}], 0x1) [ 1251.216316][T22747] binder: release 8564:8565 transaction 6446 out, still active [ 1251.252254][T22747] binder: undelivered TRANSACTION_COMPLETE 10:49:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x48000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:39 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000080)={@remote, @multicast2, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@remote, 0x0, r1}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000180)='syz1\x00') r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000c00ef38bf461e59d7", 0x39}], 0x1) [ 1251.319583][T16868] binder: send failed reply for transaction 6440, target dead [ 1251.327097][T16868] binder: send failed reply for transaction 6445, target dead 10:49:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000003f00ef38bf461e59d7", 0x39}], 0x1) 10:49:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x1, 0x0, 0x0, 0x810}, 0x1) fchmod(r0, 0x10) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffffffffffffffc0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000240)=""/170, &(0x7f0000000300)=""/50, &(0x7f0000000340)=""/239, 0x1000}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x802) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000040)={0x9, 0x75b0}) r4 = openat(r3, &(0x7f0000000580)='./file0\x00', 0x80, 0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000680)={0x3ff, 0x4, 0x2292, 0x4, 0x3}, 0x14) 10:49:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ustat(0x4, &(0x7f0000000180)) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0086080000008fb72313bb3fadcce7c0b7b610e78f9e3e84323448c2fbd7e000ab1e8508583ff081fa18dbd5086cb9c962f61ace2c9e6d7dff328a7967d20e0bbd016f8bce6c63f0367dabb7d16d2b4ddb94cbfd11bc3d49ca0fd9aae6ddbc872fca014a6fd8252cb64fb1f4977a1907e1697cf0414c"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video0\x00', 0x2, 0x0) 10:49:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000e00ef38bf461e59d7", 0x39}], 0x1) [ 1251.410828][T16868] binder: send failed reply for transaction 6446, target dead 10:49:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0x6}) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000b80)={0x0, 0xbab9, 0x7fff, 0x966, 0x3, 0x9}, &(0x7f0000000bc0)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000003d80)={0x0, 0x30, &(0x7f0000003d40)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000003dc0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000003e00)={0x0, 0x5}, &(0x7f0000003e40)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000003e80)={0x0, @in6={{0xa, 0x4e23, 0xfffffffffffffffd, @rand_addr="de393938e5aabee33ef393b9c02d479c", 0x8}}, 0x6, 0x2, 0x8, 0x1000, 0x80}, &(0x7f0000003f40)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000003f80)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x3, 0x3, 0x8000, 0x1f, 0x6}, &(0x7f0000004040)=0x98) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000004080)=ANY=[@ANYRES32=0x0, @ANYBLOB="a0000000331c588877ffc3e2b5dbf51a265bcd8540b548315f7512b0559190167e7ba640e444a5762e07129987236085590ba3edd84739f6ada7fe2cad03fc6b093be343e129433aa5816e82d78b4af2e2da88944cde3b93b1a955178beda75165e667e91e994676f6638b34754ea1076727d006f371533a11a6820db91ac1081aadff6e0050153752a925c4e9327c3ffef0bb53d0073180ff5e4684d12db019b209a259"], &(0x7f0000004140)=0xa8) sendmmsg$inet_sctp(r1, &(0x7f00000042c0)=[{&(0x7f00000000c0)=@in={0x2, 0x10001, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="5a949a1053cdc2c90ed7809fecd159827970a0d25effac61f3e1196e07d84b8b998e23f3ab6f6c40d7d1bd7b5b1b61a3a1d632e3c27139204fd1a2ddeca4ec8863b336304bd2b395bdf4bf8333af9732ba97b050d1715b7f0b4004508d36a7530eae33eca8c4d8bc76ccc7b9cd66b68aa1aa238d54d9cd06f49020ba6c0c4c823606801236ee21994456", 0x8a}], 0x1, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0xb6f, 0x800, 0x0, 0xffffffff, 0x9, 0xfffffffffffffa0f, 0x0, 0x5, r2}}], 0x50, 0x24004084}, {&(0x7f0000000340)=@in={0x2, 0x4e23, @rand_addr=0x7fff}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="7cff2798bbf9b1f8a41b20be5708122d598f943ce5e9a0d5be1fc16b236088fb49bdbb397a77eabd08cce93376df4f56b5261a06a6b734159894b90b1fbe0a745c8d6d766baed188c3e02068e8b7588f6e77a38d63ec354962ae005e7446ac15eb4478b57a9849a2f5fa5cec08ff470ac01a1789c1272fdc0267da681a5dc733160eb249fb2eaa6f7fb686beae5c04dd503ad4f3ad7349c40cf7560038dbcd66d26243c6fbdfb1314e7cedb1c4984599e189cdb9a1fefd5ed3d9686a3fc691ddea8884df877dba860a227b438ca458", 0xcf}, {&(0x7f0000000480)="76811fa2421f2841d03bf3b678f23657f0", 0x11}], 0x2, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x4e7}}], 0x18, 0x1}, {&(0x7f0000000540)=@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xc17}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000580)="d8d9dff7fd14433ba302c5ccd92d965b02a727ee1e3943678e42e298a4533ac5bb4ed370a6ea5d05a92e90b88eee0722f2cd5ff837006059e6ed182ccc38813cb30f6881729061777f100957ee62b928011ade60759f0d508bec1764bf09336ca7eb19634394872994862f88645bbc8188659f7fa1a7416deed919dbbf8e577c2ab7203ef3dbab269036bbfd2c4728a315c772525ac5f7fc2c2a", 0x9a}, {&(0x7f0000000640)="3ae17148cbf5311444656af2cf6fb952e5a86f9054c7843e96331274267e5ec798480b4572bfa1bfb320a4adf71bec2e36605bad22853fb98ef621f10718b5e5d6e2ed0b160bcada78bf3e2a80e482c47caf2e3de3d831e421450ccd93f0ce24e49bc3253d0f911be9958a286855a8d08d2a7cc8325f8fceb19f7319a4936ae39852a37524c33eb3eea41b6ad695c1a0d900e0b22d7b9c973c867ab6e5ca93312cf67e00c14a5f20d0bb5a0adf92344c8b8f894ee169f815ae754b1755ce28185a861ab1fd649b1baf19843a48f5e34df37f13bcfda1407d493a3f5ea91ec342707b7a8b", 0xe4}, {&(0x7f0000000740)="ed1813ef3e779dfafc28760fd5ba2598e1813e975bd99869fe8abc6e4f2bb3b7cb103f9046ce207e41d042e1b9", 0x2d}, {&(0x7f0000000780)="489d058d99ced2d694ba000636c46ad6", 0x10}, {&(0x7f00000007c0)="61bce3a535e48646a41023c2f976b26094ee710313432f6e3b2913f5e7837f89d6d2225595a3979b7a33a5f79497931abe3b8853beea2ebb76bf1acd60b5c3a8c2c6549e124a6870401c107120079d0837cc479196790b80e0f5ba69b6806f90709daef026f6ee22699df54973f25f8bc0eaccb986df8d1e1f1d219e57051aa13111af6e904daf9bbec90aaa09c16d0f26", 0x91}, {&(0x7f0000000880)="c776", 0x2}, {&(0x7f00000008c0)="632dd8660c59ea184ddd21a756afb588c1d8eb82d55f16a8c61ce0993687b83b61906e482ada4fe36dee61adb149926d47ebf5fa2e4e72f9dd57a36a327d642a1e3d3b982843f8bda7643086cbb8b3be892e8b2956d860cb7d5d32e088753de9cdd2b5cea4cfc799", 0x68}, {&(0x7f0000000940)="3731503c896bd6430c7d78f5803bd6be65c33c02715c3061b6d521d8f0caa96f2f5a6bd383039b6650ac7a7cb501560839cf8509e34529d60bd8fdfd0c8eab42a6a3939d4cca879f0cf6e9d51ce945b365aa9273b6b3db", 0x57}, {&(0x7f00000009c0)="2841b62ee734bfccd9672e037afa224477918278b664d6fdd8dc2e7fa9bf24ebb29eb540cf4e7d028ebb5b03f65282794a276fc5017e9274e872c1fbd89cc5f256f8388fbab9d355a12bed9ac2bda618abcc03bde1480540a8532bad85179e707a7a807e5bdd817336686b68dc2d0584b15506c9388192d9a8c7932f914a15caeaa87dd9708cf0f6c207b30b873551469e8e1012768d49e051d264bbeecaa7d8705c9a13724180d30789f9e76e123218df0f2543328c99a7accbc7862d043125916833f7d9d0bb8d3a4bd72b82c9433713b833", 0xd3}], 0x9, &(0x7f0000000c00)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x2, 0x1, 0x3ff, 0x3ff, 0x3, 0x5, 0x3ff, r3}}], 0x30, 0x8004}, {&(0x7f0000000c40)=@in6={0xa, 0x4e20, 0x5, @local, 0x1e}, 0x1c, &(0x7f0000003d00)=[{&(0x7f0000000c80)="fae5298ed16df9a462fb8ec480205132ded68120a803793e16a91c6ab2ae073ef36212f020f7f80afefb3a654d37e2bd0e9256868c0634322025e266b638c8ce427566919dd99b0c83d9100d8edb37029f1b2a6ae1e3ee41aa30b7dbee341ee3f896da943ca7709f06ef1823b7f40c77078b42ea8a55b63c0d67c27c14a4df3ee23a1a12b37c27327f978a458a9b440338f2646a15661af18630d16098fae9dd266dd563503be0a909c1b7881fb6025dbf47fb3394ea9fdeee70789f603298b3279d2d04aa5441db4e88088669bef33fd4ee6293b43b2baa4abb2587d8976155e3c2bf192ba84a0ef71e834eb9ad081b8c777b983aa9821755b512fe84813a30cc490acf0215dc4ef11b3ef63376c9be5b6e9cdc6a829dcdcca4b2bdabb4e01e0c4604859ba226beb5a72b942016840417d091919ae01be4bc9cb17b349bb4e44cc9ed597cdf89ad7d4794a86834ca3db7b536626a399f8e637b129fc847af8da4cb09c52d9e8a06ed773474bc37395e8c4bc1871a5445e11a816f977e94767fae70f6aac7b75b3aed626d8cb49637b9e6aacd49a4fe91f11c281563b5168c3ac540a570f24ab8608f1441e4d62644ca2ff8d291521be2b919665ccbfa6036d5644841e2a1a71cb7bdfd96bcd1edcc4060f265b432ae85676cb6bc005f3a79817920c58e167d7e63be03efefeaeb061b6cbde56ed07edaabfa02e007708ff6122df239b06973c72bf5e04ded5f06589cd5651d1b0460ec70d63cad3e85af0eb5b092f176523fab810189d4daefa62ccf5921d6467efc20c88d020ad0636d1df29c6ae16407d838d3ea2c76ef0fc1d560a35144642ad3e8cecf8b35580b7cfdc523e14407cf64de018af14092bf1a798d6326ebb1c9a7dda1b009e1e622c4752dc19e3ce27f135e44dd54e6bdce6152841105f683b1fcea7c60d0c824c47d657a2f4c3c6b22400a15cb2c35a33fed192b55efab8654e08c639146f02f19f5093d61098d0e38c3bbe9a8328913c006d83e61a732cc3858e3291f807aab60b02baf7a7a05193059e105fef7fc479ca43db274dd8adaf5306e0494906388ead4c92c89422136a9b027e46cb28b00bd72ecb55a2926ce9b0952b59b6e7fad20f7b9803a0269c86f453b3af9dec316fc79eee2a31326a6b17eeaf63c2610ad7250fb0f92183a02efc80a18e71051c47d6b88aa6918031b0d89ef8d89fc2bfb704af2a1aaae2047790721d9e90d8169ced53b5834c0beae8a6d31aaa63caeec479f3885d368ab8754ef669248db9e02fda7c98dfe5230d7c29af71ae18fd01b5983459e4eff5f73623aaa67c4f57830588fbb1d2f66afa6a5c2ce6d90ddccfeeaee7bbdf65fb5d825dee779dac6bbad66525396892391a7637ea4d56a18c908a8368687ae5752fa839493d18b8d0c2e41986a115947c4aa17c24bfe2d135bb25d28de02f2194d7c25ad91fe19d5743aae2f9ef8255bd373518c6a404ac97e8561f34750fd9c0bc875b7c00fb3322a509bec371a72a0b79b77f5aca8f1b6df235176fb670268a13c232fe1a8f92c16fa98786c68cd78870a80c974051ac818c153747eb69da3c96d8fd5b4e56ed6ea8a02c8e7c706c8c924a76678f816974b0718dc8aebeb263610ee36ef33347a169e92736f92a7aaae2a8375b8f39553ac016f1a9966f8dfb638affb6de147587edfdd2ee4e9ef93638a464a0979f2fa4d84ad5655defe746e7f0b83c4585fd06f8b18647cdee3e2117e80027f9783bbadde71dc801435c50510bac1c2822a51d59869faba978da4db03f66e10f3a154b1d0aca713995e96b2e7ea21d7172b63b69ba0775333f19da0a15db110234509058d2fb86c0002b26a0b360c751273d3dd3e8b3a31a9f83068442059e1e08f2ddd8b01c69bb29478b9e8f558fbab9fedfd7bc78e296f458d43966d923476385db401ce61a4f6abeeae30bba7ade0b8a6c8d533402ad9e0c3716476e18b5054ed840a82bc4921ca7090396ae2a072d6d9ae488006bf2dff12cce88fd92c2b5a442788ee8e8301abe1ad9ef38e8da004e618296df8c5027efcfac4c19f88f6de7253ef2acfcf8e970fdadd916824f38674631b59e8ae899fbd22f8ed3c2e6a940ebcb62a51ea50468f69666ee795c87322beaa853a6a7e67659dc8aab1dba411fa6d2e1bae990997ec173d3ea0d5d4e81a850a6067c442ff0d3d57a9b88f68f5f761a1891b354993a676c680452bebea01b66ce0834ef5239359cd8adbe2e02a3ddb857411c1e0004a2aecd8b32a6c6d9c5c1f246bd7f5f95822d0aa405628bffaa05ba3a5901c89930a6844fe904d4bad9763306d59ca527e6200bc25e8f7aa362b2ac97b912775eb8be61b37f03e827f3e1ff7bad6bcc1810b072f178a9228b5fdffbf7c6ec296a04fef1871812658703fbf015bf6507a32ec2d686794a8681ca86c9decaf62a54769899a7685f6cdc8fd56b81197d556613482440a603b8ad27c7cf8e3d39aafd5ce112fdc6f62e4abac4f2a9ae391fbf5b9ecdb27da2a1b1f242dc51ea0625d1e9d4dc3189323fc90d94a5c0097889cfb765e884719c8ce359e3260b546c3b66d8d48db6d11ef3965827a0506f9192ca425f7c900ddaea797df2849609884bb29a4138f4c5e0c3200d544802fa94f85db4d205ae9a7ccc11e6d08c63704358bac3f0df28258818c769540d2f6d982ba2935681a5422d657503ac71b9d6d5c7cbc8a980c32385ccb8775b764fb258958de30ac40fd17806c5f0a40e5936c6b347b6901602ac32a7f2531c48ee9ebb34fda37bc824ce7ba830d720d21a651a13f2863a7d515484c4e30f2dcacc7c58f2617ace06b25c7dae451d37f1201326245e79a9e65e47c3715381bfd83b811d3ac7bbe5dea5c08c9a60c339bddad9c8f73a893ac7b68c7df11344991268a211f5e58e35fed4c0f7296507f031a2c8e2f9877d908c7ad3aa03d3251f81a0f3ee581d9667a8409d7a5fef61cadcbf05640a8950a93de5fc951d065416462b3deffe958f14fc56af070069f2ef1f31a38413b9d198cc130bd8fe74628cd6f8b7a0443c804e9c682ea4d79ee181f5b07406c2931f0b5ad453f0cd70dbc1b4a6a9291f0d68a1474ee136299a60de9c926db25d382cb085f6b69851dc87e2fabbc8866c3574b1442b65382242080d4691f0574475a427bbb139a32671b70a37b7b70a320a12820cdbe0df283795bbc583def3a7bb2fdc7185c6349592370ca3ae8bdf4e351eec9b6f077a5ed1238da79f17aa773fc6bd6ce6c82603ae6cc35f6d4fe16c15fd6fb140f102ffcb9a0e77dd5edc767c8e17dd67242dc3b93a63815b201e590ccfa1d1328e8c573baaf4adceea9eebb4feb9557f46bbc50aa454648af8152356282e5bab989e470f492078303153b1d87a5b567598eec00e0ea8bf18ba2d53cb2fba2d3daf98cc586788882b54f3171d011df56d77224b2fb681e2554216c104f28bab68af3e6a3b635057be2ee4dba94ea1961d2fb45636feb8e197275610121a325f106372aa38ad04567b0f2141303653e969a38dff9ba6053ca43a1bf9e7cc25dd0dde9f183a2e28c40e9d7ec60ab3a3553051ad979f830bfb77dc64819ab5e3dc430ddcfa96463565ea654f26f4d524ef4791af7ca1ed6c6c365a5ca81abb8ed23b526066eadf3eddb47753d3f2507ab115c5b5e60ef954cae426414de13a94da29d4d272d0e13b939471447cc2a6b5f028f60fdfd8eb73202edc1566a79acd6f260bd12c9844523f4e43ef5fac90ffd4d82989b19b986b891a423749300e7920177cb243d80e404b780ba3a4d16bac34f0e7b37bf177e9397c19bd00bd74b95e82d7d701acea9340e7c95c9011ae206197fdcc44ce51b98b959e1d8a6ace3b084524202e59261dea851b3b1fe1bad6556af961f71cc573fd0e1b435dd17ec2bc181e7b1cd11dabb5b0bafcbf08f326fa210e9c1ff40bd2cf6d27ac7c3ebc0ae246668b47f86e2fae693a29acae4b4bea82eb5fa9828930f13e60d1849bb62940547fc3f174bf240e5c9daec24c4267300bee88e21de506e694beb96de6745d4691f4edfd8bbabed8a9e7ddfc6dbdbc1a906e7a64a9ed94da1f73cf899bbf4214f79354d10366931247d953552d64f7a4275c1f8f895b93cf7f2fa0054d0c4230d5eb19554b9a0038e7f6b8a3d757dbd05445306b7e3b8f9b6b9664a074733cdec38d3eef16e615a8141af561ff76da38a53eace1a6014f1e390cfca2b84009dc0a3644cb8dfec9f9ccf95ff604b614b09123f43e2cf1d53694a27f063fabd813f4f3c5ca5e955daf520132606eef7430333a699ad362fff107c77c01a1949e8fa96f78d773546380fe520345cad04218020abcb246a14fb6c5bf4a4bb6e09a6c5e0595985686dfbc005fb201baff9f92f3d26f5fa779ebd8387887869e621f650eab06b30046a905840384b42199d98da84f8c8d7097b636a51e6968b2519a0f186d6900baef537f4f6e9ab45eb09e99b6a70006ce6fd2c96ca4716e00ac37330697b2fa5eb8394836d3039255b7cd67f69bc1284ea064f46f2934a9de6c2205a526b8115cb9cf241cb01337572a6365d4c35d17da9a06348429819d0cccd60034766b352608309d62285c9943b824d1f593e7d063e977e43bf43290047de63c2d4377cc3c7d4d5d3248574061dbd0d8fbb87fb73237ced9b90f01ffe5284df7080a3c068576a3d7ca54579dbfd206268d65a437293cdff92f0bec6e1405d8974c322915e8549bd4c200cf2bf68d360555b00cb25dca73edd753bd93808daba7b16eff407d432fac9335379089b56c4063aabafacee306163d208fb3602c7c2ff4239784eb90361f70debb17a3fe3c2cfa6806eb89fbd081e010e3366a8800e3097aa874b5f27e2f570b76cdb067ec43119f79d0df55aece06e030fa16b30e6f5ce4895cd2fd891eec4d25a2578a76b2642f9b620ee183ee97dc39aee6a94f6af929a4607e6dac5e0dd77eaef204610d5c4405e480c9c7afcd022da9a585e8fabd1ee9237a74226fdaf49819f7e05e3a716dbef607cc08b8f3a6f8cbb3aeba94562aa7869d47efe2f4be710166cf60e335b4ebd217c494ece4c7071fedb9ae005cc2313225f3269ce28f01f12428c679cb30604617cd8b30873116fec7de913b092b8a5b47bb79d5ff09b42c82f4bdded21b09d2b36d4427641f46e925184515bfdc723e5f2273f47840764a93b2448e3ab0e5de363b470bdebb2a72084e5a9a328ff05d6269a7d0e1a2229e260a1af4c568da4feea1dab6a7ee92053fdfdceafe18528a17886b22d18ba46283f040a6aee961f9e499242e2d55a5d7f3f1899f2fcd2046415260d34d2280986f8532f602092072c0412718f28f458f5b393777a51f3e64acca120e72c0a4835162fdef868e3727d3ef7891891f9e667619e60361397f0bafc6e0256906de5ff627048f67b3427220a38c641c765b7dce4ccf956990ea11ea4861f70531504ad8029ba39444a2a52bade76291251f167f1a64e3cd32fcacc3551acd78de8188daa8a79cf378d2bc93168522e4f109a954c0fbc5e91e218f4957451e8bbbacf6bb2b4ec27b6413ab6b2f1b930054be8a507c4980b053c6ce22c210190cade7210f4e43b05a3f325e27e6577f34af35a32bd1b1cc63c4b947831e4e6debdf8f1bca9c203095a913116d2d9ea853514f048ef02034da466e5d9a1aa8950ce86d59d6302e740726a8ba3221e440f42068fb1070784c70aa7de6654e708e24695cf5e7478c49171ee01dba5b8828feb3cabb365fc25ad40fdb1a255cfe54debec1f", 0x1000}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="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", 0x1000}, {&(0x7f0000003c80)="b22d740b9932a8230c2adddb0668e9c18b529e4f9205fb66c81f5e3dd426de26eb9e237337a5f28a1e534d422a38401e858d5eeb0813445005b29cb5a97ab5a93c59a541225f2536bbc994924fb2d4ba3554b1850eca3d564d", 0x59}], 0x4, &(0x7f0000004180)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x1, 0x1, 0xffffffffffffff72, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x6, 0x8, 0x1000, 0x4, 0x1000, 0x3, 0x5f5, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x4, 0x820a, 0x20, 0x7ff, 0x101, 0x6, 0x400, r6}}, @sndinfo={0x20, 0x84, 0x2, {0xfffffffffffffbff, 0x6, 0x8, 0x47d, r7}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @sndrcv={0x30, 0x84, 0x1, {0xffffffff, 0x1, 0x8000, 0x20, 0x20, 0x2, 0x9, 0xff, r8}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0x120, 0x20000000}], 0x4, 0x4) r9 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6ce, 0x8200) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000043c0)=0x100, 0x4) 10:49:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000004000ef38bf461e59d7", 0x39}], 0x1) [ 1251.509898][ T8595] binder_alloc: 8593: binder_alloc_buf, no vma [ 1251.516199][ T8591] binder: BINDER_SET_CONTEXT_MGR already set 10:49:39 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1f, 0x40080) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0xff, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x3, r2, 0x30, 0x1, @in={0x2, 0x4e24, @multicast2}}}, 0xa0) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$RTC_PIE_ON(r0, 0x7005) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000cd48340000000000000000000000000000000000000000000009000000008000000008000000000000004db70e35b4e92f143f49ccbda9a547f8a4a240beb980e2583c5a308629a17832", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a747000001000caf86abd13e96642873fc5b3abe9df2aaff82666194e0906fdbe614944f0c7bdd2466aa33857209881822d37ac169b6223e1595534b6c785438896eee703e55bad172285795196ddfc159fc4e0651d11ca71c94789d13bd203b8694e833582ba9fd7611c73648735688a54e8", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="d64a18f1fb82a32e"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1251.590872][ T8591] binder: 8585:8591 ioctl 40046207 0 returned -16 10:49:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000f00ef38bf461e59d7", 0x39}], 0x1) 10:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4c000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x600080, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000040)='./file0/file0\x00', 0x3, 0x0) 10:49:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000006000ef38bf461e59d7", 0x39}], 0x1) 10:49:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1163484000000000000000000000613a2c58b873dd37000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="317ba416bb5d4c7347aa006c2f77c7092db4d368814db447c37ae8f803383cc41c8fd7804f6041a081"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1251.794618][ T8622] binder: 8621:8622 got transaction with too large buffer 10:49:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000001000ef38bf461e59d7", 0x39}], 0x1) 10:49:40 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x200) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x8, @loopback, 0x40}, {0xa, 0x4e22, 0x7, @ipv4={[], [], @empty}, 0x100000001}, 0x4, [0xffffffff, 0x20, 0x1, 0x1, 0x110e, 0x3, 0x2]}, 0x5c) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x50000, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0xffffffff) fanotify_mark(r2, 0x55, 0x8, r1, &(0x7f0000000040)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 'syz1\x00'}) 10:49:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000007c0)="8bc2bfaa66032a378c22511774ec68c34f45355b052faba1ee9e293c31dd2ae7aea249617559e8a841bc940efff0eecdc5b4a7f8c0f07d6857d452339476add405039efd74ab0d1a5f22ce4129b905109e48bd533f4f16563e2301f5a7d702dcbbabc3ec67092a5e8610504a341dc0c1cd22e5932203a42df61f2e09d6c4b169b0fe94e0ca8edcc189024c8a3919d8fe0958d3e23eb2410a1d6e4ae04f5d423dd6be4b014db5f1d8b0430c8c13fd78814666dce93c79a252fcb71564fd20664f9de01a821b45850306479cc98c8b41a3819023cb1f852cf6f7358afd888d0723b6187ad64b269cc819dd76c2a3ec532e8cd3d1d774ffcbec2309c2226386314182870d6cfc284bac63bf5be67d2294930d94424fbd012b282b683f1cac010d8a2679a8274c3995f0ad0fbfef1eee66c03c1abf6732603fd94387946322271218cae962470900c3e50d32210941c92a96031901bd81ec8183409b685421f3b26fceb13223bd45a458dd7ee8b4a191b62c8cb3d22905b513305c44719a8e24e47e94148c88cb7a233caf79f44406896c0dcbeb57e9148055610512993b723dfe34ab207a585c8f491e07320e0ec1b57a54084788938a1ff0c4dc69ad5b0f487f32211ec7f95da100d7bb860bfe8e0be30feb0f8d95bcf8c56e20ad0a1b5d44b86e50bbb1dd842fb1e422012db96ce8f32d1d815b19b4e88addc1b1f1e6c677e0092530a55f4769366278cd49107fa043047c819a8aa489b070cef1ffa4b23bcc39da0539e58f7bbbac0b84a59a4d322aaf0359fcb43029ce1972e44f21689ce6fb44b7d7dd4626543b31249d9da72793094962ffb155d8b39bed672fffa5a142b658c3c467c1ab230ea591b3dd4189b701b5030d375269e692f707ba1a92cc7965cfd5154783ee5d54edf152708b7df2aa333c0c4c7949e37b1102ac88bab35d711069e8cb95229bb583d353c3f4774e9d7c6873baa872e687410928b6e6c39135ffcb33ef9db47e76d42cb3e178d00a4d5406b1eafc01cff7f7e990e1c24075940e7fef582398ba4f716c3844343543c2c6239eef90c53ace536de27d16ae26c9eb6982a9cea6c13b21cd3e04e33ef9266f0119e2d9e9bb32198e324630e5f0e1e49604b6d0298db6b76bba8b30f4de4dcafdd1596abb72b2e196812d285456e1c87d3048daccf1e7f6e8a6f20dbccb73ce158f4bdd12127744f3460024d869159157cefcdaa184165a494dad213a344f4a9b128169edd44f76e5ae5fde4f14de7b5d2a5970e85a93a2b6f7d908f88cb57f8e3d48a7c3c7a1db815575979e95bd939583164d3c2ff0ad320cee51e54a618b122769b716a5dc50ec2875b7a6e71c4eaf8c31004ccbc4052abec9489df01de9d2f539a5b0e5dabb46c741065d4e9f62e08f7d65203e7e70eb2e966a2e4e407f656903d978f9bf610aa8aa81336aeee2417cfb7fd9e44201617ca33291022e1073fd0cc8bf6a9ea4ce284e4d63701b4537fb7684d9c176b8248cc15114f5dbf0722bc0ae9598ad64c28618d0e8622e087bdb56891ba095b40f4fed151b8174622496e43065aab299e8ce6c69edc5f0a37475d6b413758b458d04c5a167dde5972be273868a11530759ee00e8ed730f558480a2fd2599dfd31b80fb9209fe173777115a833f01cc78f1d75f75eff4d16c566b846efcfef8c5791efc9c2ba7df1f9346d9ef00d81d58dd32b18f949ba3244f79e815db254b6d04c969ff6ea89c1f5ce7de9be6dfc2ccc0445095c102c0f3fe1979270304d2cc0eb652bef90782db6e2d09c6489b4f801d74e94ac8a05faa6831fe26742d7d93b5ce9c21cfd0e75756fc246d6561254b2a186267c3c602fa44639bc046363fcb57b0a11f57b1c521f622f87753d1b86049064e01c6a8035bdfca4e5868e5091a9c07ba4d13ab2952a76a6b1cc4e9f303978c669c3be46ddee5cd648bf2a1cc80d8ecb2ab631435f2bd574ec070458e1a77d334ab9249c17c9be1b29c1341c9bec2e51ef4c73a3e0c26ddea5e70d77a755549a84fe9ebc69467bfeb277427f8b51fe3e51b4162c3e6fca24997817342ec0c7a42d505403936ee90217a73163266a68a53ebc4e3e63e37d1e3d5ea2a9b301c64a7b9134d23f949b657c6f67a8179c3994d492276814e3046c13cefa5e05422834ef054b69b175f857a46f53949828c0bc6ce942a2b71d1d2e915cb507e69bc2a864308ec1e96e388fc70392a66500af460ff58e1b0d4f07d094ba521f2859299b6fe6ef613a5b1738718b5d242a48ee0717d50072769c4e3a3c752284614c24789edb7028d6acea2ea450006eb557f3bbef89e6af4e0dbf19624f591469aa92739151b7e5a6cee33db2881e6feb3a6392549a06e3933a75c904734c0a68b45dab60757f643b9e87d6705fe058c89c5435ec3d15d4eea2a4cf051d227c1e0838b4dd2e13106385bd2575c0c0cb8d0f1d21caab3ebd765186116ab8cc71e8c54a673405fd4386abfdacf086ecafeb7b017f6b1b72a849b0aa43997c8c2f27351230f3c3df4e3d8bab4b5be3ae86a5a731f20799833d52e5e38747a1e129126b43e9b5a6a374f7bebb9e7c53a16be82322629f5eca50b7b7dc224e350fcf627955a8a220218d4afee6aa50d5078ee003ce558af05f0d182d3ba39cfb405535f19782a3a1dafb1909ac20918f4cfbcfbe25f6959bd9e59e467f21050a62652156ee2a282bea164394476b2dd5a355c9d4a4a4691c7e0a0508ee6ab2ffa3a4648baf53becf1a3c919fef6b5f82c3edb4293ff28c9b28048eb2454992beff20923162cdf99a83e3b33b88fd7e3f29ea79acc3637b0e71623c38faa93c7a29a2630a3267daef474677346cbfe29ed5586e072729b3b7b9de15f48a9393fdfe94054005967e09c7ebfec5af6ccadbfc0771156363f509f01dadf7b034b36317dd577d4b6f526bad26ac4be7fb3e891517837b10729603e5076874dce8fd2efd647dae6dadf3d42109e5531d5891a5ed276bac0e3a3ac99836704f6b0a694b231cd11848bd6ac65a00730074e002f09fd87e06bdf46be644921836284d8d5697239782669a37245dc353c6c64634a7a0d775c09cee2fb636f7555b74dc258ff4cbaef370148b487da8651c416ff61013cdfd5282b728bf3190c8efca2bd072173529d8a1cede0cb3feb178e0e999a32da48885ed5247e039d1f17254fb3cd74383951c1064c522f418311f76ad215ada14ecd6ac86f1d1d2da80fcfd61333ea93e1cbbb2879f231be56c9ddb0af37456c7306975f1d383dea69e9384b489ed580a0fb9da4092081a63936b2d2605843ea4dc649f161a81291378325d52b40b0afddcdde2448883476bb35611cd7fd9cee8df8f2dd8c9768c6aba9f96b6d51dc5045c7ddcf20e1a07d5c22b9ab6ee17c1c8c4130a5056fe03bcf65697cc81e419a243c1e073ab1f6b3c50c3d4a4912eb27f56c9f505e8f175058b2fe9148b44671340cb693f1e414371e64bf5c5a13d1ee4df7d48fb04ea4595c5a0bfee5b366559cf84d5266903aa5a9a75006bbb2d7dd6f35fdf375ab7f242452099e5f40c085f0b66b0157e31f68d6638dd72c0e02d0d6839b08981333cf9212f8a299cc4ff4ea08c2a5b560c1e647a70684cf4071c6d674cbe4f22b727aaa7b1d76db9e2a4e8f893277f8c577791e2179102e3a3d7d1b6d32d455f136a56ac8e1469903f26a1bf1ecc7a0551c79057e4e24ff18953690503f795fc32615d604de9a5bb7e6dc428e515abd281527b3069fc5182c1154629cfe1c1fbfe27b5cd82605e19f5f529461f725cbbf414aff8ee51d655a6fbad2d644486778016c3a12dbcc1c39e83302dc477e8da09fb5a58a8887aba686bd2bf4ef5a408a687c3c141465f10c449effd183ab3b16efac8a63a80c2deeb1ee3607d79411cada5b280c2c28db24251156959ea065ba88b46191b76de9d94e38e1fa854dfdba5295bd8db04f2f2b5abdc00d84e4bc20edba205628f7049b092fc912343530a879ce744449c38cf0b3c3646090b8c4bd6b5d91388ab7110e7972d6ee5e57f5fc62969043712ddda27376cedc737e278432b9b76133b45b47a5413785ba5be5bd83c588d4556158eaac77024c78b96c91827cdfb3b48ed2a0235ae2daed6e93fb137e11eb51e864eeadb1500040073da1651bb20faa865d248aac18dd5259cedd5178cd2564105d15094d87b0fa8dd19ceebda29c2eb2cab927762bf5bad315f5674b5e9ff5f5d988f7cb8408c40f3be107c49ef5bf82476e29d0df2f76881a1b52be11f4e0712a6f89d62b550e1145077e9f686556753bc74c1a7df5e5fc307d0ae0676022ff21304a8244988d763111f271f97dea0b63001aa7b5949d3532617949142c550dab6af1a52717659ac56b4e2376c54a057664ce23f96154056344e28fb09bd7e9f8d2936a2842efb53b156539f91d1b9d3be07349fa69e40c915b54c5cbb004cd80ab3c8f49fa2a6fbba7a4ca6c8f5924a2c9b082eccd306ae4df0b2cf8fd2a902cfdeeb3e31551e6340a7432a08afb8022a26bc81e82d495f87347cfe49356448a508ea59e04a5f2aeeb5756f61c4a6329f24c9a9dc72a5a51f7b2c5c181368969b1966a047c4f78fc2a1c1a51fe650e22eadc59678225e3cf1e5d649dc4fba122a6c0bd31d75542485b66524df71145cb9a295bac6f9d76894774b9b1433273af23fa4ef7c473729dd032b06aefe8cda5a7ed767734f3ce00998d2e850de3db18a79f1979383fd94b210d04adbc3882fc5d5927acffac7665a0c6772fa2ee26299b7524b89702bac0ecf944206708c0c2460a7564ad8fec708eab23c6aa6d4bc9959e33577e4da12c7f15751cf3a708698ada05a17e2f5b183575190eb653e615558d14e37c85f528503d9c6582b43b9ea66fc5a1426d47e397a0057511b7d923951939a59200fc1a2b2dfe311847b18c2f91c62b59608aaf31b0e02b4c7ea24dd56a4ee6158097ecd3749178760f09298c0b7944f2ebe2730fa92d06a3e6cafccf9c2d5aa88a6285353a0f74484b58c5ac53d89b8430232099d43478b1076e5bd5e7b10ca7fc6f1378041655e0f6fc2cd7992544b1978968051b91505fe5c1559c73717f3b442eb0085e2c2444902a4942787e49f0c159f59ee01ff88e2e63f18533847cbb11f27de33f2fdd851829ed75b6f21a9e933337cbcd60a442662af00dc94f0df224c0fe63ffa4a0b1b5d14ce33d53c8f4b37f03a5c92aa1710153735a2f011d0618f5c66658ebde58bbc94ae47886763882e9390ae0ed373c6bad0e3211980791f8a95c48d0992391aff3ba97df13a28a9e92576ff0f9ae35e5c85cc8bedbc056c81c3153fc1d6f8470206bfd58561c17806576f7006c8ea3073c06183fee8e95d91fece84249b80223096c6798bbaf2f3e82d6cc051ea3ca8dd6a85452f1dd4176df0e77f0cb50c2143161a76f857836024d66c53ec6978c695fadc3419ea2932993b4841f6d8fb56d07ac32f6dbf4a41f144c0d6cfbf11fe5b2d10a00aa569e3209b55bf02d160ad3f9fd1be1e0f41a329b39f19cf1720ff8c84de8c4adb78d113103697b37508d100cd2dd83408300c1255a8b9285b2838cce78ebfcb68c08ceffa110aa76e7daf4feb0cc81dc01c97d7e958dde878ecd7fe565bf08311e78f242d6334f005540fc2ef318a77546967d6837076b974490dc788859ca3691f02cca116ce40ded563e4e5237ce6059f0b1e152a76c0ad3c26a8676f9123cd3a20ca8b6b39365ee43dfa6e275dde131fcdcbcb68dedb75b70dc479f86a03d4eb02b59ae04ca3636", 0x1000, 0x4000, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x1) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)={r3, r4, 0x1}) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000100)={0x5, {0x20, 0x7f, 0x6, 0x75, 0x5, 0xffffffffffffffff}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff0000000000000000000000004ce7b68c7808f2b200"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1251.859705][ T8632] binder: 8621:8632 got transaction with too large buffer [ 1251.893442][ T8636] binder: 8635:8636 got transaction with invalid offset (8308118470711868209, min 0 max 24) or object. 10:49:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000586500ef38bf461e59d7", 0x39}], 0x1) 10:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x50000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000003f00ef38bf461e59d7", 0x39}], 0x1) 10:49:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) prctl$PR_GET_SECUREBITS(0x1b) 10:49:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dfd000/0x200000)=nil, 0x200000, 0x0, 0x10010, r1, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000008100ef38bf461e59d7", 0x39}], 0x1) 10:49:40 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000002e80)=0x214, 0x4) readv(r1, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1) sendto$inet(r1, &(0x7f0000001180)="e6", 0x1, 0x0, 0x0, 0x0) [ 1252.148784][ T8656] binder: 8653:8656 got transaction with too large buffer 10:49:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000004000ef38bf461e59d7", 0x39}], 0x1) [ 1252.221719][ T8664] binder: 8661:8664 got transaction with invalid handle, 0 [ 1252.223558][T22747] binder: release 8662:8663 transaction 6472 out, still active [ 1252.251493][T22747] binder: undelivered TRANSACTION_COMPLETE 10:49:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x803) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800001b8800ef38bf461e59d7", 0x39}], 0x1) [ 1252.267399][ T8656] binder: BINDER_SET_CONTEXT_MGR already set [ 1252.289752][ T8663] binder_alloc: 8653: binder_alloc_buf, no vma [ 1252.294624][T22747] binder: send failed reply for transaction 6472, target dead [ 1252.299665][ T8656] binder: 8653:8656 ioctl 40046207 0 returned -16 10:49:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000006000ef38bf461e59d7", 0x39}], 0x1) 10:49:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x7fff}, 0x28, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x64b3cb7426d54726) r1 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x3c, 0x1, @in={0x2, 0x4e22, @local}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) read$eventfd(r1, 0x0, 0x0) 10:49:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x60000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548ffffa88800ef38bf461e59d7", 0x39}], 0x1) 10:49:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x40000, 0x0) write$apparmor_exec(r2, &(0x7f0000000080)={'exec ', 'em1\x00'}, 0x9) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:40 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000586500ef38bf461e59d7", 0x39}], 0x1) [ 1252.615490][ T8700] binder: 8699:8700 got transaction with too large buffer [ 1252.625333][ T8704] binder: 8701:8704 got transaction with invalid handle, 0 10:49:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548ffffff9e00ef38bf461e59d7", 0x39}], 0x1) 10:49:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000000c0)=0x7fffffff, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000380)=0x54) fcntl$getown(r0, 0x9) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x3, 0x1, 0x10001, 0x2, 0x5}, 0xc) [ 1252.683856][ T8700] binder: BINDER_SET_CONTEXT_MGR already set [ 1252.711910][ T8700] binder: 8699:8700 ioctl 40046207 0 returned -16 10:49:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10001, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x9, 0x45, 0x7, 0x6, 0x9, 0x2, 0x1, 0x100, 0x6, 0x8, 0x5, 0x5, 0x20000000000}, {0x2, 0x8, 0x3, 0x7, 0x4, 0x804b, 0x8, 0x1, 0x4, 0x2, 0xfff, 0x0, 0x5}, {0xbe9, 0x1f, 0x170, 0x1, 0x94d, 0x50, 0x40, 0x800, 0x4, 0xec6, 0x100, 0x8, 0x5}], 0x15f}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) accept(r2, &(0x7f0000000180)=@hci={0x1f, 0x0}, &(0x7f0000000080)=0x80) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000200)=r3) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000240)) 10:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x8000, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000010000000000852a74707fffffff0000000000e8d908491ca555c500000000000000000000000000000000000000932b45702f70da97867fefaab1a88139ec6772e57848aa934b638f8cb562ef808874568b46b396a1cba25af0edd8f30ee57229a53905872710490a6396de7e9943c8ed4282c89ffd796c1cb3d8e2c415dbd3145bfd790ddcc7a088efd0605f22126c1b5e44e52247e5"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000008100ef38bf461e59d7", 0x39}], 0x1) 10:49:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x68000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:41 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20103, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) pwritev(r1, &(0x7f0000001200)=[{}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000180)={0x0, 0x0, 0x1001, 0xebcb, 0x1000, {0x3ff}, 0x1}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="26000000370200024d00"/24, @ANYRES32=r3, @ANYBLOB='\b\x00&trusted'], 0x26) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001240)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000001280)={0x7, 0x2, 0x7, {0x9, 0x3, 0x6, 0x10000}}) 10:49:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548ffffffc300ef38bf461e59d7", 0x39}], 0x1) [ 1252.939885][ T8728] binder: 8727:8728 got transaction with too large buffer 10:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000003f798897438dbc92841fde4ca5dfe8000000"], 0x0, 0x0, 0x0}) r2 = request_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='/dev/binder#\x00', 0xfffffffffffffffc) r3 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='/dev/binder#\x00', 0xfffffffffffffffa) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="2cb8638f5a19068d9bedabce4b9776ccd7", 0x11, 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r2, r3, r4}, &(0x7f0000000300)=""/103, 0x67, &(0x7f0000000480)={&(0x7f0000000380)={'wp384-generic\x00'}, &(0x7f00000003c0)="2b00ad1a70424a9bfc58b5dc3045b1fedeaa14db7f37b20a1a86b8610f4d4d03f4e8a2018d008a674e29355b69826a8a5376917af4b3faa6b2db65e0966d2f20f64fe02c97c8afb261785c8a9d8d005713c824547cfa5e9d86ca170f91709e4abc60ef18d184d1de442ac6bd11f292adf0c5db681d9afd7c6ae8b14e613d321775c8c3f211533d3a89d404353f282dabf23850e768236a", 0x97}) [ 1252.994824][ T8738] binder: 8727:8738 got transaction with too large buffer 10:49:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548ffffa88800ef38bf461e59d7", 0x39}], 0x1) 10:49:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fffffff000ef38bf461e59d7", 0x39}], 0x1) 10:49:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6c000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1253.076803][T22747] binder: release 8741:8742 transaction 6499 out, still active [ 1253.094380][T22747] binder: undelivered TRANSACTION_COMPLETE [ 1253.101021][ T8744] binder_alloc: 8727: binder_alloc_buf size -8612783543136813024 failed, no address space [ 1253.150471][T22747] binder: send failed reply for transaction 6499, target dead 10:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1253.199637][ T8744] binder_alloc: allocated: 72 (num: 1 largest: 72), free: 12216 (num: 1 largest: 12216) [ 1253.229835][ T8754] binder: 8753:8754 got transaction with too large buffer [ 1253.256345][T22747] binder: release 8758:8759 transaction 6505 out, still active [ 1253.275418][T22747] binder: undelivered TRANSACTION_COMPLETE [ 1253.285616][ T8761] binder: BINDER_SET_CONTEXT_MGR already set 10:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80, 0x0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x8, 0x20, 0x7, {0x1, @sliced={0x4, [0x400, 0x1, 0xfffffffffffffff7, 0xf2c7, 0x1, 0x4, 0x5, 0x400, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x3, 0xb14, 0x5, 0x9, 0xfffffffffffffff9, 0x4, 0x37d8, 0x6, 0xb5, 0x5, 0x3f, 0x800, 0x20, 0x5, 0x8, 0x8001, 0x9, 0x4, 0x3ba, 0x8, 0xff, 0x40, 0x9, 0x72952cbb, 0x987, 0x3, 0x1, 0x3, 0x1, 0x9, 0x3f, 0x80000000, 0xffffffffffff9cbc, 0x80, 0x3], 0x7ff}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000240)={0x8, 0x1, 'client0\x00', 0xffffffff80000001, "50ad90a7050df6db", "c4a06e34d1bfd36c5e15ed7d6665034edfb29c3ce070a423292f87322bda7b5c", 0x5, 0xff}) 10:49:41 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548ffffff9e00ef38bf461e59d7", 0x39}], 0x1) [ 1253.321842][ T8761] binder: 8753:8761 ioctl 40046207 0 returned -16 10:49:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fffffffc00ef38bf461e59d7", 0x39}], 0x1) [ 1253.384480][ T8755] binder_alloc: 8753: binder_alloc_buf size -8612783543136813024 failed, no address space [ 1253.439987][ T8755] binder_alloc: allocated: 72 (num: 1 largest: 72), free: 12216 (num: 2 largest: 12136) 10:49:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$notify(r1, 0x402, 0x80000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x40000) syz_kvm_setup_cpu$x86(r2, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="c402f91736c4c2791d508066410f201366b8bb008ec82636e30366470fee7e3741ec0f09450f0865f20f2b17", 0x2c}], 0x1, 0x8, &(0x7f0000000140)=[@flags={0x3, 0x200000}], 0x1) [ 1253.497867][ T8762] binder: 8753:8762 got transaction with too large buffer [ 1253.508402][ T8755] binder_transaction: 60 callbacks suppressed [ 1253.508421][ T8755] binder: 8743:8755 transaction failed 29201/-28, size 24-8 line 3148 [ 1253.560431][ T8762] binder: 8753:8762 transaction failed 29201/-22, size 64-16 line 3357 [ 1253.620784][ T8778] binder: 8777:8778 ioctl 8138ae83 7fe5362466f0 returned -22 10:49:42 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20103, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) pwritev(r1, &(0x7f0000001200)=[{}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000180)={0x0, 0x0, 0x1001, 0xebcb, 0x1000, {0x3ff}, 0x1}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) write$P9_RGETLOCK(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="26000000370200024d00"/24, @ANYRES32=r3, @ANYBLOB='\b\x00&trusted'], 0x26) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001240)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000001280)={0x7, 0x2, 0x7, {0x9, 0x3, 0x6, 0x10000}}) 10:49:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000015b400ef38bf461e59d7", 0x39}], 0x1) 10:49:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fffffffe00ef38bf461e59d7", 0x39}], 0x1) 10:49:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="d0d353bf924e23681fd6e73c01000000c5d3ff79693180a3cf14424b54537698558ddbea47e57da6dbc90e4f7f42baab19810e04e49ec68657d47b2ed6bb04bd90c6c516486e9f70306af032f2e0d79445314a8a314d3aa105abaf207c943ef6ed3f629a1e11d27658685a1a228a8121717199213c93c91aa5b7d5204ddbced283f4197445a1d001ad4cd77bb5bda2a72465e1d9da9a9efdb05b45713ffaca59273b91ccc2ed216c398ec45eb0064a9a9c6136a699019a89500a30b9aa189950cc96b0e7f3a7fa4dccd7cb0a017ba336f68c8c6cbe94bbe5ad2b5fed499fdcac08232cae8a7876aab96e9526990450c07c03"], 0x0, 0x0, 0x0}) 10:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x74000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1253.669334][T22747] binder: send failed reply for transaction 6505, target dead [ 1253.677589][ T8779] binder: 8777:8779 transaction failed 29189/-22, size 64-8 line 2995 [ 1253.699627][T22747] binder: send failed reply for transaction 6510 to 8777:8778 10:49:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54888a8ffff00ef38bf461e59d7", 0x39}], 0x1) [ 1253.772210][ T8789] binder: 8788:8789 transaction failed 29189/-22, size 24-8 line 2995 [ 1253.790479][T22747] binder_release_work: 62 callbacks suppressed [ 1253.790488][T22747] binder: undelivered TRANSACTION_ERROR: 29189 10:49:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40800, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000080)=[0x5, 0x1, 0xd60, 0x1, 0x2, 0x80ee, 0x8, 0x1, 0x0, 0xd28], 0xa, 0x8, 0x13a, 0x1000, 0x7, 0x6a6a, {0x0, 0x1, 0xffffffff, 0x401, 0x7ff, 0x7ff, 0x8, 0xca, 0x7, 0x6, 0x2c, 0x1, 0xa81d, 0x8000, "e5b12dd70b496f9c70eec104eff3b87da750651e09d2f8a94ea05fb3319dc41a"}}) [ 1253.822509][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1253.835460][ T8792] binder: 8791:8792 transaction failed 29201/-22, size 64-16 line 3357 [ 1253.847044][ T8794] binder_alloc: 8791: binder_alloc_buf size 7503927796311512048 failed, no address space 10:49:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548ffffffc300ef38bf461e59d7", 0x39}], 0x1) [ 1253.868255][T22747] binder: undelivered TRANSACTION_COMPLETE [ 1253.895016][ T8794] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1253.917542][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1253.924874][ T8792] binder: BINDER_SET_CONTEXT_MGR already set [ 1253.953860][ T8794] binder: 8788:8794 transaction failed 29201/-28, size 24-8 line 3148 [ 1253.963468][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1253.970460][ T8802] binder: 8801:8802 transaction failed 29189/-22, size 64-8 line 2995 [ 1253.979101][ C0] net_ratelimit: 22 callbacks suppressed [ 1253.979108][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.979866][ T8800] binder: 8791:8800 transaction failed 29189/-22, size 64-16 line 2995 10:49:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800f0ffff00ef38bf461e59d7", 0x39}], 0x1) [ 1253.984852][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1253.984968][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1253.995362][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1253.999052][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.038205][ T8792] binder: 8791:8792 ioctl 40046207 0 returned -16 10:49:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fffffff000ef38bf461e59d7", 0x39}], 0x1) [ 1254.054806][ T8805] binder: 8801:8805 transaction failed 29189/-22, size 64-8 line 2995 10:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7a000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1254.134866][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1254.168860][ T8813] binder: 8812:8813 transaction failed 29189/-22, size 24-8 line 2995 [ 1254.183146][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1254.205771][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1254.212266][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.212321][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.212409][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.212455][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.300483][ T8819] binder: BINDER_SET_CONTEXT_MGR already set [ 1254.306552][ T8819] binder: 8817:8819 ioctl 40046207 0 returned -16 [ 1254.375479][T22747] binder: undelivered TRANSACTION_ERROR: 29201 10:49:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) 10:49:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5489effffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000340)="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") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xffff7ffffffffffe) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a8262f2180000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="00637346fcf7"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x101, 0x8}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) fstat(r1, &(0x7f00000000c0)) fcntl$addseals(r0, 0x409, 0x4) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 10:49:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fffffffc00ef38bf461e59d7", 0x39}], 0x1) 10:49:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB="0000bd"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) splice(r1, &(0x7f0000000040), r1, &(0x7f0000000080), 0x1, 0x0) 10:49:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0xfdfdffff}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1254.426231][T22747] binder: undelivered TRANSACTION_ERROR: 29189 10:49:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548c3ffffff00ef38bf461e59d7", 0x39}], 0x1) [ 1254.542972][ T8832] binder: 8831:8832 got transaction with invalid handle, 0 [ 1254.560996][ T8835] binder: BINDER_SET_CONTEXT_MGR already set 10:49:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548f0ffffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fffffffe00ef38bf461e59d7", 0x39}], 0x1) [ 1254.609126][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1254.615259][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1254.615840][ T8835] binder: 8834:8835 ioctl 40046207 0 returned -16 [ 1254.639725][ T8849] binder: 8831:8849 got transaction with invalid handle, 0 10:49:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00000000000000000000000008000000000000000000000000000000000000005ceea5f790c668dc4389bda5ef801cb0ae314cb6214b53b50002acea3398cae07c1fbc46bd973258cf218aecbf8a1cbd7cd1858fb7e6ec57df40f9edc449e29ff8a00ab9e4c12b855bbcb91a7dd9a73da447a8055ced0600da38b2dc7435f466f7fc94a29c91bcdfa498d59255050908c4cc2f43883d5880c37b8e46c7d8d7cf9b1d669715148396184b7ad452c73b3059022044306e3153bd9da400fcd078ab25f63d2d"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0xfffffdfd}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = dup(r1) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000040)={0xe, 0x2, 0x3ba, 0x3ff, 0x63, "55eb231a5fabef946ab2c312cd4e04013e76c02962d43729628eb96125ee064b69ce40752fa9e23c34fba35497131f50a8aa4e2c416047e91e395d847024024729dc5732502b0d45554323523c69bb0dabcfb06e0885ffa431cac7fbed8ae52cd34ebf"}, 0x6f) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000140)={0xa, 0xa, 0x6, 0x40c00000000}, 0xa) 10:49:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/packet\x00') sendfile(r1, r2, 0x0, 0x800000080000002) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpriority(0x3, r3) 10:49:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54888a8ffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fcffffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600), 0xff41, 0x0, 0x0}) 10:49:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="962a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x100000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1255.387181][ T8880] binder: 8879:8880 ioctl c0306201 20000780 returned -14 10:49:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548feffffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800f0ffff00ef38bf461e59d7", 0x39}], 0x1) [ 1255.443330][ T8885] binder: BINDER_SET_CONTEXT_MGR already set 10:49:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)={0x2a, 0x4, 0x0, {0x5, 0x8, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) [ 1255.494306][ T8885] binder: 8878:8885 ioctl 40046207 0 returned -16 10:49:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x41000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r1, 0x0, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x61, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x9, 0x8001}, 0x0, 0x0, &(0x7f0000000180)={0x18, 0x80000000, 0x1000}, &(0x7f00000001c0)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x8}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000040)}, 0x10) 10:49:43 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="0adc1f123c12e33e9bd070") r0 = socket(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x41, "a9c078f220c06a3886469317a8ac74853f3e19bc4a173e6afffe43bf33e61a84b09754ac87e67593eff1426465b600a7119867a8dad37d8600881624314df8043e"}, &(0x7f0000000080)=0x49) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x9d05, 0xa, 0x8001, 0x800, 0x27, 0x6e1ee39a, 0x9, r1}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xb, 0x0, 0x0, 'bridge0\x00', 'vlan0\x00', 'sit0\x00', 'teql0\x00', @empty, [], @link_local, [], 0x8b8, 0x8b8, 0x930, [@among={'among\x00', 0x820, {{0x0, 0xc}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c77"}}}}]}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0xa38) 10:49:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5489effffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480002000000ef38bf461e59d7", 0x39}], 0x1) [ 1255.571134][ T8900] binder: 8899:8900 got transaction with invalid handle, 0 [ 1255.603183][ T8906] binder: 8899:8906 got transaction with invalid handle, 0 10:49:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x200000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x202, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000001c0)={r3, &(0x7f0000000100)=""/71}) write$P9_RREADDIR(r2, &(0x7f0000000180)={0xb}, 0xb) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x0, 0x8800}) 10:49:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x4001000008912, &(0x7f00000000c0)="d280e100") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2000, 0x0) epoll_wait(r2, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) 10:49:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400880, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x1ff, 0x5, [0x6, 0x4, 0xfff, 0x101, 0x8]}, &(0x7f0000000100)=0x12) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffb, 0x0, 0x0, 0x6, 0x51dfa77f}, &(0x7f0000000200)=0x98) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1255.744073][ T8917] binder: BINDER_SET_CONTEXT_MGR already set 10:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548c3ffffff00ef38bf461e59d7", 0x39}], 0x1) [ 1255.822829][ T8917] binder: 8913:8917 ioctl 40046207 0 returned -16 10:49:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480003000000ef38bf461e59d7", 0x39}], 0x1) 10:49:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") clone(0x10090004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'brou\x00', 0x0, 0x0, 0x0, [], 0x1, 0x0, 0x0, [{}]}, 0x88) [ 1255.888791][ T8932] binder: 8931:8932 got transaction with invalid handle, 0 10:49:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x300000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548f0ffffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="d7e021666944e355c811a3ae41e70b6fcac143e85fa0e727a2ce6b58ed162624d7811d379ad6587a6ef09ab2eb2000fafb97266613363a8be9cb99") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1256.017001][ T8944] binder_transaction: 10 callbacks suppressed [ 1256.017012][ T8944] binder: 8943:8944 got transaction with too large buffer 10:49:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x100000001, 0x111280) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @bt={0x100000001, 0x7ff8, 0x3f, 0x800, 0x0, 0xfffffffffffff635, 0x2, 0x2}}) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000d5fa09a4e7364bcacc61843e9515e57d66590f5784909d0e0a69ac2ef72903bbb4f04b4ef81d083d1fc05d3d42d7075c92a9999c5f710f720c91fd24ea111d3449ed76d652a760e6176c6c54b3823ead575291ef8cd47debe6828bdf09922f62d8b8cb54df5e7289441aaa405db24c6b5f26c045dbf14f4fd7d20d7ccc784cc421ab098ad01f1283aa556ca8c2774b9d973e32d588f0eb52140a692372c136f1863bf1c7748cf5f735f5c11531435ebf8a4a0f7f4939f64dc835edb0e21fb9c9a272576f9d1d4bf5"], 0x0, 0x0, 0x0}) 10:49:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480004000000ef38bf461e59d7", 0x39}], 0x1) 10:49:44 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\n\x00L\xff\xff\xff\xc3`\x00', 0x68000000}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40800, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001180)=[@text64={0x40, &(0x7f0000001240)="0f20c035200000000f22c0420f32c461fdd54a00c4a1a955bc0e00000100b805000000b9f40000000f01d941d8b00e0000000fc71de800000048b8ad2e4ead000000000f23c80f21f8350c0080000f23f8c744240055000000c744240298d78a99ff2c2466450fed5397", 0x6a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000200)={0xc0003}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000040)='\x00\xabtw/Z%B\xd2\xd6\x1e\xf0\xfc', 0x0) ioctl$FICLONE(r5, 0x40049409, 0xffffffffffffffff) r6 = accept4(0xffffffffffffff9c, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000001100)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000002f000000b98f856087c829a08e8d8f521aaf7c38e0b029deeabb890e8baf037e1870e5a02897afa4f4f748540401be69840a2a"], 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xc0000, 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r5, 0x400, 0x1) fcntl$setown(r5, 0x8, 0x0) execveat(r5, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) unshare(0x40000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000100), 0x1000) [ 1256.104046][T22747] binder: release 8950:8951 transaction 6571 out, still active [ 1256.143721][T22747] binder: undelivered TRANSACTION_COMPLETE [ 1256.171346][ T8944] binder: BINDER_SET_CONTEXT_MGR already set [ 1256.210841][ T8959] binder_alloc: 8943: binder_alloc_buf, no vma 10:49:44 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548fcffffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adca1123c1261319bd0705c2ad7ad8480349c9194ad8ece2ff617a1b20bb254f4779fb957c783f79967d3f2db2e4245b9c7226b0f05e685aef48f3ffc2e39a8c82da18a9815598141f553625a0623b50df30c4cb1c6ca13f5dd8bfb4a5ed0797c77a894404cbf43eb26520eb033b8a3ad4a676afd08a39fc517a749425325055e8e62130d4df9871e6965b831f0304adaccf20ee1f5b68534f42941aafea658b7bfa856eb15bf4e140bb6e0c549c98231351a38f82451d59b97a1f26c5ca07eb992316508efb0389008251cd7bcd6979e1635b9c13d568221cf3339f3bf028ac98f8b7da10d546e4cd748e46f6647eb4594d72cce297f34") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1256.211315][T22747] binder: send failed reply for transaction 6571, target dead [ 1256.224023][ T8944] binder: 8943:8944 ioctl 40046207 0 returned -16 10:49:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480006000000ef38bf461e59d7", 0x39}], 0x1) 10:49:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) 10:49:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x400000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1256.536933][ T8987] binder: 8982:8987 got transaction with too large buffer [ 1256.696127][ T8969] IPVS: ftp: loaded support on port[0] = 21 10:49:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000a000000ef38bf461e59d7", 0x39}], 0x1) 10:49:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x401, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1257.111899][ T8979] binder: 8977:8979 got transaction with invalid handle, 0 [ 1257.149506][ T8987] binder: 8982:8987 got transaction with too large buffer 10:49:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548feffffff00ef38bf461e59d7", 0x39}], 0x1) 10:49:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000c000000ef38bf461e59d7", 0x39}], 0x1) 10:49:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0xbe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r4}) close(r4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x5, {}, 0x0, 0x8000}) getitimer(0x3, 0x0) close(0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) lseek(r0, 0x0, 0x3) r7 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x1) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f0000000080)) r8 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="b4b7e7dce11ec249fe3b44bb5c17bcfa112b6243b164a93dd389821a5b3b46f4cee67883bff3389ff2b7c8acf75aacc64e3e8966438c66660337577b3a6ff40fd44056f7769a12dc7e806cc27f1c7af99c0839601373f962cc38c2f190c277b53592fb9f67399b909d07d7f0514c3877d9b247e04a53e94207eb60f47ee3b8db88f2139a97f6db550265e0d57ba253c1e1c6f68a86817025affdd9f6b57be4579961aec6da63d0d1708d3abdd0b2f2dd0c712607312ca847407e850cae93ae2d09e9e35a85c6c1928ba04530db58388b5f8643ef12facfd24a27950420d61931039aee23e8b575c673390c6e987c7b636eb0aec06505219c41cc7465cc80065ed907fa9bd914f8de3b9533a168ad53e95d2a77b73639dd1957bf4f9668"], 0x0, 0x0, 0x0}) 10:49:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x500000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1257.285582][T16868] binder: release 8994:8996 transaction 6583 out, still active [ 1257.310734][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1257.346238][T16868] binder: send failed reply for transaction 6583, target dead [ 1257.396059][ T9007] IPVS: ftp: loaded support on port[0] = 21 [ 1257.411016][T16868] binder: send failed reply for transaction 6584 to 8994:9002 [ 1257.479595][T16868] binder: undelivered TRANSACTION_COMPLETE [ 1257.490616][ T9017] binder: 9013:9017 got transaction with too large buffer [ 1257.555548][ T9020] binder_alloc: 9013: binder_alloc_buf size 5314844465673254872 failed, no address space [ 1257.570130][ T9017] binder: BINDER_SET_CONTEXT_MGR already set [ 1257.576463][ T9017] binder: 9013:9017 ioctl 40046207 0 returned -16 [ 1257.589547][ T9020] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1257.599806][ T9021] binder_alloc: 9013: binder_alloc_buf, no vma 10:49:48 executing program 2: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='timers\x00') ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000000)={0x0, 0x80}) read$FUSE(r1, 0x0, 0x109) 10:49:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480002000000ef38bf461e59d7", 0x39}], 0x1) 10:49:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(0xffffffffffffffff) syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0xf1, 0x6}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x3a000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYBLOB="2fd30ff70e199b82b4759c5e68eb4f5350722aca6a31aff75c970a5f397e1b5ce166d955f829220ffe3b31ef459a4dda987f08aaf53a316dd560466702cf1c8e50d545548a1c7faae467a2ac2717a33bc6c8e9d10cdcc2fe503af9b16383f71b8d99c5e0c9e7e7081acae8e7ecec1872"], 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$nl_generic(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x29, 0xa01, 0x70bd25, 0x25dfdbfc, {0xb}, [@typed={0x14, 0x4f, @ipv6=@ipv4={[], [], @rand_addr=0x80}}, @typed={0x8, 0x1f, @pid=r6}, @generic, @generic="a2a3ce4b275b6b5ed5075ffe95e6e0b3ae242788a41ffc97581ac05e61cebdecf6d145e15c92e28d74fa31621e1e820863692b9d641988fb19a0cc55034709789e8c5ec193853f11ee59e5a2a9f0ec23f418bdeb90f91e5315f7b13e3587f1b1c1879875b202d431fd20acbe8825234aa97f4af56a6bc84125574ce51929bb856fa45e6a947328666765b8efaadc9d8e4ebe122897ebbfcb56b03f57001ee82ab3d5c3c3b20625ad8e81c6b363dd9e092e5bb8bb9dded85f3e4348fa1bc24cdf67f8cdaec4e11d32d71c74cc9d", @typed={0x8, 0x80, @u32=0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x8080}, 0x480c0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000002c0)={0x7}, 0x7) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") 10:49:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000e000000ef38bf461e59d7", 0x39}], 0x1) 10:49:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x600000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:48 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1c200, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={0x0, 0xffffffff, 0x18, 0x6, 0x100000000, 0x7f, 0x2, 0x9, {0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x200, 0x9, 0xffffffff, 0x9719, 0x2}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x6, 0x1}, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x3ff, &(0x7f0000000400)="0adc1f123c123f359bd070") r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, r5) fanotify_init(0xf, 0x400) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00000003c0)={0x0, 0xfff, 0x9, &(0x7f0000000380)=0x400}) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x376, 0x0, 0x0}) 10:49:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "669d457243ae9ba543be4e00f882fe7341d7612a"}, 0x15, 0x1) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480003000000ef38bf461e59d7", 0x39}], 0x1) [ 1260.100997][ T9028] binder: 9027:9028 got transaction with too large buffer [ 1260.108224][ T9028] binder_transaction: 32 callbacks suppressed [ 1260.108241][ T9028] binder: 9027:9028 transaction failed 29201/-22, size 64-16 line 3357 10:49:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000f000000ef38bf461e59d7", 0x39}], 0x1) 10:49:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x600000000000000, [0x40000108, 0x4000000000000], [0xc2]}) [ 1260.209149][ C0] net_ratelimit: 20 callbacks suppressed [ 1260.209159][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1260.215331][ T9042] binder: 9040:9042 got transaction with invalid handle, 0 [ 1260.220735][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1260.220908][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1260.239737][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1260.271452][T16868] binder_release_work: 32 callbacks suppressed [ 1260.271460][T16868] binder: undelivered TRANSACTION_ERROR: 29201 [ 1260.271872][ T9042] binder: 9040:9042 transaction failed 29201/-22, size 24-8 line 3274 [ 1260.293490][ T9028] binder: BINDER_SET_CONTEXT_MGR already set 10:49:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480004000000ef38bf461e59d7", 0x39}], 0x1) 10:49:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480010000000ef38bf461e59d7", 0x39}], 0x1) [ 1260.334787][ T9046] binder: 9027:9046 transaction failed 29189/-22, size 64-16 line 2995 [ 1260.362053][ T9028] binder: 9027:9028 ioctl 40046207 0 returned -16 [ 1260.379809][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1260.395243][T16861] binder: undelivered TRANSACTION_ERROR: 29201 [ 1260.421701][ T9056] binder: 9054:9056 transaction failed 29189/-22, size 64-8 line 2995 10:49:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x700000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1260.449148][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1260.455132][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1260.461779][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1260.467709][ C1] protocol 88fb is buggy, dev hsr_slave_1 10:49:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480060000000ef38bf461e59d7", 0x39}], 0x1) 10:49:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR64]], &(0x7f0000000140)=0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x1}, &(0x7f0000000200)=0x8) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="01060200406a1c040af5930de0de845e991a0213c65676323ff96dc4d014bf043b24f25dd8e3f3ea5612f08da78a7b7c9e9efa91cc5580c6fa"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:48 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480006000000ef38bf461e59d7", 0x39}], 0x1) [ 1260.502303][T22747] binder: undelivered TRANSACTION_ERROR: 29189 [ 1260.531961][ T9067] binder: 9054:9067 transaction failed 29189/-22, size 64-8 line 2995 [ 1260.572538][ T9064] binder: 9063:9064 got transaction with too large buffer [ 1260.617002][ T9064] binder: 9063:9064 transaction failed 29201/-22, size 64-16 line 3357 [ 1260.634649][T22747] binder: undelivered TRANSACTION_ERROR: 29189 10:49:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000040)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x78d1, 0x0, 0x0}) 10:49:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000a000000ef38bf461e59d7", 0x39}], 0x1) 10:49:49 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000100)={0x8000, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000180)={0xfffffffffffffffe, 0x80, 0x200}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x4040, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4, 0x9, 0x400}}, 0x28) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800f0000000ef38bf461e59d7", 0x39}], 0x1) [ 1260.722101][T22747] binder: undelivered TRANSACTION_ERROR: 29201 [ 1260.738964][ T9064] binder: BINDER_SET_CONTEXT_MGR already set [ 1260.782524][ T9064] binder: 9063:9064 ioctl 40046207 0 returned -16 [ 1260.790106][ T9082] binder: 9081:9082 transaction failed 29189/-22, size 64-8 line 2995 [ 1260.793323][ T9079] binder: 9078:9079 transaction failed 29189/-22, size 24-8 line 2995 10:49:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000280)={0x1000, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000140)={0x6, @broadcast, 0x0, 0x0, 'lblcr\x00', 0x13, 0xffffffff, 0x7e}, 0x2c) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0xa, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x38}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) mknod(&(0x7f00000000c0)='./file0\x00', 0x460, 0x0) 10:49:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000c000000ef38bf461e59d7", 0x39}], 0x1) [ 1260.835802][ T9080] binder: 9063:9080 transaction failed 29189/-22, size 64-16 line 2995 [ 1260.849104][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1260.855241][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1260.863235][T16861] binder: undelivered TRANSACTION_ERROR: 29189 10:49:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000030000ef38bf461e59d7", 0x39}], 0x1) [ 1260.885147][ T9088] binder: 9081:9088 transaction failed 29189/-22, size 64-8 line 2995 [ 1260.894906][ T9079] binder: 9078:9079 ioctl c0306201 20000100 returned -14 [ 1260.900651][T16861] binder: undelivered TRANSACTION_ERROR: 29189 10:49:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x1000000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1260.951801][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 [ 1260.960634][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 [ 1260.974225][ T9095] binder: 9078:9095 ioctl c0306201 20000100 returned -14 [ 1260.983107][ T9094] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xe52/0xf80 10:49:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000001140)='/dev/dsp#\x00', 0x7fffffff, 0x80) write$P9_RATTACH(r1, &(0x7f0000001180)={0x14, 0x69, 0x1, {0x1, 0x1, 0x1}}, 0x14) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={[0x0, 0x4c48], 0x2, 0x400, 0x2}) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000940)='keyring\x00', 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0xfffffffffffffffd) r4 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000001c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, &(0x7f00000002c0)="89d388f88207526c5ab23e977470adb10f8739144ba731306994233341d5bb59eedd6dd0baf5a605e044bd", 0x0}, 0x18) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440)=[{0x0}], 0x1, r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) memfd_create(&(0x7f0000000100)='3\x00\x1e\x18J', 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001100)={0xc, 0x0, &(0x7f0000001000)=[@dead_binder_done={0x40086310, 0x3}], 0x8b, 0x0, &(0x7f0000001040)="8c94e921b6d9e3b9abcd7e14147361860bfac880526a88202a3fd75ce47b5fa750c5fd97efdc8697506df45a7a01753670df146ad3be2bf2dd7d500dfe01d5d114464afd6389b7e0cb58500ad6b069d00ede3cd6d79e43445397411810acfc505f6604563954373db804e5d44366d907a68352bbb24a4a65fba0e2f03f726c2b16abf76285bbba138a7ad3"}) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xc74, 0x40020000) fstat(r4, &(0x7f0000000380)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000040)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x0, 'lblc\x00'}, 0x2c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz0', "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"}, 0xf84) socket$inet_udplite(0x2, 0x2, 0x88) r6 = memfd_create(&(0x7f0000000000)='\\\x00', 0x7) ioctl(r0, 0x400040000000019a, &(0x7f0000001240)="0adc000100000000000070") socket$alg(0x26, 0x5, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x20, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r6, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="0300000000e40000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000e000000ef38bf461e59d7", 0x39}], 0x1) 10:49:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000060000ef38bf461e59d7", 0x39}], 0x1) 10:49:49 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000001c0)) syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/cgroup\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCGRS485(r3, 0x542e, &(0x7f0000000140)) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1261.101128][ T9103] binder: 9102:9103 got transaction with too large buffer [ 1261.111530][ T9094] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xe52/0xf80 10:49:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2710}, 0x2, 0x0, 0x2}, 0x18) [ 1261.172013][ T9112] binder: 9102:9112 got transaction with too large buffer 10:49:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800000a0000ef38bf461e59d7", 0x39}], 0x1) 10:49:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000f000000ef38bf461e59d7", 0x39}], 0x1) 10:49:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x24000, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x0, 0x100000000, 0xfff, 0xff, 0x0, [{0xbf4, 0x9, 0x5, [], 0x2}, {0x8, 0x15a, 0x40, [], 0x3}, {0x2, 0x0, 0x7, [], 0xff}, {0x1, 0x8, 0xcfbe, [], 0x3}, {0x10001, 0x346e, 0xd532, [], 0xffffffff}, {0x6, 0x0, 0xfb4, [], 0x8}, {0x9, 0x5, 0x80000001, [], 0x40}, {0x2, 0x7ff, 0x3, [], 0x2}, {0x4, 0x9, 0xff, [], 0xe0d3}, {0x0, 0x7, 0x1, [], 0x4}, {0x6, 0x9, 0x54, [], 0x7}, {0x4, 0x6, 0x3ff, [], 0x4}, {0xfffffffffffffffd, 0xff, 0xce3, [], 0x7}, {0x100000001, 0x4, 0xff, [], 0x7}, {0x4, 0x3ff, 0x8, [], 0xb1d}, {0x2, 0x3, 0xa5, [], 0x5}, {0x10000, 0x2, 0xfff, [], 0x10000}, {0x6, 0x8000000000000000, 0x200, [], 0x101}, {0x8, 0x8, 0x100, [], 0x1c00000}, {0x9, 0x9, 0x4, [], 0x8}, {0x8, 0xffff, 0x1, [], 0xcfba}, {0x100000001, 0xfff, 0x80, [], 0x7}, {0xe20a, 0x80000001, 0x100000001, [], 0x1}, {0x9, 0xb8b7, 0x3ff, [], 0x2}]}}) io_setup(0xf0, &(0x7f00000001c0)=0x0) io_pgetevents(r5, 0xf8, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x5}, 0x8}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000fed000/0x12000)=nil, 0x12000}, &(0x7f0000000140)=0x10) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8004ae98, &(0x7f00000000c0)={0x0, 0x600000000000000, [], [0xc2]}) socket$tipc(0x1e, 0x7, 0x0) [ 1261.308153][ T9121] binder: 9120:9121 got transaction with invalid handle, 0 10:49:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x2000000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800000c0000ef38bf461e59d7", 0x39}], 0x1) 10:49:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-'}, 0x28, 0x0) 10:49:49 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480010000000ef38bf461e59d7", 0x39}], 0x1) 10:49:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2100, 0x0) write$FUSE_POLL(r2, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x8}}, 0x18) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) [ 1261.468142][ T9132] binder: 9131:9132 got transaction with too large buffer [ 1261.552919][ T9146] binder_alloc: 9131: binder_alloc_buf, no vma 10:49:49 executing program 0: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="d070") r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000e3aed0a8b1a57adbbce306b87d1af2881b0df8aaebef0bf8344927d960"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000100)={0x0, @src_change}) socket$packet(0x11, 0x0, 0x300) 10:49:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800000e0000ef38bf461e59d7", 0x39}], 0x1) [ 1261.610565][ T9144] binder_alloc: 9131: binder_alloc_buf, no vma 10:49:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480060000000ef38bf461e59d7", 0x39}], 0x1) 10:49:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20000, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xa002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r0, r2}) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000100)=""/230) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0x5, 0x4, 0x4}) [ 1261.680709][ T9154] binder_alloc: 9131: binder_alloc_buf failed to map pages in userspace, no vma 10:49:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x2800000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xff, &(0x7f0000000040)="0adc1f523c123f319bd070884890e2696e5cbdb38b4fd80b1d7efaf6737a6abcbb0a6a216d5f791132bf0117fb0076d70ba8e6a1ba47f40990f6db94a09aa01a4819eafa1a00"/84) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x8400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000100)={0x3f, 0x13a, 0x5, 0x7, 0x10001, 0x40}) 10:49:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800f0000000ef38bf461e59d7", 0x39}], 0x1) 10:49:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xb8, 0x41) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r3, 0x4}, 0x8) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400d80) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = dup2(r1, r1) accept4$alg(r4, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000300)={0x7, @win={{0x1000, 0x0, 0x3, 0x19}, 0x3, 0x81, &(0x7f0000000180)={{0x2, 0x0, 0x781, 0x7f}, &(0x7f0000000140)={{0x5, 0x3, 0x618, 0x1}}}, 0x27d0, &(0x7f00000001c0)="26605d4ab92b31123f09495f205c547ec6e044ac5226d342d77596423467b0dea5eca40ba375a707337f782bbce36885ec98b657beac7779dc16a4ed391b28c64521afab5781a87d7a81f04f7c1e1dde332189c7", 0x8001}}) [ 1261.842674][ T9172] binder: 9170:9172 got transaction with too large buffer 10:49:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800000f0000ef38bf461e59d7", 0x39}], 0x1) 10:49:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffd30, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1261.888701][ T9175] binder: 9174:9175 got transaction with invalid handle, 0 10:49:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000030000ef38bf461e59d7", 0x39}], 0x1) 10:49:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x1, &(0x7f0000c91000)=@raw=[@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) set_tid_address(&(0x7f0000000040)) [ 1261.971873][ T9183] binder: 9170:9183 got transaction with too large buffer [ 1261.993101][ T9182] binder: 9174:9182 got transaction with invalid handle, 0 10:49:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x3800000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800881b0000ef38bf461e59d7", 0x39}], 0x1) 10:49:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000060000ef38bf461e59d7", 0x39}], 0x1) 10:49:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000340)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00006cfb54b0b627"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x8, 0x4, 0x6, 0x7ff, 0x8, 0x9, 0xf884, {0x0, @in={{0x2, 0x4e24, @local}}, 0x2, 0x76d, 0x1, 0x6, 0x8}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)={r3, 0xd5, "79fc56772c22732083bedbb61161714028c197b806be06b84995c076e2681fab09de43e91680159ae5b321c9232bfec4e1c856f59eccd82933dba812eeee56b2a4bcfb89ef461aa7ce388f18c2b130cbcbbbfc1fda4d605e06c6f0a20bb08ef00dffe63fd8991793c95ea8ac2151d85e832583a9359c6a24209fdab8a2cd9d7fd0b22d7291b1efbe61baae7ab5e6f5448931f55f23e806efb9fefda7e58c4db4eae1ba23157d1b7c7028787b4039026a25b28f324aa5703f5a35b8e7f533fb008e4e3d404f37a3fc5fe2c41a2441feee057f7e09f9"}, &(0x7f0000000300)=0xdd) 10:49:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket(0x5, 0x6, 0x6) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x4) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) getpeername$inet(r0, &(0x7f0000000040), &(0x7f0000000140)=0x10) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB], 0x0, 0x0, 0x0}) 10:49:50 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff9, 0x105100) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000140)) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000001c0)) syz_emit_ethernet(0x78, &(0x7f0000000000)={@broadcast, @dev={[], 0x22}, [{[{0x9100, 0x80, 0x8, 0x2}], {0x8100, 0x4, 0x8, 0x2}}], {@ipv6={0x86dd, {0xffff, 0x6, "428e41", 0x3a, 0x2e, 0xfffffffffffffffe, @ipv4={[], [], @rand_addr=0x2}, @remote, {[@fragment={0xc, 0x0, 0x10000, 0x1, 0x0, 0x80000001, 0x64}], @tipc=@payload_named={{{{{0x32, 0x0, 0x7b6c38e4, 0x2, 0xae, 0xa, 0x3, 0x2, 0x20, 0x0, 0x1, 0x81, 0x3, 0x2, 0xdbc, 0x3, 0x0, 0x4e24, 0x4e21}, 0x1, 0x4}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f0000000080)={0x1, 0x4, [0xac2, 0xd7d, 0xbd8, 0xbc0]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) [ 1262.235560][ T9206] binder: 9205:9206 got transaction with too large buffer 10:49:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800003f0000ef38bf461e59d7", 0x39}], 0x1) 10:49:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000002300000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1262.298960][ T9214] binder: BINDER_SET_CONTEXT_MGR already set [ 1262.324990][ T9215] binder: 9205:9215 got transaction with too large buffer [ 1262.336943][ T9214] binder: 9205:9214 ioctl 40046207 0 returned -16 10:49:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800000a0000ef38bf461e59d7", 0x39}], 0x1) [ 1262.371859][ T9223] binder: 9217:9223 got transaction with invalid handle, 0 [ 1262.421755][ T9225] binder_alloc: 9205: binder_alloc_buf size 38482906972232 failed, no address space 10:49:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4000000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000400000ef38bf461e59d7", 0x39}], 0x1) [ 1262.478041][ T9225] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 10:49:50 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$midi(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x8, 0x7}) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4520cecff0e00fa078b5bdb4cb904e473730e55cff26d1b0e001d80340000005e510befccd7", 0x2e}], 0x1}, 0x0) 10:49:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cff58df2e08ca01d00ace57e3c5b3fa6a46d44e8d381086660829cbc8a16e0aea0db2c87ad81f4cc7e980e2ce7d6e17f15b90d411d79ced0b616b78821d3b023a9ca36011847d3999c4f771e2f1306d7e9cde88458e10f3cdfbbbf2b39f274f6e4a2097268fe0f0d77ea66665622d8962996900e5768b19e8de55dc315cd0a39e6096464d854063d223e5d95ea90481ddba6eca5c0eadf01d94a33c6c8a35096cab859b2697697035b69d215dcdb76c3ec376240a6a579c377654c77b02", 0xbe}, {&(0x7f0000000040)="5e36983291298f1713f57c264f1b686c934e2eb6770f478e0af6e9b1be4142f4c3c1ba3ca03078df1d19c24443dec9ff1417e73bc5b77fbe8f150be4", 0x3c}, {&(0x7f0000000080)="ebb987a7285abf16c7050618586d8288ebc547e8c2977727be84961e30eee232f561b94fb949f31bf187768845d9", 0x2e}, {&(0x7f00000001c0)="92f45382c1cc28dcbdc514826b1d885f0aec199fe9", 0x15}], 0x4, 0xf) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r2, 0x7fff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:50 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800000c0000ef38bf461e59d7", 0x39}], 0x1) [ 1262.533232][ T9237] binder: 9236:9237 got transaction with too large buffer 10:49:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x4c4, 0x3, 0x1000, 0x2, 0x9, 0x401, 0x424, 0x1fc0, 0xffffffffffffff85, 0x0, 0x8000, 0xff23}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000180)=0x7) 10:49:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000040)={0x2, 0x9ab, 0xffff, 0xfffffffffffffffb, 0x8, 0x5}) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1262.684180][ T9252] binder: 9236:9252 got transaction with too large buffer [ 1262.685867][ T9248] netlink: 'syz-executor.2': attribute type 29 has an invalid length. 10:49:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480065580000ef38bf461e59d7", 0x39}], 0x1) 10:49:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800000e0000ef38bf461e59d7", 0x39}], 0x1) [ 1262.773228][ T9248] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 1262.792072][T16861] binder: release 9255:9256 transaction 6655 out, still active [ 1262.801481][T16861] binder: undelivered TRANSACTION_COMPLETE 10:49:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4800000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1262.829407][ T7891] binder: release 9255:9261 transaction 6656 out, still active [ 1262.837115][ T7891] binder: undelivered TRANSACTION_COMPLETE 10:49:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800000f0000ef38bf461e59d7", 0x39}], 0x1) 10:49:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000600000ef38bf461e59d7", 0x39}], 0x1) 10:49:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rt_cache\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@can, 0x80, 0x0}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000140)=0x4) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/130, 0x82}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000400)=""/171, 0xab}], 0x4, 0x300) 10:49:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0x0, 0x38303553, 0x6, 0x7, 0x3, @stepwise={{0x800, 0x80000001}, {0x1, 0x3}, {0xfffffffffffffff7, 0x7fffffff}}}) [ 1262.891306][ T7891] binder: send failed reply for transaction 6655, target dead [ 1262.898938][ T7891] binder: send failed reply for transaction 6656, target dead 10:49:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x482, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f00000001c0)=0x200, 0x8) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) lseek(r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="000000a6aa904b6aff0945f7f43787b2b403cc64a0ebc4b11a75cf87f12dd2dfdcf3689b62cfc732230d1f2bd5abc93005aac90d013d39922343238685e05cb5bb"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000080)={0x2e, 0x4, 0x0, {0x6, 0x5efe8b7f, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) [ 1262.998739][ T9271] binder: 9269:9271 got transaction with too large buffer 10:49:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800b4150000ef38bf461e59d7", 0x39}], 0x1) [ 1263.047826][ T9285] binder: 9276:9285 got transaction with invalid offset (7659374653877518336, min 0 max 24) or object. 10:49:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x4c00000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:51 executing program 2: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) r0 = socket$inet6(0xa, 0x80003, 0x2c) accept4$packet(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x902, &(0x7f0000000040)=0x0) io_getevents(r1, 0x6, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x701000, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1, 0x100011, r2, 0x10000000) fcntl$getown(0xffffffffffffffff, 0x9) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7fffffff, 0x101000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000280)={0xd, 0x40, &(0x7f00000001c0)="10f2b40cd6d5c854c1708a23d1704cadf728bd56b2768caf60905da9a5f2e7275dc180388e4bc9ecba695d3b36489d7f6ef52245bb287320a6ed8db7c4bba4d573be2ed0ba1017e0e76a0a30c364ca20a5f68ec411d81e9795388d10dce24a7f22b1ce611cb3807496442b450b6193112a98a1979527acec63720504bf918f4ffbd3e248136c044c0b64", {0x39, 0x3, 0x3436324d, 0x5, 0x101, 0x8, 0x8, 0x9}}) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0), 0x0, 0x8dffffff00000000}}], 0x40000000000026a, 0x0) 10:49:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480058650000ef38bf461e59d7", 0x39}], 0x1) [ 1263.113830][ T9284] binder_alloc: 9269: binder_alloc_buf, no vma [ 1263.120509][T16861] binder: send failed reply for transaction 6666 to 9282:9284 [ 1263.128029][T16861] binder: undelivered TRANSACTION_COMPLETE 10:49:51 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x4, 0xfffffffffffffffb, 0xfa, &(0x7f0000000100)="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"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000001c0)) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000080)={0x1, 0x1, [0xfffffffffffffffd, 0x3, 0x7549fdff, 0x8e5, 0x0, 0xa8c2, 0xfffffffffffffff8, 0x1000]}) 10:49:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800003f0000ef38bf461e59d7", 0x39}], 0x1) 10:49:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000810000ef38bf461e59d7", 0x39}], 0x1) 10:49:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000040)=0xe14a, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x3c4, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="090000807911467a"], 0x8) getsockopt$inet6_buf(r0, 0x29, 0x3f, &(0x7f0000000100)=""/37, &(0x7f0000000140)=0x25) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) shutdown(r1, 0x0) [ 1263.326816][ T7891] binder: release 9305:9307 transaction 6675 out, still active 10:49:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x5000000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1263.370494][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1263.405725][ T7891] binder: send failed reply for transaction 6675, target dead 10:49:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/64, 0x40}, {&(0x7f0000000100)=""/219, 0xdb}, {&(0x7f0000000200)=""/222, 0xde}, {&(0x7f0000000300)=""/184, 0xb8}, {&(0x7f0000000080)=""/49, 0x31}], 0x5, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x880, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:51 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000400000ef38bf461e59d7", 0x39}], 0x1) 10:49:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548001b880000ef38bf461e59d7", 0x39}], 0x1) 10:49:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6000000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1263.578787][ T7891] binder: release 9324:9325 transaction 6684 out, still active [ 1263.605993][ T7891] binder: undelivered TRANSACTION_COMPLETE [ 1263.637860][ T9335] binder_alloc: 9319: binder_alloc_buf, no vma [ 1263.643548][ T7891] binder: send failed reply for transaction 6684, target dead 10:49:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_DUMPABLE(0x3) ioctl(r0, 0xfc, &(0x7f0000000080)="0ab5d2974496b1d12c92f6ffe30567dcfeff3c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fff9da1c4c9a2f5264400"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) prctl$PR_GET_DUMPABLE(0x3) 10:49:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480065580000ef38bf461e59d7", 0x39}], 0x1) 10:49:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000f00000ef38bf461e59d7", 0x39}], 0x1) [ 1263.764583][ T9339] binder: BINDER_SET_CONTEXT_MGR already set 10:49:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000001800000077d2d59d0800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1263.808431][ T9339] binder: 9338:9339 ioctl 40046207 0 returned -16 10:49:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000600000ef38bf461e59d7", 0x39}], 0x1) 10:49:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) symlink(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) link(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) io_setup(0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x9}, 0x8) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440)) rt_sigprocmask(0x0, &(0x7f0000000040)={0x2}, 0x0, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x81, 0xce, 0x4, 0x4, 0x0, 0x4b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000080)) setsockopt$inet6_group_source_req(r2, 0x29, 0x8, &(0x7f0000000240)={0x7f, {{0xa, 0x40004e20, 0x3, @loopback}}, {{0xa, 0x0, 0x0, @initdev}}}, 0xff7e) r3 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x60) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000dffffffe) 10:49:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480058650000ef38bf461e59d7", 0x39}], 0x1) 10:49:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6800000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800fffff000ef38bf461e59d7", 0x39}], 0x1) 10:49:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") prctl$PR_GET_TIMERSLACK(0x1e) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB='x*tp\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000001ef38bf461e59d7", 0x39}], 0x1) 10:49:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000810000ef38bf461e59d7", 0x39}], 0x1) 10:49:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffffffff, 0x200000) prctl$PR_CAPBSET_DROP(0x18, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)=0x4) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1264.338099][ T9386] binder: 9384:9386 got transaction with invalid offset (0, min 0 max 64) or object. 10:49:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x6c00000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000002ef38bf461e59d7", 0x39}], 0x1) 10:49:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) chdir(0x0) symlink(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) link(0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) io_setup(0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000180)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x9}, 0x8) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000440)) rt_sigprocmask(0x0, &(0x7f0000000040)={0x2}, 0x0, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000140)={0x81, 0xce, 0x4, 0x4, 0x0, 0x4b}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000080)) setsockopt$inet6_group_source_req(r2, 0x29, 0x8, &(0x7f0000000240)={0x7f, {{0xa, 0x40004e20, 0x3, @loopback}}, {{0xa, 0x0, 0x0, @initdev}}}, 0xff7e) r3 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x60) ftruncate(r3, 0x7fff) sendfile(r2, r3, 0x0, 0x8000dffffffe) 10:49:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x25ad, 0x40) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) write$FUSE_CREATE_OPEN(r2, &(0x7f00000007c0)={0xa0, 0x0, 0x4, {{0x1, 0x3, 0x5, 0x4, 0x1, 0x6, {0x2, 0x960, 0x2, 0x4, 0x6, 0x8, 0x7, 0xffffffffffffffe0, 0x7, 0x6, 0x10000, r3, r4, 0x2, 0x1ff}}, {0x0, 0x5}}}, 0xa0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f00000001c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) socket$caif_seqpacket(0x25, 0x5, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000280)={r6, 0x60, "853fa9dd9eb4ab943713b9b69674a66726d2b1ecf82a3be5983922cdf787a98f97c2470e779088a717a73b1e8547c6a449ecfbc11179ae5bdf4e92280128ba1423ddec1c90d1ed1dda40e98970df905ccc1ff2d1e88822d7eed1e52a2dfcde95"}, &(0x7f0000000300)=0x68) ioctl$UI_SET_PROPBIT(r5, 0x4004556e, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="852a74700000005207d9e8b8bcbff64d637e0cdd4a1bc0dc39be329ea93ae619c8eddde73e5df37ee5c3b78e39e7ecd54eed5a4e4f3264aaeabf8c14190ffdedb23b7d4fa5206a8f19ef4b83dfd8373b45ec9ad615aa17ad5b8bc431856a7a2a5000c616794f", @ANYRES64=0x0, @ANYBLOB="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"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="cab33869"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000040)={0x800, 0x1a, 0x1, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000700)={r7, 0x0, 0x5, [0x4, 0x8, 0x6, 0xffffffffffff0048, 0x5]}, 0x12) 10:49:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480015b40000ef38bf461e59d7", 0x39}], 0x1) 10:49:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB="0004000000000000"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7400000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000003ef38bf461e59d7", 0x39}], 0x1) 10:49:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000004ef38bf461e59d7", 0x39}], 0x1) 10:49:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0x13c, 0x0, &(0x7f00000005c0)=[@free_buffer={0x40086303, r2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x30, &(0x7f0000000380)=[@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x1, 0x2, 0x3b}, @flat={0x6103ca13387a4b0, 0xa, r3, 0x1}], &(0x7f0000000400)=[0x40, 0x40, 0x38, 0x30, 0x0, 0x78]}}, @dead_binder_done={0x40086310, 0x2}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000440), &(0x7f0000000480)=[0x78, 0x18, 0x78, 0x0]}}, @release={0x40046306, 0x3}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x38, &(0x7f00000004c0), &(0x7f0000000500)=[0x30, 0x18, 0x78, 0x38, 0x38, 0x40, 0x60]}, 0x7fffffff}}, @reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x28, &(0x7f0000000540)=[@fda={0x66646185, 0x0, 0x0, 0x31}], &(0x7f0000000580)=[0x78, 0x48, 0x38, 0x78, 0x78]}}], 0xe8, 0x0, &(0x7f0000000700)="ad6f32819ef2093e27689edd9aa2a845a73de90781a135ceb107813248f6ca66974032361cafd23f6262a913587f8504e15d4eb1afa2cc7a33fe278fc88067c2f3da526bada4cd405f53fa45ebd2637556532275774ecee1f310881c326fd28812326ed904eb08c5b7093186bf81c70c96db793365d00a59019dc12ce794ebef6996a2f3cc20d93a766e5e41a5b29acef11c091125ebff1e63a1e1d0f5540cbfd9a64084303024b0ed799b3786c38f85af5f2197ca8f5da01d73dcc8bdc0551398e0f0e84ac78dfbe8f11196b457b3a014388a5310293795e641d9f17a86155bed24137e7e4df37d"}) r4 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x1, 0x2) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0xfffffffffffffffd) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r7, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x9, {"03e8704072b58bc5236bea449e0e4d72"}, 0x3054, 0x7, 0x8}, @ib={0x1b, 0x8, 0x429b, {"ba27c5200cf49e461eed5ecc87045a4f"}, 0x8000, 0x3, 0x200}}}, 0x118) 10:49:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000f00000ef38bf461e59d7", 0x39}], 0x1) 10:49:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="07001f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000000000) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x6, "77af41a87dda03bc6be7efd431"}, 0xf, 0x2) syz_open_dev$binder(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB="0000000000b331519eb907f97ff3a8eeebd1f34dde6dd705e429da4f4086f4dd3492000000"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="ecffff04ffffffff"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x7a00000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000006ef38bf461e59d7", 0x39}], 0x1) 10:49:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = memfd_create(&(0x7f0000000040)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x12, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) clone(0x40002102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000880)='s\"\xc6jw\x19\x91;maps\x00') mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000001640)) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000140)={@reserved}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r5, 0x40}) 10:49:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f54800fffff000ef38bf461e59d7", 0x39}], 0x1) 10:49:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r1) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) 10:49:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x90) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={r2}) r3 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x1800) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="8519680000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x8000000000000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000000aef38bf461e59d7", 0x39}], 0x1) [ 1265.369723][ T9454] binder_transaction: 53 callbacks suppressed [ 1265.369740][ T9454] binder: 9453:9454 transaction failed 29189/-22, size 64-8 line 2995 [ 1265.410197][ T9459] binder: 9456:9459 transaction failed 29201/-22, size 64-16 line 3357 [ 1265.434354][ T7891] binder_release_work: 54 callbacks suppressed [ 1265.434363][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 10:49:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000000cef38bf461e59d7", 0x39}], 0x1) 10:49:53 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000001ef38bf461e59d7", 0x39}], 0x1) [ 1265.456683][ T9466] binder: 9456:9466 transaction failed 29201/-22, size 64-16 line 3357 10:49:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x100000001, 0x3}) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1265.490692][ T9454] binder: 9453:9454 ioctl 4008af04 20000080 returned -22 [ 1265.498419][T16861] binder: undelivered TRANSACTION_ERROR: 29189 10:49:53 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chroot(&(0x7f00000003c0)='./file0\x00') r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x100, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x0, 0x6001, 0x80, 0x8, 0xa}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1265.553777][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1265.569872][T16861] binder: release 9453:9454 transaction 6744 out, still active [ 1265.578013][T16861] binder: undelivered TRANSACTION_COMPLETE [ 1265.617209][T16861] binder: send failed reply for transaction 6744, target dead [ 1265.633306][ T9479] binder: 9478:9479 transaction failed 29189/-22, size 24-8 line 2995 10:49:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0xfdfdffff00000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) 10:49:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x80000000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000002ef38bf461e59d7", 0x39}], 0x1) [ 1265.666564][T16861] binder: undelivered TRANSACTION_ERROR: 29189 10:49:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000000eef38bf461e59d7", 0x39}], 0x1) 10:49:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="05a23405a127293aa36b0ef7"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1265.820679][ T9489] binder: 9488:9489 transaction failed 29189/-22, size 64-8 line 2995 [ 1265.833624][ T9495] binder: 9494:9495 transaction failed 29201/-22, size 64-16 line 3357 [ 1265.847681][ T9497] binder: 9496:9497 got transaction with invalid offset (4190924500775510533, min 0 max 24) or object. [ 1265.858258][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 10:49:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt(r0, 0x3, 0x8, &(0x7f0000000080)=""/248, &(0x7f0000000180)=0xf8) write$binfmt_elf32(r0, 0x0, 0x0) 10:49:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000003ef38bf461e59d7", 0x39}], 0x1) 10:49:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000000fef38bf461e59d7", 0x39}], 0x1) [ 1265.867801][ T9497] binder: 9496:9497 transaction failed 29201/-22, size 24-8 line 3242 [ 1265.880744][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1265.891751][ T9495] binder: BINDER_SET_CONTEXT_MGR already set 10:49:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x500, 0x0) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3, 0x2, 0x0, 0x2}}, 0x2e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="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"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 1265.950905][ T9495] binder: 9494:9495 ioctl 40046207 0 returned -16 [ 1265.951086][ T7891] binder: undelivered TRANSACTION_ERROR: 29201 [ 1265.957529][ T9506] binder: 9496:9506 transaction failed 29189/-22, size 24-8 line 2995 10:49:54 executing program 2: unshare(0x400) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x80000, 0x0) mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) flock(r0, 0x5) [ 1266.039397][T16861] binder: undelivered TRANSACTION_ERROR: 29189 10:49:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000010ef38bf461e59d7", 0x39}], 0x1) 10:49:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000004ef38bf461e59d7", 0x39}], 0x1) 10:49:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0xffffffff00000000}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1266.091464][ T9514] binder: 9513:9514 transaction failed 29189/-22, size 64-8 line 2995 10:49:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x80, 0x0) faccessat(r2, &(0x7f0000000080)='./file0\x00', 0x80, 0x200) [ 1266.160169][ T7891] binder: undelivered TRANSACTION_ERROR: 29189 10:49:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000006ef38bf461e59d7", 0x39}], 0x1) 10:49:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB="deffffff4606520bca7dc126edeff8a039b400000002"], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 10:49:54 executing program 2: r0 = socket(0x1, 0x4000000802, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000eff4)) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4a, 0x280000) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") shutdown(r0, 0x0) [ 1266.253419][ T9531] binder: 9529:9531 transaction failed 29189/-22, size 24-8 line 2995 [ 1266.266941][T16861] binder: undelivered TRANSACTION_ERROR: 29189 [ 1266.283161][ T9527] binder_transaction: 17 callbacks suppressed [ 1266.283171][ T9527] binder: 9526:9527 got transaction with too large buffer 10:49:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000440)="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", 0x0}, 0x18) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000080)='/dev/snd/timer\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000580)=[@flat={0x70742a85}, @ptr={0x70742a85, 0xffffff7f, 0x0}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000003fef38bf461e59d7", 0x39}], 0x1) [ 1266.390261][ T9544] binder: 9536:9544 got transaction with invalid handle, 0 [ 1266.420387][ T9549] binder: 9526:9549 got transaction with too large buffer 10:49:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000000aef38bf461e59d7", 0x39}], 0x1) 10:49:54 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x7, 0x7, 0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000780)=0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',\x00']) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0xa4, r3, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) getpeername$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$int_in(r5, 0x40000000af01, &(0x7f0000000380)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000640)={0x0, 0x1000}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000006c0)={r7, 0x0, 0x101, 0x1f, 0xbb4a, 0x1ff}, &(0x7f0000000700)=0x14) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1000000210007f9, 0x0, 0xfffffffffffffffe, &(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000500)={0x3, r1}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r8, 0x800000000008982, &(0x7f0000000000)) preadv(r5, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r6) socket$packet(0x11, 0x3, 0x300) [ 1266.449097][ C0] net_ratelimit: 20 callbacks suppressed [ 1266.449106][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1266.462224][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1266.468084][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1266.473942][ C0] protocol 88fb is buggy, dev hsr_slave_1 10:49:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000040ef38bf461e59d7", 0x39}], 0x1) 10:49:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$void(r0, 0x5451) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) 10:49:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000580)=[@flat={0x77622a85}, @ptr={0x70742a85, 0xffffff7f, 0x0, 0x0, 0x2}], &(0x7f00000005c0)=[0x0, 0x18]}}}], 0x0, 0x0, 0x0}) [ 1266.566896][T16861] binder: release 9539:9541 transaction 6764 out, still active [ 1266.603609][T16861] binder: undelivered TRANSACTION_COMPLETE 10:49:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000000cef38bf461e59d7", 0x39}], 0x1) [ 1266.683639][ T9566] binder: BINDER_SET_CONTEXT_MGR already set [ 1266.699128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1266.705050][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1266.711030][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 1266.716946][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 1266.723863][ T9566] binder: 9565:9566 ioctl 40046207 0 returned -16 10:49:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000060ef38bf461e59d7", 0x39}], 0x1) [ 1266.724341][ T9570] binder_alloc: 9526: binder_alloc_buf, no vma [ 1266.730677][T16861] binder: send failed reply for transaction 6764, target dead [ 1266.768198][ T9573] ------------[ cut here ]------------ [ 1266.773695][ T9573] kernel BUG at drivers/android/binder_alloc.c:1139! 10:49:55 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x0, 0x7, &(0x7f0000000040)=']bdev,\x00'}, 0x30) syz_open_procfs(r4, &(0x7f00000000c0)='net/stat\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 1266.852979][ T9573] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1266.859094][ T9573] CPU: 1 PID: 9573 Comm: syz-executor.1 Not tainted 5.1.0-rc4+ #68 [ 1266.866981][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.877054][ T9573] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 1266.883560][ T9573] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 0f 7a 23 fc 4c 89 e6 4c 89 ef e8 24 7b 23 fc 4d 39 e5 76 07 e8 fa 79 23 fc <0f> 0b e8 f3 79 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 01 [ 1266.903172][ T9573] RSP: 0018:ffff88804e9ff4e0 EFLAGS: 00010212 [ 1266.909241][ T9573] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc90008221000 [ 1266.917217][ T9573] RDX: 000000000000061d RSI: ffffffff854d12b6 RDI: 0000000000000006 [ 1266.925186][ T9573] RBP: ffff88804e9ff560 R08: ffff8880a4ea6300 R09: 0000000000000008 [ 1266.933159][ T9573] R10: ffffed1009d3ff15 R11: ffff88804e9ff8af R12: 0000000000000048 [ 1266.941132][ T9573] R13: 0000000000000008 R14: 0000000000000050 R15: 0000000000000000 [ 1266.949108][ T9573] FS: 00007f99b4d51700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1266.958139][ T9573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.964732][ T9573] CR2: 00007f9e3a080000 CR3: 00000000a98eb000 CR4: 00000000001406e0 [ 1266.972713][ T9573] Call Trace: [ 1266.976018][ T9573] ? find_held_lock+0x35/0x130 [ 1266.980814][ T9573] binder_alloc_copy_from_buffer+0x37/0x42 [ 1266.986651][ T9573] binder_validate_ptr+0xcc/0x1d0 [ 1266.991692][ T9573] ? binder_get_object+0x210/0x210 [ 1266.996834][ T9573] ? binder_alloc_copy_user_to_buffer+0x312/0x480 [ 1267.003268][ T9573] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1267.009011][ T9573] binder_transaction+0x3e02/0x65c0 [ 1267.014248][ T9573] ? binder_thread_read+0x3d30/0x3d30 [ 1267.019662][ T9573] ? __might_fault+0x12b/0x1e0 [ 1267.024456][ T9573] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1267.030703][ T9573] ? _copy_from_user+0xdd/0x150 [ 1267.035587][ T9573] binder_thread_write+0x87e/0x2820 [ 1267.040811][ T9573] ? binder_transaction+0x65c0/0x65c0 [ 1267.046198][ T9573] ? __might_fault+0x12b/0x1e0 [ 1267.050979][ T9573] ? lock_downgrade+0x880/0x880 [ 1267.055854][ T9573] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1267.062112][ T9573] ? _copy_from_user+0xdd/0x150 [ 1267.066978][ T9573] binder_ioctl+0x1033/0x183b [ 1267.071689][ T9573] ? binder_thread_write+0x2820/0x2820 [ 1267.077148][ T9573] ? tomoyo_path_number_perm+0x263/0x520 [ 1267.082804][ T9573] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1267.088646][ T9573] ? binder_thread_write+0x2820/0x2820 [ 1267.094140][ T9573] do_vfs_ioctl+0xd6e/0x1390 [ 1267.098841][ T9573] ? ioctl_preallocate+0x210/0x210 [ 1267.103971][ T9573] ? __fget+0x381/0x550 [ 1267.108223][ T9573] ? ksys_dup3+0x3e0/0x3e0 [ 1267.112661][ T9573] ? nsecs_to_jiffies+0x30/0x30 [ 1267.117528][ T9573] ? tomoyo_file_ioctl+0x23/0x30 [ 1267.122476][ T9573] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1267.128729][ T9573] ? security_file_ioctl+0x93/0xc0 [ 1267.133873][ T9573] ksys_ioctl+0xab/0xd0 [ 1267.138042][ T9573] __x64_sys_ioctl+0x73/0xb0 [ 1267.142645][ T9573] do_syscall_64+0x103/0x610 [ 1267.147274][ T9573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1267.153185][ T9573] RIP: 0033:0x458c29 [ 1267.157082][ T9573] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1267.176704][ T9573] RSP: 002b:00007f99b4d50c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.185117][ T9573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 1267.193089][ T9573] RDX: 0000000020000780 RSI: 00000000c0306201 RDI: 0000000000000004 10:49:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000000eef38bf461e59d7", 0x39}], 0x1) 10:49:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000040000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a747000000000", @ANYRES64=0x0, @ANYBLOB="0000000000000000852a74707fffffff00"/48], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB], 0x0, 0x0, 0x0}) [ 1267.201060][ T9573] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1267.209030][ T9573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f99b4d516d4 [ 1267.217006][ T9573] R13: 00000000004bff7b R14: 00000000004d22e8 R15: 00000000ffffffff [ 1267.225019][ T9573] Modules linked in: [ 1267.229190][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 1267.234960][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 1267.242410][ T3875] kobject: 'loop3' (000000000c83b15b): kobject_uevent_env 10:49:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000005865ef38bf461e59d7", 0x39}], 0x1) 10:49:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x3, 0x1) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000040)=""/67) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) mq_notify(r1, &(0x7f0000000200)={0x0, 0x37, 0x6, @tid=r4}) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000580)=[@flat={0x73682a85}], &(0x7f00000005c0)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 1267.250878][ T9573] ---[ end trace d49beb550265e785 ]--- [ 1267.256374][ T9573] RIP: 0010:binder_alloc_do_buffer_copy+0xd6/0x510 [ 1267.283155][ T3875] kobject: 'loop3' (000000000c83b15b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1267.295628][ T9573] Code: 02 00 0f 85 20 04 00 00 4d 8b 64 24 58 49 29 dc e8 0f 7a 23 fc 4c 89 e6 4c 89 ef e8 24 7b 23 fc 4d 39 e5 76 07 e8 fa 79 23 fc <0f> 0b e8 f3 79 23 fc 4c 8b 75 d0 4d 29 ec 4c 89 e6 4c 89 f7 e8 01 [ 1267.297605][ T9592] binder: 9585:9592 got transaction with invalid offset (9, min 0 max 64) or object. [ 1267.316672][ T3875] kobject: 'loop0' (0000000085175456): kobject_uevent_env [ 1267.336583][ T9586] kobject: 'kvm' (00000000a991db2d): kobject_uevent_env 10:49:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f548000000000fef38bf461e59d7", 0x39}], 0x1) 10:49:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a687300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000003c4fd91508e4483c9fa4485f8abb1ddbc9306a1af6a49ba753aa6d2170a776636601a13040847c48b27ae373bbc1ca77513c643ebde3554a43b1e43d369c3aa3f4a384143c04466b8b2565f9fc7e492d6668f456a030a2a00376d052510d29acc278f89e65922afc9df0d8d2e53e9d75e64eb080383ca3c239a15e2b29488008000000000000"], 0x0, 0x0, 0x0}) [ 1267.355000][ T3875] kobject: 'loop0' (0000000085175456): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1267.367840][ T9586] kobject: 'kvm' (00000000a991db2d): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1267.370409][ T9573] RSP: 0018:ffff88804e9ff4e0 EFLAGS: 00010212 [ 1267.391452][ T3875] kobject: 'loop4' (000000001a8a7d0f): kobject_uevent_env 10:49:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000081ef38bf461e59d7", 0x39}], 0x1) [ 1267.421689][ T3875] kobject: 'loop4' (000000001a8a7d0f): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 1267.447159][ T9602] binder: 9601:9602 got transaction with invalid handle, 0 [ 1267.453150][ T3875] kobject: 'loop4' (000000001a8a7d0f): kobject_uevent_env [ 1267.469413][ T9573] RAX: 0000000000040000 RBX: 0000000020001000 RCX: ffffc90008221000 [ 1267.477515][ T9573] RDX: 000000000000061d RSI: ffffffff854d12b6 RDI: 0000000000000006 [ 1267.498264][ T9606] binder: 9601:9606 got transaction with invalid handle, 0 [ 1267.507341][ T3875] kobject: 'loop4' (000000001a8a7d0f): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:49:55 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="3900000013001304edc6e91f48ec5804ab0ec0480d000000460001078f070014190001c010000000000003f5480000000010ef38bf461e59d7", 0x39}], 0x1) [ 1267.518558][ T9573] RBP: ffff88804e9ff560 R08: ffff8880a4ea6300 R09: 0000000000000008 [ 1267.534683][ T3875] kobject: 'loop5' (000000007b847ce2): kobject_uevent_env [ 1267.545132][ T9573] R10: ffffed1009d3ff15 R11: ffff88804e9ff8af R12: 0000000000000048 [ 1267.553866][ T3875] kobject: 'loop5' (000000007b847ce2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1267.565246][ T9573] R13: 0000000000000008 R14: 0000000000000050 R15: 0000000000000000 [ 1267.574292][ T9573] FS: 00007f99b4d51700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 1267.577691][ T9586] kobject: 'kvm' (00000000a991db2d): kobject_uevent_env [ 1267.589626][ T3875] kobject: 'loop3' (000000000c83b15b): kobject_uevent_env [ 1267.597558][ T3875] kobject: 'loop3' (000000000c83b15b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1267.615193][ T3875] kobject: 'loop5' (000000007b847ce2): kobject_uevent_env [ 1267.616406][ T9586] kobject: 'kvm' (00000000a991db2d): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 1267.622909][ T3875] kobject: 'loop5' (000000007b847ce2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 1267.648810][ T3875] kobject: 'loop0' (0000000085175456): kobject_uevent_env [ 1267.648985][ T9573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1267.656449][ T3875] kobject: 'loop0' (0000000085175456): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 1267.662800][ T9573] CR2: 0000000000940004 CR3: 00000000a98eb000 CR4: 00000000001426f0 [ 1267.681096][ T3875] kobject: 'loop3' (000000000c83b15b): kobject_uevent_env [ 1267.681842][ T9573] Kernel panic - not syncing: Fatal exception [ 1267.688885][ T3875] kobject: 'loop3' (000000000c83b15b): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 1267.695660][ T9573] Kernel Offset: disabled [ 1267.710113][ T9573] Rebooting in 86400 seconds..