0001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 151.881598] binder: undelivered TRANSACTION_ERROR: 29201 20:53:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000640)={0x2, 0x0, @ioapic}) [ 152.045688] binder: 10164:10166 got transaction with invalid offsets size, 1025 [ 152.080599] binder: 10164:10166 transaction failed 29201/-22, size 0-1025 line 3003 [ 152.103344] binder: undelivered TRANSACTION_ERROR: 29201 20:53:45 executing program 0: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x3f) r0 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/188, 0xbc}, {&(0x7f00000000c0)=""/185, 0xb9}, {&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000000340)=""/213, 0xd5}], 0x6, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) 20:53:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000fc0)={'nat\x00'}, &(0x7f0000000200)=0x54) r2 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) sendto$unix(r2, &(0x7f00000000c0)="5dd6294802066ebc6155773f6bdc6b1998963f5c91076ed98f18b6cc101c2558e5efe0d8035d16c20b3c3f6b699379182e67425f61dc10367a8df76a8b61bbb0b2427574384398573cea7fed74be43733de782a9ac4c6c083d2a", 0x5a, 0x40011, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 20:53:45 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x12, &(0x7f00000000c0), 0xfffffffffffffe9f) 20:53:45 executing program 7: open(&(0x7f0000000000)='./file0\x00', 0x101142, 0x100000002) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000, &(0x7f0000000300)=ANY=[]) mount$9p_unix(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='9p\x00', 0x202800, &(0x7f0000000280)={'trans=\x00'}) 20:53:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x3) clock_getres(0x6, &(0x7f0000000100)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x100000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000900)=0xe8) connect(r0, &(0x7f0000000940)=@xdp={0x2c, 0x1, r1, 0xd}, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mq_timedsend(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0xffff, 0x0) r2 = accept4(r0, &(0x7f0000000080)=@can, &(0x7f0000000140)=0x80, 0x80800) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x44) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="d81254d6073fe97a268bb055ecdc6372", 0x10) 20:53:45 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:45 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000506ffff0000000000000000000000004ab5486bcf6048d51f9aadfe9e733b12b5ea6ff374f13cd7554238d6ad1e030354f9ae5b61d608d2571974"], 0x14}, 0x1}, 0x0) 20:53:45 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80000) r1 = socket$inet6(0xa, 0x0, 0x40000009) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") accept$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', &(0x7f0000000040)='vboxnet1\'\'posix_acl_accessmd5sum$!nodev/ppp0![!!proc\x00', 0x35, 0x0) ioctl(r0, 0xc1004111, &(0x7f0000000040)) 20:53:45 executing program 7: seccomp(0x100001, 0x0, &(0x7f000031b000)={0x0, &(0x7f00009e9fc8)}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') getsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) getsockname$packet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000b00)=0xe8) getpeername$packet(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001dc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001e00)={{{@in6=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000001f00)=0xe8) accept4$packet(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000003200)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003240)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000003340)=0xe8) r11 = accept4(r0, &(0x7f0000003380)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000003400)=0x80, 0x80800) getpeername$packet(r0, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000003480)=0x14) accept$packet(r0, &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000003500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003540)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003580)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000003680)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000003cc0)={@loopback, 0x0}, &(0x7f0000003d00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003d40)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000003e40)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000003f40)={@loopback, 0x0}, &(0x7f0000003f80)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004080)={'syzkaller0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000040c0)={{{@in6=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000041c0)=0xe8) accept4$packet(r0, &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004800)=0x14, 0x80000) accept4$packet(r0, &(0x7f0000004840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000004880)=0x14, 0x80000) accept$packet(r0, &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000049c0)=0x14) llistxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/203, 0xcb) getsockname$packet(r0, &(0x7f0000009600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000009640)=0x14) getsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000009680)={@mcast1, 0x0}, &(0x7f00000096c0)=0xfffffffffffffc9f) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f000000a000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1004500}, 0xc, &(0x7f0000009fc0)={&(0x7f0000009700)={0x888, r1, 0x0, 0x70bd27, 0x25dfdbff, {0x2}, [{{0x8, 0x1, r2}, {0x220, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r4}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffffffffffeb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8000}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x1a4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x1a4, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x98}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8001}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x5}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r17}}}]}}, {{0x8, 0x1, r18}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r20}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r21}, {0xb4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x6}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r23}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xc7}}}]}}, {{0x8, 0x1, r24}, {0x164, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r25}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r26}}, {0x8, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0xc0}, 0x810) [ 152.511164] binder: 10183:10184 got transaction with invalid offsets size, 1025 20:53:45 executing program 6: sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x37) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x400, 0x800) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7c, &(0x7f0000018000)={r0, @in6={{0xa}}}, &(0x7f0000000140)=0x4a) 20:53:45 executing program 5: r0 = dup(0xffffffffffffff9c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) accept4(r0, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80, 0x80800) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8914, &(0x7f0000000280)="025cc83d6d345f8f700000") unshare(0x400) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000680)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0xfffffd76) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'irlan0\x00', {0x2, 0x4e24, @rand_addr=0x3}}) 20:53:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x98) sendfile(r0, r0, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2d8240, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000180)) [ 152.568949] binder: 10183:10184 transaction failed 29201/-22, size 0-1025 line 3003 [ 152.629952] binder: undelivered TRANSACTION_ERROR: 29201 20:53:46 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:46 executing program 2: mkdir(&(0x7f0000000000)='./file0//ile0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000003380)=""/4096, 0xf) open(&(0x7f00000002c0)='./file0//ile0\x00', 0x10000, 0x0) 20:53:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x97d, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x2) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001500192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 20:53:46 executing program 7: r0 = socket$nl_generic(0xa, 0x3, 0x10) r1 = gettid() sched_getaffinity(r1, 0x1, &(0x7f0000000080)) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x22, &(0x7f0000000000)={0x1, 0x20000, 0x0, 0xa4ffffff}, 0x10) 20:53:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9, 0x90100) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x200, 0x6b3, 0x1ff, 0x0, 0x3f, 0x3, 0x7, 0xffffffffffffffff, 0x164, 0x40, 0x1e9, 0x9, 0xfffffffffffffffe, 0x38, 0x2, 0x5, 0xe2, 0x100000001}, [{0x60000007, 0x2, 0x3, 0x47, 0x9, 0x100, 0x8, 0x3c}], "168f0cbe9f", [[], [], [], [], [], [], [], [], [], []]}, 0xa7d) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x7f, 0x7f, 0x7f, 0x8, 0x1, 0x17000000000000, 0x8001, 0x6, 0x6, 0x81, 0x3, 0x80}) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xfffffffffffffffa, 0x200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r2, 0x5, 0x2}, 0x14) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) migrate_pages(r4, 0x3f, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x371d) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 20:53:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3a, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4}, 0xfffffffffffffc4e) 20:53:46 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x4400, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000140)) r1 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r2, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000040)=""/132) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sendmsg$nl_generic(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1880}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x320, 0x34, 0x100, 0x70bd27, 0x25dfdbfe, {0xa}, [@nested={0x170, 0x7f, [@generic="0569d1f5ece5748ec35dbe09d87802d4ed0aa8a97d23a3c8e4d7b778087f361adfa05f324b384162dc75f223c9adedc79d3a2d36c9673fa00a68ee54a1b633fd163a39a818d593bca2aa17253ff6c7dfe142c23b34192718483e2f4a2747289a08845881f09fcb71bca6580a7108954662ede370dd70ea33e9cf1cd35685b608763a40998abd0f4678b870c552350c688e954dcea3aeff1fbe24167f69c68987df51478ba0c3b7dce1c88ba2ef29e1", @generic="c629d111ef85102c3f02c1b62dd18a4b438cbe8c79a62f0761068b5739bb8c27320a0cb4e0fded2ee2b05982782ee45229c219ef72f30dc4242730079c5cd7849c24e83e47cbfe7b61654599a254084d64bca0f57583fbfcaf221051de3d38025937b17ee63847e740bf13341dc25cbf26b1c125d23c60550272035ac85a01fc76f713673dc0bb7f6147e122a33f205fb42b97def86b43aa3f5dc77d0877669d63451ae4e92580e105c7d32babda6bf6c9a6b5f2a1bd3306bdd2487eb5"]}, @generic="5510c9c1591cbda8fbad4b8fca0a4ea629c039eec94100c409b463f44bd58c5717f1ec4f857aad5eb4ae17c0bd65b2db", @generic="4532f1d893ebbe79608a2896c543f5386235c68621e41c654ea47d7b59c4cacc622c9e26a6e5ebb68af0fe99275abcd11f8fa6e5f363382ba6ffadc678a162a43400be9b00c391d2fd8719853e13197082dc2dd5b7284fbc8b17b621bc925ac9b525cc7faedfc1e23bbeaaa1ed3aeea84c80711b5da63998450660d65fd49c746c223da584808af1fc3376fced73a3618925cc213d7a328a33fb07b7dbf6fa94e3ee902c6b90d0692972776c2df19089484e5c03ee532215622c0ee1", @generic="2b8f72ac823eebdd3fd60098e514a047ca59ba8695ea7fc6517f9995debc63a0490b233592b0ccc45a385767447cddf228798ed3aaef19ab6b97f16110c5002fc67f0b2825c483f3a4dea09fa8751728", @generic="7b2f07dd1206a1fb93acef47349504d3f26dde2b5524fb95066b5ecaa13bb795166e43793c706d936638dac1e479e166075f56b9b66d380e8e4213474510a353bee3b17f2c585c84676bccc9b4dc275fbef5605a18799e81f974e8e6636b"]}, 0x320}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = socket$inet6(0xa, 0x6, 0x8) ioctl(r3, 0x8912, &(0x7f0000000200)="025cc83d6d345f8f762070") mmap(&(0x7f0000620000/0x2000)=nil, 0x2000, 0x200000000001, 0x2010, r1, 0x0) name_to_handle_at(r1, &(0x7f00002e4000)="2e2f66696c65ffff", &(0x7f0000000000)={0x8}, &(0x7f0000001ffc), 0x1400) 20:53:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x980, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, r1, 0x0, 0x1, @in={0x2, 0x4e20, @loopback=0x7f000001}}}, 0xa0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0xe7c}, &(0x7f00000001c0)=0x8) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 152.848977] binder: 10230:10233 got transaction with invalid offsets size, 1025 [ 152.866324] netlink: 64 bytes leftover after parsing attributes in process `syz-executor5'. 20:53:46 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x40000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x8, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) read(r4, &(0x7f0000000140)=""/236, 0xec) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x7f}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r5, 0x300000000}, &(0x7f0000000400)=0x8) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440)=@int=0xb582, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)={0x80, 0x0, 0x2}) 20:53:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x80}, 0x8) close(r2) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x242100) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000040)) close(r1) [ 152.897176] binder: 10230:10233 transaction failed 29201/-22, size 0-1025 line 3003 [ 152.929946] binder: undelivered TRANSACTION_ERROR: 29201 20:53:46 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x21, 0x1000802) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="df00000005000000a0122e438408ac7050932731d09c5ccdeb81c0e5f75fd920fdbc4ec1a47b0a898b1f6f8ff73d8da42ae842f7d508f4875efb01a5537f8483e965e4bb706e19813a72be418aa6ebe37818aabf906acd5f3588cae779af6bbbd20fbbf66d3dbab92f2adfa79dd989a06a8ced7962352ff3aa6a6e36f3b89f3aa1e3934005000000e5cd89fd369f628569310fa69a88f88fa85a30a11aac9909f75a6512c7309a0f8b7c16cdc4dc59c981856ef36d4f69cc2c60bcfb8eb1c43eccbeaa3363b73cec63021c6357522f8c5f980000010000000000db3d067e78bb051039f16ed97d85577fb7d9575ff06926e84fed76feba64464c2b02a12d8c"], &(0x7f00000000c0), 0x1400) mount(&(0x7f0000000200)='A:,ile:\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) [ 153.019642] audit: type=1326 audit(1531342426.362:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 [ 153.039641] audit: type=1326 audit(1531342426.362:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 20:53:46 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:46 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) io_setup(0xc1b, &(0x7f0000000000)=0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x9ffff, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0xc0c, 0x400000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001440)='/dev/null\x00', 0x103400, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001580)='/dev/ppp\x00', 0x6800, 0x0) io_submit(r1, 0x1, &(0x7f0000001600)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f00000002c0)="5de3c1da55137535ec7cb2e686fdece404ffc89d77ccabc33a57b92167eff7f274065941f20804d9f18d60d54765ecf9205e4dc942beaa913ccbdd5df474757d8be3a5ba0ec93de78f4af432164d3155ac9680296989f7d040b7e7cfd2428ff4df8daaae340675084dda0deadeeddbb82cae18beb8febdbaa94ec459a501d09344cdf8c72186cd17f83992bc463b51776d1c09b1", 0x94, 0x1, 0x0, 0xb15a24909e0017a6, r3}]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f00000000c0)=""/46) connect$pppoe(r4, &(0x7f0000001840)={0x18, 0x0, {0x3, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'veth1\x00'}}, 0x1e) ioctl$TCSBRK(r2, 0x5409, 0x9) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1}) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000100)=0x416) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001640)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000001740)=0xe8) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000500)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$unix(r5, &(0x7f0000000640)={&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000480)="e1c2a8778b924128121c12d51ca58fa1a09238c1b5acdb322c91bcd3920a95dc076246ffd5bf7e3044c2e12775931c1e14d36cb5e966360321776bf05638fc550688f9d16b6964bf225b5ddde4e4fd6b7c3039c06f76ad8df4867a3290f446244dba2fe7d24cec33dfb483c3fe9acc044cc521236e7a", 0x76}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000002329deaa02a62c64cbb72381f02c45ad10008d9ded7d1b6a9894237e76ad0004d73cb57e9d077faa7d41ebe8708d810c44590eccb287f0c680cc34a1a3403db2c82ea34900488681e5f11547a9322cbe92b832065a6ba05d8a70ab68b5ed7cd2db602eede63d166a3e772c5e479a309704ca722cf374e7623f14c9874cbf8b71a93f3b74aaae4466b1d9151a70744d1cc0cf7414070a85cc97669a55658336be76cfdcf4918a306608925a6cec6b3ec8496cfed5520c159d28ed82c26fbdf6d8888ab5607a8ce98630b794a158f7040dbf273d0b043deb816b103e7ad1e73de72a2819"], 0x48, 0x5}, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0x1f, 0x3, 'client1\x00', 0xffffffff80000000, "43e4eeb3b7cb8c9d", "709e77220930a7d39e30dcc2388d534602ce54d5de74e59eb60851d4a412db13", 0x81}) [ 153.059480] audit: type=1326 audit(1531342426.362:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 [ 153.079267] audit: type=1326 audit(1531342426.363:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 [ 153.099156] audit: type=1326 audit(1531342426.363:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 [ 153.119056] audit: type=1326 audit(1531342426.363:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 [ 153.138996] audit: type=1326 audit(1531342426.363:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 [ 153.158772] audit: type=1326 audit(1531342426.363:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 [ 153.161922] libceph: parse_ips bad ip 'A:,ile' [ 153.179425] audit: type=1326 audit(1531342426.364:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x50000 [ 153.179450] audit: type=1326 audit(1531342426.384:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10247 comm="syz-executor4" exe="/root/syz-executor4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x455e29 code=0x50000 [ 153.238239] binder: 10263:10267 got transaction with invalid offsets size, 1025 20:53:46 executing program 1: socketpair(0xa, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000080)={0x14, 0x1, 0xffffffffffffffff}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) clone(0x8000000, &(0x7f0000000180)="ea9285fecb4959b2106374f49f65103b7044ce11c8b994c3feff125c985d580cc6616c9d961bdc975d82201ad99a9155b3760886cbdeb4f3f7ade7fe7777c6f9a774d121e4d17ee94ce129730f58fe730a1b14b0a58c092a8b571f4fb90b96711bcd1a1aa19182edd92591bbde58c4010011f6ee20919a688b77e5ee05e3ad941f048f04f996da78f8dd30bc431fbe50ccad34ff5c14661304d0762b9dc16a3573038a43942b51ce70f88de2841a2dafc2011611eee5dfd97dbf671d1cfc5339b3b3c5985861dddeaa672b680da6704fa1", &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000280)="0ac8d9a4dcb58fd7907fc70b296a0e15501405102e1a07d794") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) prctl$intptr(0x8, 0x2) 20:53:46 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000200000015000000000000009500000000100000"], &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a8d34dbcd1515a3ac5aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0xc3, &(0x7f0000000000)=""/195}, 0x48) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x40, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000500)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000600)=""/241) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_security(0x11, r2, &(0x7f0000000340)=""/90, 0x5a) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000280)=""/49) open$dir(&(0x7f00000003c0)='./file0\x00', 0x4000, 0x149) 20:53:46 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x22000) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)) socket$inet(0x2, 0x80007, 0x38) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x7fff, 0x7fffffff, 0x51}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000100)={0x8000, 0x2, 0x81}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xc7, "a55311fcc890c4733fd6e8c1ef7204494fd1c3c4889f674fbaa82e53db36db856f591521435fdcaefb838e13540f4a708e1d0edfa4458ca25e787d11b91dc24020e1f57ff75195a3a95a5dfa396eeeff861a049d0cdb9bad6175592cf66c8e6a3add6fe7920543a8b50b8f839b7d2e6b711697fa780c78be48ebe0282f82153fe4f8f720fc6c0eb768b209c10c5f9119a0a3dcb531fc3fec310b67a0eafc5a7e75497262fb9b3ca223a6c3d008873c4c340d845ffde147b9bc2105467bccbe673f79739c1ba650"}, &(0x7f0000000180)=0xcf) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={r2, 0x4, 0x4, [0x1, 0x20, 0x80000000, 0x40]}, &(0x7f0000000300)=0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000001c0)=0x9, 0x4) rt_sigpending(&(0x7f0000000140), 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='yeah\x00', 0x5) shutdown(r1, 0x1) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000200)={0x0, {{0x2, 0x0, @loopback=0x7f000001}}}, 0x88) ioctl$void(r1, 0x5450) [ 153.284499] binder: 10263:10267 transaction failed 29201/-22, size 0-1025 line 3003 [ 153.314578] binder: undelivered TRANSACTION_ERROR: 29201 20:53:46 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000000000, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x1ff, 0x9, 0x1, 0x80, 0x2, 0x1}, 0x8}, 0xa) socket$inet(0x28, 0x2, 0xffffffff00000028) 20:53:46 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 153.372494] Unknown ioctl -1073172983 20:53:46 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x5, 0x7fffffff, 0x509, 'syz0\x00', 0x6c0}, 0x1, [0x7, 0x10000, 0x0, 0x1f, 0x8, 0x6f03, 0x0, 0x7, 0x5, 0xfffffffffffffffd, 0x81, 0xfffffffffffffffb, 0x401, 0x10001, 0x18c, 0x2, 0x15e, 0xadb4, 0x1ff, 0x3, 0x6, 0x79d, 0x9, 0x1ff, 0x7d50, 0x7ff, 0x6, 0x3, 0x7fffffff, 0x401, 0x6, 0x3, 0x3, 0x20, 0xffffffffffff009b, 0x6, 0x0, 0x7, 0x2, 0x5, 0x80000000, 0x2, 0xfffffffffffff001, 0x6, 0x8a, 0x8, 0x2, 0x0, 0x9, 0x7fffffff, 0x7fffffff, 0x0, 0x8001, 0x9, 0xffffffffffffff90, 0x2, 0x0, 0xffffffffffff8001, 0x0, 0x3, 0x6, 0x8001, 0x101, 0x7, 0x7, 0x4, 0x100000001, 0x40, 0x4, 0x1, 0x8001, 0x0, 0x7482, 0x0, 0x9, 0x0, 0x9, 0x4, 0x5f, 0x1f, 0x7fffffff, 0x1ff, 0x8000, 0x6, 0x6, 0x1, 0xfffffffffffffff9, 0x2, 0x4, 0xfff, 0x0, 0x9, 0x8, 0x6d1, 0x1, 0x3f, 0xffffffffffff8001, 0x2, 0x101, 0x4, 0x1000000, 0x400, 0x5, 0x7, 0x7fffffff, 0x7, 0x1d3, 0x4, 0x1, 0x9, 0x37d858fb, 0x82, 0x1b, 0x7, 0x4, 0x80, 0x0, 0x3f, 0xff, 0x8000, 0x401, 0x7, 0x7, 0x1, 0x101, 0xdb, 0x5, 0x80], {0x0, 0x1c9c380}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$adsp(&(0x7f0000000940)='/dev/adsp#\x00', 0x7, 0xadbc2588463fe6c7) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000027000300000000000000da000000000000000000"], 0x18}, 0x1}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0)='IPVS\x00') r4 = semget(0x3, 0x7, 0x329) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000b80)=""/194) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xcc, r3, 0x0, 0x70bd28, 0x25dfdbfe, {0x7}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x69fd}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x79}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x21}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}, [{[], {0x8100, 0x0, 0xfff, 0x1}}], {@generic={0x6007, "e974ff1b1388e7c1bba9473ebcd2de98e00bbc6ab5df96b0ddd65cd5"}}}, &(0x7f0000000140)={0x0, 0x2, [0x164, 0x33e, 0xf41, 0xecc]}) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000006c0), &(0x7f0000000700)=0x10) sendmsg$nl_crypto(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x430}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)=@upd={0x118, 0x12, 0x100, 0x70bd26, 0x25dfdbfe, {{'ecb-cast5-avx\x00'}, [], [], 0x400, 0x2400}, [{0x8, 0x1, 0xcb82}, {0x8, 0x1, 0xfffffffffffffff9}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x1f}]}, 0x118}, 0x1, 0x0, 0x0, 0x44000}, 0x1) [ 153.420555] Unknown ioctl -1073172983 20:53:46 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/rt_acct\x00') ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x0, [{r2}, {r0}]}) 20:53:46 executing program 1: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r0, 0x4, 0x2000) io_setup(0x8000000007, &(0x7f0000000040)) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0x1000, ""/4096}) 20:53:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x80800) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/51, 0x17}], 0x1, 0x0) 20:53:46 executing program 2: r0 = socket$inet6(0xa, 0x11100000000002, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x176b) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200001, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x46) [ 153.550700] binder: 10300:10301 got transaction with invalid offsets size, 1025 [ 153.561844] binder: 10300:10301 transaction failed 29201/-22, size 0-1025 line 3003 [ 153.589377] binder: undelivered TRANSACTION_ERROR: 29201 20:53:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)="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", 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r2, r1, &(0x7f00000001c0), 0x7) 20:53:46 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 153.762882] binder: 10329:10330 got transaction with invalid offsets size, 1025 [ 153.780669] binder: 10329:10330 transaction failed 29201/-22, size 0-1025 line 3003 [ 153.803524] binder: undelivered TRANSACTION_ERROR: 29201 20:53:47 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000007c0)='cgroup.clone_children\x00', 0x2, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000000)={0xfffffffffffffffa, 0x100000000, 0x6, 0xfff, 0x2, [{0x0, 0x4, 0x4, 0x0, 0x0, 0x800}, {0x6, 0x80000001, 0x0, 0x0, 0x0, 0x200}]}) sendfile(r1, r1, &(0x7f00000000c0), 0x5) 20:53:47 executing program 7: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000140)=0xb) recvfrom(r3, &(0x7f0000000080)=""/42, 0x2a, 0x0, &(0x7f00000000c0)=@rc={0x1f}, 0x70a000) 20:53:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000001c0)="66b9800000c00f326635010000000f303e660f38029e9ba766b9800000c00f326635010000000f300fc7a90000660f763366b92e08000066b80070000066ba000000000f30360f18ed0f21be0f20e06635000004000f22e00f01c8", 0x5b}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4138ae84, &(0x7f0000000040)) 20:53:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x1ff}}, 0x6, 0x9}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x7}, &(0x7f0000000240)=0x8) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x200}, &(0x7f0000000300)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x30b140, 0x0) 20:53:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:47 executing program 6: socketpair(0x5, 0xa, 0x1, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="295ee1311f16f477671070") ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0xfff, 0x6000}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000059d000/0x3000)=nil) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r1, &(0x7f00000000c0)='timers\x00') setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 153.909711] binder: 10353:10355 got transaction with invalid offsets size, 1025 [ 153.948976] binder: 10353:10355 transaction failed 29201/-22, size 0-1025 line 3003 [ 153.984833] mmap: syz-executor6 (10366): VmData 35139584 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 153.993070] binder: undelivered TRANSACTION_ERROR: 29201 20:53:47 executing program 0: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x0, 0x209, 0x0, 0xfffffffffffffffc, 0x3}) r0 = semget$private(0x0, 0x5, 0x0) semctl$IPC_INFO(r0, 0x2, 0x3, &(0x7f00000000c0)=""/205) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000080)=""/54) 20:53:47 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000080)="1f00000001662de604ff00fd4354c007110000f305010008000100030423dcffdf00", 0x22) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x210000, 0x0) 20:53:47 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000040)={0x9, 0x7cb5}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000400)=""/148, 0x94) 20:53:47 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) connect$vsock_stream(r0, &(0x7f00000004c0)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x1fffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000340)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="50001000", @ANYRES16=r2, @ANYBLOB="08002dbd7000fddbdf2501000000080001004e220000040005000800020000000000040005000400050008000400020000000800040003000000080002000a000000080001004e240000"], 0x50}, 0x1, 0x0, 0x0, 0xea802ac618034e53}, 0x4000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)='/dev/vsock\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r4) getsockopt$sock_int(r1, 0x1, 0xd4c2a4f594b030ad, &(0x7f0000000240), &(0x7f00000002c0)=0x4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x6, 0x0, 0x400000000007000, 0x2000, &(0x7f0000001000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 20:53:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:47 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x412800) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/109) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfada, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x3) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) 20:53:47 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f0000000200)=0x7b36, 0x4) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) 20:53:47 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b300000000000000e6000000000000000000000000000000", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x5a, 0x4) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r3, 0xffffffffffffff7f) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x2, 0xa0e, 0x7, 0x0}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000380)={r5, 0x1, 0x101, 0x4}, 0x10) sendto$inet6(r4, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r6 = accept4(r3, 0x0, &(0x7f0000000080), 0x0) recvmmsg(r6, &(0x7f0000003640)=[{{&(0x7f0000000180)=@nfc, 0x80, &(0x7f0000002580), 0x0, &(0x7f00000036c0)=""/4096, 0x1000}}], 0x1, 0x3, &(0x7f0000003680)={0x77359400}) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x1, r2}) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f9999c1192ad6e81630a3237b66dd9fe", 0x10}], 0x1, &(0x7f0000000140)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x400000000000228, 0x0, &(0x7f0000000000)={0x77359400}) r7 = shmget(0x1, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000080)=""/36) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000180)=0xc) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000240)={r9, 0x1, 0x6, @random="3b1d3d6b5036"}, 0x10) ioctl$VT_ACTIVATE(r8, 0x5606, 0x6) [ 154.262607] binder: 10389:10391 got transaction with invalid offsets size, 1025 [ 154.292299] binder: 10389:10391 transaction failed 29201/-22, size 0-1025 line 3003 20:53:47 executing program 5: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'team_slave_0\x00', r1}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x190) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) write$P9_RCLUNK(r2, &(0x7f00000000c0)={0x7, 0x79, 0x2}, 0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000600)=@broute={'%route\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000080), &(0x7f0000001000)=ANY=[@ANYBLOB="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"]}, 0x540) 20:53:47 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x400040) getdents(r0, &(0x7f0000000440)=""/163, 0xfffffffffffffef6) r1 = getpgid(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f00000001c0)='net/ip_vs\x00') r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="cc906cab17b2ae610bfdf871ae9f00df", 0x10) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000100)) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$P9_RREADLINK(r0, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/19, 0x13}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000200)="9662f95c2acf16c68db88b563ab9b562", 0x10) 20:53:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 154.357410] binder: undelivered TRANSACTION_ERROR: 29201 [ 154.373570] capability: warning: `syz-executor0' uses 32-bit capabilities (legacy support in use) 20:53:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85eeffff0500000000000000000000009500000000000000"], &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x0, 0x60, &(0x7f0000000000)=""/195}, 0x16) 20:53:47 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40, 0x0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)) 20:53:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200000, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="0a0775b0d5e383e5b3b60ced5cd4db2f", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg(r3, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000100)={'tunl0\x00', 0x7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x24) sendmsg$alg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) [ 154.424670] kernel msg: ebtables bug: please report to author: Wrong len argument [ 154.485583] kernel msg: ebtables bug: please report to author: Wrong len argument [ 154.488976] binder: 10426:10427 got transaction with invalid offsets size, 1025 20:53:47 executing program 0: r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x80800, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) r2 = socket(0x10, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(r2, r3, &(0x7f00000000c0), 0x80000002) 20:53:47 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f0000000080)) open$dir(&(0x7f0000000000)='./file0\x00', 0x3ffc, 0x0) 20:53:47 executing program 1: syz_emit_ethernet(0x56, &(0x7f0000000180)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, @random="6a5baec6a557", [], {@canfd={0xd, {{0x3, 0x3f, 0xfff, 0x9}, 0x2, 0x1, 0x0, 0x0, "dd3856edf87fcd9240fde6ce367f0dd4cf2b5623723c3a762129159f6f10d6857adffaab587f7803e6888397e17e0739b8f060fc5cc60e5b0e83b8ec7449d398"}}}}, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffe]}) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x4000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) getpgid(r1) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x20080, 0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x1a0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x80, @multicast2=0xe0000002}}, 0x2}, 0x90) pipe2$9p(&(0x7f00000000c0), 0x84000) [ 154.548279] binder: 10426:10427 transaction failed 29201/-22, size 0-1025 line 3003 20:53:48 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7) recvmsg(r0, &(0x7f0000001780)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000001c0)=0xa, 0x4) sendto$inet(r0, &(0x7f0000000000)="6c25b73cbbdc64e4ba42b5cef40d52a8876f700b968060633a327d2d7ad003a634323dea6e8eb0482faabd90b2ea1fcbcfa593bcf45412b0ed428fbe233a9d67c1b31a1db1e6fc4c1cd2522f85c96d9ca9e8bb8d546c8115a807d3f24f268efef3b91b3989197025af679e7531d20f1463ac58cc17ade16ec7e5890d5cd36ecb480d4c0b28ed8fed479ed2c912424eca359fb82379b8ab1eae445b1847861a64ba08fe9b50345d8a2eb9b6135db9ea935e22934d10d3abb425bfae65bebe356bab7451", 0xc3, 0x4004000, &(0x7f0000000100)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f0000006ff4)={@empty, @loopback=0x7f000001}, 0xc) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000002000)={0x2}, 0x10) [ 154.623172] binder: undelivered TRANSACTION_ERROR: 29201 20:53:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280-avx2)\x00'}, 0x58) write$binfmt_aout(r0, &(0x7f0000000080)={{0x10b, 0x5, 0x10000, 0xb2, 0x28a, 0x7, 0x2db, 0x941c}, "db0a50f2e9043ff8a6692ac63ecf240f917ac600eb88ce5c31819167b0f6c3f3b9943f00449690b7f779a9b6", [[], [], [], [], [], [], [], [], [], []]}, 0xa4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00000000c0), 0x10) 20:53:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f00000003c0)={0x97, 0x7d, 0x2, {{0x0, 0x7a, 0x0, 0x5, {0x0, 0x1, 0x6}, 0x20000000, 0x9, 0x3, 0x9, 0xc, '/dev/autofs\x00', 0xc, '/dev/autofs\x00', 0x10, 'posix_acl_access', 0x1f, 'cpuset\\loppp0ppp1(-em1snodev]+*'}, 0x8, ':vmnet1,', r2, r3, r4}}, 0x97) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x100) getsockopt$sock_cred(r0, 0x1, 0x1d, &(0x7f0000000380), &(0x7f0000001040)=0xee) 20:53:48 executing program 1: r0 = socket(0x40000000002, 0x2000000000000003, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ipddp0\x00', 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff324bc917fef4810048000800ff0000000000000000029078ac14ffbbffffffff00f584a09cf0a100000000089078ff00000000000000ee2cbc"], 0x0) 20:53:48 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0xdd) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10) 20:53:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000008912, &(0x7f00000002c0)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_create(&(0x7f0000000000)="ac0000", 0x4) ftruncate(r4, 0x1000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r4, 0x50, &(0x7f00000000c0)}, 0x10) sendfile(r3, r4, &(0x7f00000037c0)=0xf0ffff, 0xfffffdef) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0xa00, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x3, "1b50ca"}, &(0x7f0000000180)=0xffffffffffffff00) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000200)={r6, 0x291, 0x6, 0x5, 0x200000000000}, 0x14) close(r1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x4}) [ 154.798797] binder: 10466:10468 got transaction with invalid offsets size, 1025 20:53:48 executing program 6: syz_emit_ethernet(0xffffffffffffffb9, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500005c0000000000019078ac1414bbac141411050f907800000000400000000000000000000000ac7014aaac141400442c000000000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000a552484e34507256dcff2079dea63b1f0a18d21f855ad75b183115fc06e17cbfe84bad6371895dc72eec1584c75858674beeb2371eee18168a21b587f11ebac44f433470"], &(0x7f0000000000)={0xfffffffffffffffe}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) socketpair$inet6(0xa, 0x802, 0x895, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 154.861512] binder: 10466:10468 transaction failed 29201/-22, size 0-1025 line 3003 [ 154.897273] binder: undelivered TRANSACTION_ERROR: 29201 20:53:48 executing program 7: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6, 0x0}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="094dd5bf60005b524744959614865290cc688a18a96e4af296d227351fb947bc0aca5d898d3fa8101eed9f3178816fe7299b6f3d78810b1149c08e5be28bd373994e25be2c8fb79ed8cd9c074ade6bf406deb7804a49a33e704fa3a17b22fc1ee4c959cb8f467e32417de46db387961b890c7a944397f467c17da4294db8f0716695a4dab67c95577802568eef50c85429ee755ff6745aa68d38960b8aceef1289adb07532769b7da635686f1c59b6f73f1cb4631cab89a61838ce4ac244d92cfd788d975824c0d44c8667b15d3fc1"], &(0x7f0000000180)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$TIOCNXCL(r4, 0x540d) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000001540)=""/4096) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:53:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r3 = semget(0x0, 0x4, 0xa1) semctl$IPC_INFO(r3, 0x3, 0x3, &(0x7f0000000040)=""/17) 20:53:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:48 executing program 0: mmap(&(0x7f0000105000/0x10000)=nil, 0x10000, 0x2000001, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40106309}], 0x0, 0x0, &(0x7f00000000c0)}) 20:53:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x9) r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="05044000139b3b6d4a9cb64773bbcc80873f66500d9a96f8de84a6b710dbcb26bf883085fe59e23c50b88eea2883ad47261a65492a536c8303d3a8cbdd88f89b9e330e7f7c7d4bf2156cfb7291aaa42839cd5eddf87bb08555077057e2a5e561bbb0d4e0bc2bc4676ec4a36e207028910c57ffdb552bd4fbfb23a6e86cd4bfc5b9f11bfb2e776907db8672fa9a0f36ed5a284a214a17c7b3bebfc44819df041c45639406699825355e95cb65fa683d1fff5e9714fd74687b53c2dc9c2da40e739a597e5177e621f38d9225e3cc3948deb3ac92f9fb5595c668624ad7552c2462c7023dcf1580f67b552780442d3e9ced3d2d6c1bb37b5806f0fdd2a7481a25114b1b5f31c6924edaa3ccce3e59571b2b01f6f524801d0c2d70874b0f474193c179565d1bcd06bfdc5ce576832c400150aa2f1077a95015e70a1c39e94947fd2a73bfe70ade084cd28551c9df84a526661ff74932bd28301ec905f55c34cf698f2fa209e16045c56849820aee97f1311a93161f40f0543efdbb555c8a6b7332d9b185ac"], 0x0, 0x0, &(0x7f0000000040)}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000080)={r1, r1, 0x8, 0x3, &(0x7f00000002c0)="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", 0x40, 0x200, 0x1d1, 0x3, 0xfffffffffffffffd, 0x9, 0x7f, "ebd8067e8b091490d38a95744f6573cfee452b806d2184f02499e2ad78199239d9dfe32e785096432ff6756630bdac7f0cce2e5ea427093d7f8487a5f7f24e17d3d942e17e8ed6413c604384dd7c6c8a1d598cc44e09956510dbbb40d00aa95d3101f8a968ff996ff6ea72638685c012a6ee19d77e47996123905e7787d488561a48e249b54d1116ba27dcac0f898f73fe60f7049fae6ee953d8d79475aae09549e1d30f3d22554e7d545c1a21de01fe106296ee422cfb3b035fec4379852e0636bfb5fbe4992418352aaf71309e6ac198523c515ad1b6"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 20:53:48 executing program 6: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000280)) mkdirat(r1, &(0x7f0000033ff8)='./file0\x00', 0x0) mount(&(0x7f0000df2000)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x1001, &(0x7f0000a06000)) mount$9p_unix(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x4, &(0x7f0000000200)={'trans=unix,', {[{@fscache='fscache', 0x2c}, {@version_9p2000='version=9p2000', 0x2c}, {@access_client='access=client', 0x2c}, {@loose='loose', 0x2c}, {@uname={'uname', 0x3d, 'bdeveth0,'}, 0x2c}, {@version_9p2000='version=9p2000', 0x2c}]}}) unlinkat(r1, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00005e9000)='cifs\x00', 0x6000, &(0x7f0000000040)) 20:53:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) capset(&(0x7f0000000500)={0x19980330}, &(0x7f0000032fe8)) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, @empty, 0x0, 0x0, 0x0, 0x80}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000280)={0x8, 0x7, 0x1000, &(0x7f00000005c0)="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"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000040)={0x83fffffe, 0x1003, 'client1\x00', 0x5, "6b8805fb8fe9bb95", "bd5c335d7136053ba806e19159028acf8fe1d9e6549853ada8b8e0067b575c42", 0x0, 0x5}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@remote}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) inotify_init() [ 155.197841] binder: 10511:10515 got transaction with invalid offsets size, 1025 [ 155.210773] 9pnet: p9_fd_create_unix (10513): problem connecting socket: ./file0/file0: -2 [ 155.255287] binder: 10511:10515 transaction failed 29201/-22, size 0-1025 line 3003 [ 155.264763] binder: BINDER_SET_CONTEXT_MGR already set [ 155.276130] binder: 10506:10508 ioctl 40046207 0 returned -16 [ 155.284340] 9pnet: p9_fd_create_unix (10524): problem connecting socket: ./file0/file0: -2 [ 155.294376] binder: 10507:10521 BC_ACQUIRE_DONE u0000000000000000 no match 20:53:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x6, 0x6e, 0x1ff, 'queue0\x00', 0x4}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = semget$private(0x0, 0x0, 0x431) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000140)=""/175) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCSETSF(r3, 0x80047437, &(0x7f0000000000)) [ 155.295447] binder: undelivered TRANSACTION_ERROR: 29201 [ 155.317694] binder: 10506:10508 unknown command 4195333 [ 155.340136] binder: 10506:10508 ioctl c0306201 20000040 returned -22 [ 155.371262] binder: 10506:10508 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 155.401214] binder: 10506:10508 transaction failed 29189/-22, size 0-0 line 2852 [ 155.442708] binder: 10506:10508 unknown command 4195333 [ 155.445597] binder: 10506:10541 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 155.463238] binder: 10506:10508 ioctl c0306201 20000040 returned -22 [ 155.464519] binder_alloc: 10506: binder_alloc_buf, no vma [ 155.475604] binder: 10506:10541 transaction failed 29189/-3, size 0-0 line 2967 [ 155.486607] binder: undelivered TRANSACTION_ERROR: 29189 [ 155.493720] binder: undelivered TRANSACTION_ERROR: 29189 20:53:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140), 0x1bbf, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0xa080, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000040)={'tunl0\x00', 0x40}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x8000, 0x0) epoll_pwait(r4, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x9598, &(0x7f0000000240)={0x20}, 0x8) r5 = accept(r1, &(0x7f00000006c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x29) sendmmsg$unix(r5, &(0x7f00000033c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000140)}], 0x1, 0x8040) close(r2) 20:53:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)={0x9, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}) r2 = syz_open_pts(r1, 0x0) r3 = syz_open_pts(r1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xffffffff80000000) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x7) r4 = syz_open_pts(r1, 0x0) r5 = dup2(r2, r4) ioctl$sock_netdev_private(r5, 0x89fd, &(0x7f0000000080)="c7e6ee5cf1b53fa4e3c6d6a59c71d1c9ed23c3d566024d9152fbefe71dfe4c6f9fafa17d486aecc3b00b71cb39a7321da610639257") read(r0, &(0x7f0000000140)=""/42, 0x2a) 20:53:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x6d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0xe8101, 0x0) ioctl$KDMKTONE(r3, 0x4b30, 0x8f8c) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000240)={'bcsf0\x00', {0x2, 0x4e22, @rand_addr=0xd120}}) r4 = dup3(r1, r1, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x4, 0x1ff, 0x1ff, 0x3, 0x0, [{0x3, 0x2295, 0x3, [], 0xff}, {0x9, 0x4, 0xeae5, [], 0x6}, {0x9, 0x4, 0xa7}, {0x7ea4, 0x6, 0xffffffffffff8000, [], 0x6}, {0x1f09a1e1, 0x3, 0x9, [], 0x1}, {0x39744000000000, 0x1, 0x800, [], 0x5}, {0x5b12, 0x400, 0x4, [], 0x7f}, {0x0, 0x9dc, 0x5, [], 0xfa}, {0x13, 0x7, 0xfffffffffffffea9, [], 0xffffffffffffffe5}, {0x3a5, 0x42, 0xbbe}, {0x40, 0x7, 0x3e00, [], 0xfffffffffffffffe}, {0x9, 0x5, 0x5, [], 0x5}, {0x2, 0x1, 0x56a, [], 0x4}, {0x4, 0x80000000, 0x100000000, [], 0x6}, {0x3, 0x5, 0x0, [], 0x9}, {0x0, 0x5, 0x3, [], 0x1}, {0x7, 0x3f, 0xfffffffffffff6fe, [], 0xfffffffffffff0f2}, {0x5, 0xadd, 0x1, [], 0x100}, {0x5, 0x6, 0xffffffff, [], 0xffffffffffffffff}, {0x5, 0x9, 0x1, [], 0x40}, {0x9, 0x2, 0x6, [], 0x3ff}, {0xc2d8, 0x1ff, 0x24e126b9, [], 0x2}, {0xc0e0, 0x2, 0x178, [], 0x280000000000000}, {0xfff, 0x1, 0xfffffffffffffff7, [], 0x4}]}}) sendmmsg$alg(r1, &(0x7f00000031c0)=[{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000026c0)="3684e437933f416d4c0f2a9b6d34bfa87845e509a0a432ef951f571f516ef88c734a612444a0bd3268938aa06facfd40ea859effec2ec2886d4640c4839298853f", 0x41}], 0x1, &(0x7f0000002840)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000005a80)=""/4096, 0x20005e83}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 20:53:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='morus1280-generic\x00'}, 0x10) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00000009c0)) r2 = memfd_create(&(0x7f0000000100)='}}uservmnet1\x00', 0x3) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000140)={r2, 0x200000000000000, 0x85, r1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="ab553fec94248c32e27d040000ac2845", 0x32a) r3 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000280), &(0x7f00000002c0)=0xc) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="025c40400d885e4bfa806cc8dd81805d1b5aa6a33b47b64849cd16e550b80a") recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000040)=""/55, 0x20000077}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000740)=""/130, 0x82}], 0x7, &(0x7f00000008c0)=""/233, 0xe9}, 0x0) 20:53:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x800, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000290007031dfffd946fa2830020200a00090000000600000000ffffffff00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 20:53:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x108910, &(0x7f0000000180)="2638bc289edb50439c23e19854cd0e24b37db3affea4103e791dc479f45215072f24524a257ef8053bedafffb0e046edf8a1e14c263d795d51dafd3a313058b9b787462e993889185be24833cc841cb11cda0451d8c0ca08fa426fd76f3657845f220bdfc2f461f8972f2edb5bfd29a747d9893a9d4a464e5f24d01fa410a0ab8293902aba22201856d732eda1d075011291891f89c0f6b78de960ceb52ec28aa89b0a7fe18c491358ce6bb6") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) r2 = getpgrp(r1) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x40, 0x4401) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0, 0xfffffffffffffffe}) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc04c5349, &(0x7f0000dc5f98)) 20:53:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x1}, 0xfe01}, 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000002c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/74, 0x36}], 0x2, &(0x7f00000015c0)=""/165, 0xa5}}], 0x1, 0x0, &(0x7f0000004000)={0x77359400}) sendmsg$nl_route_sched(r0, &(0x7f0000005a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f00000059c0)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x201}, 0x24}, 0x1}, 0x4000) [ 155.604539] binder: 10553:10555 got transaction with invalid offsets size, 1025 20:53:49 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@mcast1={0xff, 0x1, [], 0x1}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x50201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x401, 0x5, r3}) 20:53:49 executing program 5: unshare(0x24020400) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000400)="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") ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet6(0xa, 0x800, 0xfffffff3) 20:53:49 executing program 6: r0 = getpgid(0x0) sched_setaffinity(r0, 0x8, &(0x7f00009ad000)=0x1) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) connect(r1, &(0x7f0000000000)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x80) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) dup2(r2, r1) pkey_mprotect(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0xffffffffffffffff) dup2(r1, r3) 20:53:49 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x1000000000000000}, 0x8) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x80) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xffffffffffff0000, 0x80000000, 0x6, 0x101, 0x800, 0x7ff, 0xfffffffffffffc01, {0x0, @in6={{0xa, 0x4e24, 0x101, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}, 0x4, 0x73, 0x10000, 0x6}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x2, 0x30}, 0xc) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) [ 155.648226] binder: 10553:10555 transaction failed 29201/-22, size 0-1025 line 3003 [ 155.671760] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 155.675142] binder: undelivered TRANSACTION_ERROR: 29201 20:53:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x100000005, 0x2, 0x5000, 0x2000, &(0x7f0000009000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:53:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x200, 0x0, 0x6, 0x647, 0x3}) ioctl$sock_ifreq(r0, 0x8bf2, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_mtu}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) 20:53:49 executing program 7: mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x10, &(0x7f0000000980)) r0 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) pwrite64(r0, &(0x7f00000008c0), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f0, 0x398, 0x118, 0x2a8, 0x2a8, 0x0, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, &(0x7f0000000140), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x20}, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffff00, 0xff, 'bond_slave_1\x00', 'team_slave_1\x00', {}, {0xff}, 0xdf, 0x0, 0x46}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@udp={0x30, 'udp\x00', 0x0, {0x4e23, 0x4e24, 0x4e24, 0x4e24, 0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x8001}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20}}}, {{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x5, 0xffffffff, 0xffffffff, 'bpq0\x00', 'bond0\x00', {}, {}, 0x6c, 0x3, 0x2}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e21}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x71, 0xfffffffffffffa77, @rand_addr=0x80000000, 0x4e20}}}, {{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001, 0xffffffff, 0xffffffff, 'veth0_to_team\x00', 'sit0\x00', {0xff}, {0xff}, 0x9e, 0x0, 0x10}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x8000}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x550) [ 155.811184] binder: 10589:10590 got transaction with invalid offsets size, 1025 [ 155.871684] binder: 10589:10590 transaction failed 29201/-22, size 0-1025 line 3003 [ 155.902745] binder: undelivered TRANSACTION_ERROR: 29201 20:53:49 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2f1815fb9f7b9e27424ae17f2c7766646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x2, r2}) 20:53:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140), 0x1bbf, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0xa080, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000040)={'tunl0\x00', 0x40}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x8000, 0x0) epoll_pwait(r4, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x9598, &(0x7f0000000240)={0x20}, 0x8) r5 = accept(r1, &(0x7f00000006c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x29) sendmmsg$unix(r5, &(0x7f00000033c0)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000140)}], 0x1, 0x8040) close(r2) 20:53:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:49 executing program 1: perf_event_open(&(0x7f000000a000)={0x10000000000006, 0x70, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x14, 0x7) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, &(0x7f0000000140)="06b3f09469fc3d143654d163a4f50fa004d9dacf002ae5879dcdaacff922076a3062ea90037575665ddb1a7d1673124a294a2d7f6b5330a2f6c2bed7acc7c3da1412d10000000000000000000000000000") 20:53:49 executing program 7: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}], 0x30) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x18, {0x2, 0x0, @broadcast=0xffffffff}, 'veth0_to_team\x00'}) [ 156.086638] binder: 10617:10618 got transaction with invalid offsets size, 1025 [ 156.094246] 9pnet: Insufficient options for proto=fd [ 156.096603] 9pnet: Insufficient options for proto=fd [ 156.107303] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:53:49 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 20:53:49 executing program 7: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x4, &(0x7f0000000080)=0x40000000101) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r1 = syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0xa000, 0xee00, 0xee00, 0x2, 0x3, 0x40000) mmap(&(0x7f0000a2c000/0x1000)=nil, 0x1000, 0x3000006, 0x40810, r1, 0x5d) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) madvise(&(0x7f000033a000/0x9000)=nil, 0x9000, 0x0) 20:53:49 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockname(r0, &(0x7f0000000040)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f00000000c0)=0x80) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x100000000) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000140)=""/151, &(0x7f0000000200)=0x97) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000280)={0x0, r0}) r2 = dup2(r0, r1) syncfs(r2) fcntl$setlease(r0, 0x400, 0x1) fstatfs(r1, &(0x7f00000002c0)=""/51) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x90) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000340)={0x83, 0x400}) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000380)=0xc5b, &(0x7f00000003c0)=0x2) r4 = fcntl$getown(r0, 0x9) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)=0x0) setpgid(r4, r5) dup2(r3, r2) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000480)=""/23, 0x17) lseek(r6, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000004c0)=0x9002, 0x4) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000500)="fd9dab40844c285fcc8520e1636466dc987442a6e559b501ccf0f7530009f887811aea01f15c271d16d0a77ec3ea0a6d148416a9aab4211ce9c67c6ae9e54fdaf41a7b55d9ef9264079b6632a81e46e1bb63e0f66a932af11632aedada2e87ef02efb2674113b73f71371324f3dd7b72d03d12ff8cf65941bc9a69aa915318d3ec3cc8f0f01626a4eeb8de86e6c8795d4cd90a3b1002dfaa09f08444fdcb8b6373d367004abfcebd7e4e42abef425f2947c91f27988f381490134c68069480469b0ae22a22d82c6c4cf940f8424c15f51de83f2bd8ba94f41302434a779dfc5837e7f76f1e6bf73e90b4028bc1735c6a5088f7ff03f38a94f637756cf9641c3e") delete_module(&(0x7f0000000600)='user\x00', 0x800) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000640)={0x5, 0x20}) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000680)=0x101) r7 = request_key(&(0x7f00000006c0)='ceph\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000740)='\x00', 0x0) r8 = request_key(&(0x7f0000000800)='trusted\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000880)='/dev/rfkill\x00', 0xfffffffffffffff9) keyctl$search(0xa, r7, &(0x7f0000000780)='id_resolver\x00', &(0x7f00000007c0)={0x73, 0x79, 0x7a, 0x3}, r8) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000008c0), &(0x7f0000000900)=0x4) [ 156.139635] binder: 10617:10618 transaction failed 29201/-22, size 0-1025 line 3003 [ 156.171865] binder: undelivered TRANSACTION_ERROR: 29201 20:53:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='gre0\x00', 0x10) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x76, "2d4a04c770baf31ddab6fa351cb43bbd43d7b48a6a05c5ca7a54bcfcdeabd94ef77fdfa52918fe3cac4b890325da642cb59e36806c4be06db9474a222a41ae30fe12241da480fd94fe0c553233b89b4a7459cfaed5c0aeb6fc289e03eade45be8f880c9b6cf2c71cbe2c8ca3cf16b32456b1cc8fb42b"}, &(0x7f0000000100)=0x7e) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x3, 0x3ff, 0x9, 0x9, 0xf6}, 0x14) sendto$inet6(r0, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, 0x1c) 20:53:49 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000240), 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r1}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bpq0\x00', r2}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000013000108000000000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c0001000f00000000000000e1d46ac7cec4ea7dd627e93d644e75a177cf07763fb34ddb0f4294d09f2136b8d4c9e13e43f227074913bbb736361c9bf44bb19818798d54e74ff9ca9f868d49eb0a7edfd94f136bf452956250"], 0x2c}, 0x1}, 0x0) 20:53:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x101000, 0x0) mq_notify(r2, &(0x7f0000000540)={0x0, 0x9, 0x0, @thr={&(0x7f0000000380)="73aae19d9c66c49fc82dc0491babe334f6168db8a28618b484914561e0a6950b9281c37529edf673b2fc92", &(0x7f0000000440)="a90f0c3ebb5b0a5888bfbe82d20d1d29b8cf7f3fb52c00634f60c6cb6184bc07be0b0bde4494c50533b8a1d5e02a249b0927f77d16005941afff75e6084a92a99488d68c6f5b89ff24367a3091f8618934503d3a09f601d1a2f4cf3f2fbb5735dac1c97081e718d0f03540fbc32e0af6890c00e1d872ce29fc1582d6ba416de6ae6689850a15dad5121c8ffbcc16b66f7ef6a894ec12cab9f2cc0220685c7cbb79a834760f7b0457516496d095271e445b7d0277b5d210c15a26af41f5124b236986d68bd9"}}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5", 0x5) r3 = accept$alg(r1, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r4, 0x80605414, &(0x7f00000001c0)=""/157) sendmmsg(r3, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca61", 0x38}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="bba8e1a03879670b7876c22356160f950b5faf0372dfef7f049b1076dc193821afa631dc04149139f682e66d518f5db4575b57aaffe4d7be0f565777555fb5ecd33f2853ebd456ba836ef184fb466ee41c7d13b13e6d42b62bc15f09cd7c2f24", 0x60}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg(r3, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000002c0)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6829155e350ffdd6}, 0x0) 20:53:49 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:49 executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) r0 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)='^\x00', 0xfffffffffffffffd) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000000), 0x0, r0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x6, 0x103080) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0xe1, "24b7e3a26985c4673540311ccb9f0e7687d1a22b8db2a8e6b84802cc048b321779d637957637506f90618a2658c5859f6dc23217e26dd22e95b331d5c622d64c50331edaf52db1a15df22065a263483febe8840de063c8780f616b04a1d2fffa888fb2344fc739251055b88e066a1a91784688b8db47b00b614eb712efae7941e269221e8f62b18b0c5611f4d0ab22e8b4cd6bc7c2c72cb031e50d5c4ceee84e7e331a388059cc9a6fa27050db15337ad1a1b77e9ccc9ac2d17e27703c27410ff8ccbfe2f68bd6eb1c0b89fee3ed74d791ade61961c4006bb8a4a20905ad0cc97d"}, &(0x7f0000000340)=0xe9) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={r2, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x6, 0x1bf6, 0x5, 0x2, 0x8}, &(0x7f0000000440)=0x98) 20:53:49 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x7d, &(0x7f0000000540)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, &(0x7f0000000600)=0x90) 20:53:49 executing program 1: r0 = socket$inet6(0xa, 0x80a, 0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet(0x1e, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0}) 20:53:49 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000040)="ff55d36cffba04365d0000000000000101000000", 0x14) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)="ff555b30468d13bbe88312cacf016d0000010100a01b933bf399248994172b0d34f5d902084b6b95854df604308a3d272d05515d99701a3ee0c2b682df09455427caa8df61310b39f9d996bc70d480a9b0f05e6c2ebe", 0x1be) 20:53:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffffffff8000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x10000000}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000640)={0x7fffffff, 0x9, 0x8, 0x5, 0x5}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x478, 0x278, 0x0, 0x140, 0x390, 0x390, 0x390, 0x4, &(0x7f0000000100), {[{{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr=0x7, 0x0, 0x0, @empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}, 0x75f, 0x0, 0x6, 0x0, 0x7, 0x1, 'bcsh0\x00', 'bcsh0\x00', {}, {}, 0x0, 0x230}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f63f1c322c3f", @empty, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001, 0x8, 0xffffffff}}}, {{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0xff000000, @empty, {[0xff, 0x0, 0x0, 0xff]}, @empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}, 0x89, 0x1, 0x5, 0x4, 0x1, 0x3f, 'erspan0\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x40}, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x8883, 0x80}}}, {{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xffffffff, 0x10000}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4c8) r2 = epoll_create1(0x80000) set_thread_area(&(0x7f00000006c0)={0x551f, 0x1000, 0x4000, 0x9, 0x7, 0x100000001, 0x7a6, 0x6, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) 20:53:50 executing program 5: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0xffffff46, &(0x7f0000004000)=[{&(0x7f0000000040)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x26, "01e05994e6ffaab87159cab651dbd17321520ded83d938d8572588a5a5eaae58692d4a1d06ff"}, &(0x7f0000000100)=0x2e) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x9}, 0xc) sendmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000080)="2400000002031f001cfffd946fa2830020200a000900020002e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 156.614097] binder: 10659:10662 got transaction with invalid offsets size, 1025 [ 156.652606] binder: 10659:10662 transaction failed 29201/-22, size 0-1025 line 3003 20:53:50 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x9, 0x2}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r2, 0x4, 0x0, 0x9}, 0x10) ioctl$sock_bt(r0, 0x541b, &(0x7f0000000180)="640c2225480c0e90535e35f851b270f1c5f3246c5719d70b612c87362caf5b3d0a1e5374d162aea02ed9bba608707ea8b114473912d6997fc746446021f4d8f072713e3d2611ce5a069b0dc8f7b61f7961d6b5c15b9792c41903104f83cf459cc7a7a7c37fd9f44353ce6efd10fce66163d7212911241565e8d738979875ecf24df9cf75b68f3e59deb857450e6b42205d8b3e887dbe47dc36849916ca433f280da034142b21b7441050e4708c49816c") ioctl$KVM_RUN(r0, 0xae80, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r2, 0x8}, 0x8) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000002c0)=""/23) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000300)=0x9776, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x5, 0x1ff, 0x8000, 0x9, 0x1}, 0x98) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000400)=@generic={0x3, 0x8, 0x3}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440)=0x2, 0x9, 0x0, &(0x7f00000004c0)={r4, r5+10000000}, &(0x7f0000000500)=0x2, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000540)={'bond0\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000580), &(0x7f00000005c0)=0x8) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000600)) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000640)=0xffffffff, &(0x7f0000000680)=0x2) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000006c0)=0x100000001) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000700)={0x0, {{0xa, 0x4e23, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}}, 0x88) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000007c0)=0x3, 0x4) shmget(0x2, 0x14000, 0x44, &(0x7f0000fe9000/0x14000)=nil) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000800)) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000840)) syz_open_dev$sg(&(0x7f0000000880)='/dev/sg#\x00', 0x10000000000, 0x400) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001180)=@filter={'filter\x00', 0xe, 0x5, 0x878, [0x0, 0x20000900, 0x20000cf0, 0x20001078], 0x0, &(0x7f00000008c0), &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x12, 0xfbfb, 'lo\x00', 'veth1_to_bond\x00', 'veth0_to_bond\x00', 'syzkaller0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0xffffffffffffffe0, "55b298e5d25039b35b05231db2eb237314ddb92e77de16928011fea5bb3a", 0xc}}}}, {{{0x9, 0x10, 0x1f, 'veth0\x00', 'yam0\x00', 'ifb0\x00', 'eql\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xa0, 0x1d0, 0x300, [@cpu={'cpu\x00', 0x8, {{0x7}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:hald_dccm_exec_t:s0\x00'}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:object_r:iptables_initrc_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x11, 0x60, 0xdada, 'syzkaller0\x00', 'tunl0\x00', 'veth1_to_team\x00', 'sit0\x00', @empty, [0xff, 0x0, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x70, 0xa8, 0x120}, [@common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x81, 0x8001, 0xc9, 0x0, 0x0, "adb11aac0384576485319d6111f416be4b45fa685de062474e9782dcf243021f1fbff64d2560e889c9de47b497b8b5015e9b1f0ef96af6d4dc684b0d9704eaa6"}}}}, {{{0x15, 0x10, 0x8edd, 'nr0\x00', 'veth0_to_bridge\x00', 'veth1\x00', 'bond0\x00', @empty, [0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xa0, 0x108, 0x238, [@pkttype={'pkttype\x00', 0x8, {{0x1, 0x1}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7fff, 'system_u:object_r:selinux_config_t:s0\x00'}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{{{0x9, 0x40, 0x89ff, 'bond0\x00', 'gre0\x00', 'veth1_to_bridge\x00', 'veth0_to_bond\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc}]}, 0x8f0) socket$inet6(0xa, 0xb, 0x80000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000001200)=0xeaa05c80363911e3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001240)={r2, @in={{0x2, 0x4e22, @rand_addr=0x5}}, 0xc55, 0x2, 0x80000000, 0x9, 0x7fffffff}, &(0x7f0000001300)=0x98) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001340)={r6, 0x40}, &(0x7f0000001380)=0x8) 20:53:50 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x80, 0x40) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0x4, 0x3, 0x3, 0x100000001, 'syz1\x00', 0x6}, 0x0, [0x0, 0x0, 0x69, 0x5, 0x1000, 0x2e, 0xce6, 0x9, 0x4, 0x7, 0x2, 0x100, 0x8, 0x1, 0x6, 0x3, 0x6, 0x6, 0x4, 0x6, 0x81, 0x1, 0x6, 0x7, 0x9, 0x100, 0x1, 0x5, 0x1, 0x352d2bc3, 0x1, 0x52, 0x4, 0x7ff, 0x4, 0x8001, 0x7, 0x7, 0x100, 0xffffffffffff5f7e, 0x9, 0xffffffff, 0x3, 0x3b59, 0x6, 0x0, 0xffffffffffff0000, 0x0, 0x2, 0xfffffffffffffff8, 0x5, 0x8, 0x1, 0x5b0, 0xfffffffffffffff7, 0x7, 0x7, 0xab7, 0x6, 0x5047, 0x9, 0x3b3a9df3, 0x7f2, 0x4, 0x3, 0x7ff, 0x5, 0x6, 0x2, 0x8, 0x8001, 0x6, 0x1, 0xffffffffec47e1f9, 0x8, 0xffffffff, 0xfff, 0x4, 0x1f, 0x3, 0x100, 0x6, 0x1ff, 0x401, 0x7, 0x5, 0x1000, 0x4, 0xdb4, 0xfffffffffffeffff, 0x9, 0x56, 0x81, 0x123, 0x2, 0xfffffffffffffffa, 0x7fff, 0x20, 0x0, 0x0, 0x7, 0x0, 0x1867, 0x8001, 0x1, 0x4, 0x4, 0x2, 0xbb9, 0x1d, 0x8, 0x3, 0x7ff, 0xfffffffffffffffa, 0x0, 0x1, 0x0, 0x8000, 0x9, 0x7fffffff, 0x1, 0x1, 0x2cc4, 0x1f, 0x101, 0x7fff, 0x2, 0x100], {r1, r2+30000000}}) mount(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, &(0x7f0000000400)) openat(r0, &(0x7f0000000080)='./file0\x00', 0x20000, 0x1) r3 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$RTC_PIE_ON(r3, 0x7005) 20:53:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x3, 0x1, &(0x7f0000000040)=""/240, &(0x7f0000000300)=""/70, &(0x7f0000000540)=""/4096, 0xf000}) r3 = dup2(r2, r0) sendfile(r2, r2, &(0x7f0000000140)=0x15, 0x10001) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000180)={0x8, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}) [ 156.695313] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.728716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 20:53:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 156.782379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 156.850195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 156.889859] binder: 10694:10697 got transaction with invalid offsets size, 1025 [ 156.920112] binder: 10694:10697 transaction failed 29201/-22, size 0-1025 line 3003 [ 156.941791] binder: undelivered TRANSACTION_ERROR: 29201 20:53:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(morus640-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0xa8040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={r3, @rand_addr=0x5, @broadcast=0xffffffff}, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) r5 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) bind$packet(r0, &(0x7f0000000400)={0x11, 0x7, r3, 0x1, 0x7f, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) write$binfmt_script(r5, &(0x7f0000000300)=ANY=[], 0xffffffaa) times(&(0x7f0000000000)) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/32, 0xf}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2, &(0x7f0000000340)=""/123, 0x7b}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) 20:53:50 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8c, 0x2b8901) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000280)={0x7b, 0x0, [0x5, 0x9, 0x13d, 0xffffffff89f8983e]}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setsig(0x4203, r1, 0x8, &(0x7f0000000180)={0x7, 0x0, 0x11, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xd) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x1100082) acct(&(0x7f0000000580)='./file0\x00') r3 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000300)=0x14, 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000200)='\'', 0x1}], 0x1, 0x1081806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000100), 0xffffffff) sendfile(r2, r2, &(0x7f0000000240), 0x2000008) ioctl$LOOP_CLR_FD(r2, 0x4c01) semget$private(0x0, 0x3, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000540)={0xf000, &(0x7f00000001c0), 0x0, r3, 0x3}) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000480)=""/188) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) flistxattr(0xffffffffffffffff, &(0x7f0000000380)=""/207, 0xcf) ioctl$TCFLSH(r3, 0x540b, 0x101) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000080)=0x10, 0x4) futex(&(0x7f000000cffc), 0x3, 0x8, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140), 0x0) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000080)=""/39) 20:53:50 executing program 6: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0xf4c, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x410100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000180)=0x8) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000001c0)={0x2, 0x8, 0x50fc0000, 0x0, 0x4}) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) 20:53:50 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x1, 0x7f, 0xc, 0x0, 0xffffffffffffffff, 0x3}, 0xfec0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') sendfile(r0, r1, &(0x7f00000000c0)=0xc000000, 0xdfd4) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)) 20:53:50 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/sequencer\x00', 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x0, 0x7f, 0x30a, &(0x7f0000000240)="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"}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x4) read(r0, &(0x7f00000000c0), 0xffffffffffffffbc) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000f3ff000000000000008600000000000000000000000094e78600000000000000000000000000000000"]) syslog(0x9, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000100)={0x3ff, 0x4, 0x52a4}) 20:53:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x14) sendmsg$xdp(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3, r2, 0x40}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="b8fe76ffd05a494c795e021781cc33777934358d184be95d9715f5c929a1d5a9c7da6f0230bba52cf3f82e408705b17656b208db1837f1d2fcf54e4800a43d665298c19f6f3699df5af17204308e29a3", 0x50}, {&(0x7f0000000400)="e0be3e41648f100c1709d0b178f13f419a48069dfef1026bc31e651917993c05c8bbfad42f818570d18d8b9d1805ac0374491010f06e4c0d273ec77845c1382371e5c87402ae0933c9672e154834c7dc849156becfef342f88992222b6f24061cfca815467dd8bea208fc76e0e7f9b17e4f0464ad77f431a2682d2c29a327e53c0155840c58228097bc87a762e288ca76fc8ae022a384f15c3c266907408190846e20850d13b7f3d2ceec767e716c8571f310a9a4fc078e1ba1ad10ad28456d3e28c8e15e51771c974b828726151c9e74ebf1916f0ca2cd51f3bea0d538eaf55f9720bcf86f08ed1e9230a414eb14a9bc0a5330e5710", 0xf6}, {&(0x7f0000000500)="7928e673eb0de7633f22578af906b5f49ad5278c8e1d52c85bf35b53e86643e8dc454da1f185bcd142a5e2b176bbae5740c5232ff565e52059ecc8044037b1a0d3aea521d068d1c216ca01450453198080df7097c147687c503339bc0707d44a7bb055902d24", 0x66}], 0x3, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x8}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000580)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000600)=0x14) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000840)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000240)={0xffffffffffffffff, 0x2, 0xffffffff, 0x0, 0x0, [], [], [], 0x1, 0x6}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) 20:53:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4082) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x319}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000700)="b1ce262bf1aa8918b4b0814b6e0ac7442ab1422f0860846940dc91425568495649e6336955e465c42a7233cf411644756cc88a054bf01f2ceea11e51aa2bf95c072718f462adf3a233fa2c30c318e5e5e536da3ced64c03c4bde950f4184a2d395828a931587353fc84b6d0e58c95562d91a82c2e519df49729393d02de61508b22b9cb11727c5f5bb6d1d6342d3b648d0bdcaec622341ba622170d1bd93dc35b6d712b7594203da8a7130aa0ce5b3cc3e104bcc869d9a49fbef02e9502cb1cc166ab92cb60d819509bc5e74f50133644cf72a1155261b072483dc9cd4afa09b6a6f8f6ae6f2c5fcced1896604696b0c", 0xf0}], 0x1}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) 20:53:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 157.223142] binder: 10718:10723 got transaction with invalid offsets size, 1025 20:53:50 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000014c0)={"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"}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0), 0x0) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="2be95d66e48a8e8ffcee124021a1eba3b76662adbdb3385d3d15f5601771ede03ed75d0ec01e134f91bbb2aee97b520a028a4c2a71d35052bae9592a5332fba2363ed9cf3f2b42", 0x47) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1002}], 0x34, &(0x7f0000001400)=""/123, 0x2000147b}, 0x0) 20:53:50 executing program 5: syz_emit_ethernet(0x0, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)={0x0, 0x1, [0x0, 0x0, 0x966]}) 20:53:50 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f00000000c0)={0xc4f, 0x7fffffff, 0xfffffffffffffffe, {0x77359400}, 0x7, 0x100}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1300, &(0x7f0000000000), 0xfffffffffffffe82) socket$inet_tcp(0x2, 0x1, 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 157.272124] binder: 10718:10723 transaction failed 29201/-22, size 0-1025 line 3003 [ 157.323171] binder: undelivered TRANSACTION_ERROR: 29201 20:53:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:50 executing program 5: r0 = memfd_create(&(0x7f0000000040)='em0\'wlan0\x00', 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x94, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x4000000, @ipv4={[], [0xff, 0xff]}, 0x3}, @in6={0xa, 0x4e20, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x6}, @in6={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, [], 0x21}, 0x100}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in={0x2, 0x4e23, @broadcast=0xffffffff}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000140)) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'md5sum+](securitysystem\\:'}, {0x20, 'em0\'wlan0\x00'}, {0x20, 'nodev'}, {0x20, 'em0\'wlan0\x00'}, {0x20}, {0x20}], 0xa, "99b8e5c3be0f89a712e823df7eb18fd03234413e6b508c6d77b2b74ed68be362"}, 0x63) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000200)={'veth1_to_bond\x00', {0x2, 0x4e23, @multicast2=0xe0000002}}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0xffffffffffffffff) openat$random(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x100, 0x0) 20:53:50 executing program 0: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xff8, 0x8000) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x5, 0x6, 0x3, 0x1, 0xd34, 0x4}}, 0xa) socket$bt_rfcomm(0x1f, 0x0, 0x3) 20:53:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") fstat(r0, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x3, &(0x7f0000ad2000)=ANY=[], &(0x7f0000000100)) 20:53:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f0000ff5000)={&(0x7f00002a0e50)={0x14, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x665, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e20, 0xe8c2, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x4e24}, @in={0x2, 0x4e23, @loopback=0x7f000001}], 0x58) [ 157.465152] binder: 10763:10764 got transaction with invalid offsets size, 1025 [ 157.478618] binder: 10763:10764 transaction failed 29201/-22, size 0-1025 line 3003 [ 157.554674] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.095945] print_req_error: I/O error, dev loop0, sector 2384 [ 158.102715] Buffer I/O error on dev loop0, logical block 298, lost async page write [ 158.110821] print_req_error: I/O error, dev loop0, sector 1472 [ 158.116849] Buffer I/O error on dev loop0, logical block 184, lost async page write [ 158.166797] print_req_error: I/O error, dev loop0, sector 0 [ 158.173411] print_req_error: I/O error, dev loop0, sector 1024 [ 158.180069] print_req_error: I/O error, dev loop0, sector 2048 [ 158.188128] print_req_error: I/O error, dev loop0, sector 3072 [ 158.194382] print_req_error: I/O error, dev loop0, sector 4096 20:53:51 executing program 7: r0 = socket(0x10, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x100}, @in={0x2, 0x4e21, @multicast1=0xe0000001}], 0x2c) write(r0, &(0x7f0000000380)="fc00000049000700ab092500090007000aab80ff010000000000369321000100ff0100000005d0000000000000039815fa2c1ec28656aaa79bb9080000000000bc0002000003601a272f2e117c22ebc205214000020000008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe50812f574493b49730946231e0f1d188082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873c", 0xfffffffffffffc7f) 20:53:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x2e8a00) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 20:53:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0xfffffffffffffe76, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/155, 0x9b}}], 0x1, 0x0, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffffc, 0x8035, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='eth1&\x00') prctl$intptr(0x2b, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)) 20:53:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:51 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffffffffffffffe0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x81, 0x0, 0xa95, 0x2}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0xac14140b}}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000040c0), &(0x7f0000004100)=0x8) 20:53:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40881, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x7f, "51319788e7be2d19b5461cfafe0c986e9c192beb4a5963a44be3267608db4e00de889272c9acd92b2589db23f91b1af8ba0a4cd175cfb08fb4b98315bfd15f41e9ce8f7cdb91250f620da0b7f21eed316f6219d042f32cc3e01109fa400a102e8c9f970e5c17cdd8fba6c59fbabf05fd55987531354fdd4e035c56d07113e7"}, &(0x7f0000000140)=0x87) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x298}, 0x1}, 0x40084) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x3a}, &(0x7f00000001c0)=0x8) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000540)=0x9) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0xfffffffffffffffc, 0x80000) 20:53:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) 20:53:51 executing program 1: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="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", 0xcc4}], 0x2}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') bind$alg(r0, &(0x7f0000001040)={0x26, 'hash\x00', 0x0, 0x0, 'speck64\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="2cf317f1918bc8ff65bfd725467d763456fa9fae3a59b8c22b1269e93575584b30a310f0f4fe40065a25863a83c2be39154a7f999654961f1ccd55694520c55dbf7a8e546445aade0d68c258c473ad2f33ee5aadd8d783944ff876898857500ab569bf44c7e653e48e743daf4ce9f093300c0b6121e60928218c21d8ce8fd259ce000829054e9c74ebee7c52c36c9d111bc524982230286ac4829fdba9b88f0fc550125225a13b17f01205842ea4d25dac28ea68"]) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={'\x00', {0x2, 0x4e20}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 158.297311] binder: 10805:10806 got transaction with invalid offsets size, 1025 [ 158.334943] binder: 10805:10806 transaction failed 29201/-22, size 0-1025 line 3003 20:53:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) fcntl$addseals(r1, 0x409, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000040)) socketpair(0x3, 0x807, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0x50, &(0x7f00000000c0)}, 0x10) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r4 = accept4(r1, 0x0, &(0x7f0000000140), 0x0) recvfrom(r4, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) 20:53:51 executing program 4: r0 = socket(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00003ef000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg(r0, &(0x7f0000eeefc8)={&(0x7f0000fef000)=@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000437000), 0x0, &(0x7f000056cda0)=[{0x28, 0x29, 0x2, "1d1a2d4ba2f2fffffffffffffffd060000"}], 0x28}, 0x0) [ 158.347305] mmap: syz-executor0 (10820) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 158.364471] binder: undelivered TRANSACTION_ERROR: 29201 20:53:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='vmnet0\x00'}, 0x10) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000240)=@req={0x28, &(0x7f0000000200)={'veth0\x00', @ifru_addrs=@xdp={0x2c, 0x1, 0x0, 0x20}}}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) recvfrom$packet(r2, &(0x7f0000000140)=""/40, 0x28, 0x100, &(0x7f0000000280)={0x11, 0xa, r3, 0x1, 0x5, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @loopback=0x7f000001}, {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x187}) flock(r2, 0x3) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) 20:53:51 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8001, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xc6, 0x6, 0x1, "b6385057375484aa67d489851d2255db8b98b909e6eec00448ecf8467589d79beed44fb855569e438b7a0dc37b550ebb41ba07ae8984b993347d1192355dfd8104fd362c1a05d806de08ae51f664c3a6300421090518b4d78e9abc2593ba0a19ee8a85258738fd51b43063ccf4f08a9a31e7c582cf9a4b9dc179321c4f502777159610a9842fd83d1e1b570327c76ac35ba05880219956430f6e5ffecfc1790928879e60ccce1fe8bf7949e0253aac1a9eb62fac2d47aab832838c2af6e1ff79669cd16af63a"}) r2 = accept$alg(r0, 0x0, 0x0) r3 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x73e0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r4, 0x2}}, 0x18) sendfile(r2, r3, &(0x7f00007ed000)=0x2, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b3339ed4ff78dc50c8401f75dbdb5e927d9d1e6a9b7580bfcb5f6cfbe4d8c89ea79838fb", 0x24) 20:53:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:51 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x101005, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="fc46d4eca9a194d905253601000000cb7400ad"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48b, 0x0, 0x40000108]}) [ 158.529424] binder: 10836:10837 got transaction with invalid offsets size, 1025 [ 158.566873] binder: 10836:10837 transaction failed 29201/-22, size 0-1025 line 3003 20:53:51 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x40) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x9e8, [0x20000580, 0x0, 0x0, 0x200005b0, 0x200005e0], 0x0, &(0x7f0000000040), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, "2c6f7365000b0000000054f139580800", 'veth0\x00', 'syzkaller0\x00', 'ifb0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @empty, [], 0x928, 0x928, 0x958, [@devgroup={'devgroup\x00', 0x18}, @among={'among\x00', 0x850, {{0x400, 0x0, 0x0, {[], 0x3, [{[], @local={0xac, 0x14, 0x14, 0xaa}}, {}, {[], @multicast1=0xe0000001}]}, {[], 0x1, [{[], @local={0xac, 0x14, 0x14, 0xaa}}]}}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}]}, 0xa60) [ 158.571706] IPVS: ftp: loaded support on port[0] = 21 20:53:51 executing program 7: r0 = timerfd_create(0x0, 0x0) poll(&(0x7f00000001c0)=[{r0}], 0x1, 0xfffffffffffffffe) 20:53:51 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x110, 0x4) r1 = dup(r0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@mcast2}}, {{@in6=@mcast2}}}, &(0x7f0000000000)=0xe8) sendto$inet6(r0, &(0x7f00000000c0), 0x246, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000002, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000340), 0x243}, 0xfffffffffffffffd}, {{&(0x7f0000000380)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/217, 0xff7d}}], 0x2, 0x12000, &(0x7f00000009c0)={0x77359400}) [ 158.612202] binder: undelivered TRANSACTION_ERROR: 29201 20:53:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 158.775162] binder: 10860:10861 got transaction with invalid offsets size, 1025 [ 158.796386] binder: 10860:10861 transaction failed 29201/-22, size 0-1025 line 3003 [ 158.811153] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.825308] device lo entered promiscuous mode [ 158.853394] device lo entered promiscuous mode [ 158.863310] IPVS: ftp: loaded support on port[0] = 21 20:53:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xe, 0x3, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080)="304a51c80d47d8", &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000fcb000)={r0, &(0x7f0000000180), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f000051e000)={r0, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x18003, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x70d74ab0}, &(0x7f00000000c0)=0x8) accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host=0x2}, 0x10, 0x80000) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x34) 20:53:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/242, 0xf2}], 0x1, &(0x7f0000000380)=""/223, 0xdf, 0x1}, 0x40002000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20040}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x12c, r2, 0x800, 0x70bd25, 0x25dfdbff, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x22}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x5}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x435}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000680)="fef506f7389c85644b16dd8288d9c001ba975aebe154d5b6b45245c525a4abd1f7132c541ff61e552caa9086a82460668f8bbf5a87cf046afd95d3cfdedeae825dfa22f778ae9e696650f6e347e7f038ca45c6af667e73358cea210d93e406989cb7", 0x62) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="41c062a8c259f396e4cd923f9b4a825c728bb9969f9fc3a40b5e62107ca1d77364b70b1ca25b0407528855733f44b07f7c39b106e7224ab85f2cd3726188dd69b3dc98c8cad4a64c18eefb7124bad63c2dffe8d352e2882201926285019b245e448c84b06e993a7f3e493a8f759d4b1813ec544c62ce826d658f8523f62ac435a84bab92609ece6ae65f99f9b4cf4598c9d6bf2a4674b0c5c2f500749307d261d4f5451c91fe5ca854", 0xa9) 20:53:52 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c2134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa684020000", 0x0, &(0x7f0000000200)) syz_fuse_mount(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x120000) 20:53:52 executing program 6: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80040, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents(r1, &(0x7f0000000380)=""/181, 0xffffffff00000018) 20:53:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:52 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x80) r2 = memfd_create(&(0x7f0000000080)="6e6f01fcffff692a2936f0d00c94808bcfbce5de2d57e70200818c6ab7847c51a44bb3aaaefbb8ae99506ae53aa88a80fec3073ecbcc3e72", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r4, 0x20}, 0x8) 20:53:52 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200402, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000240)) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x2, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x151) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xfffffffffffffffa, 0x2) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000001, 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f00000001c0)) [ 159.389245] binder: 10875:10877 got transaction with invalid offsets size, 1025 [ 159.416239] binder: 10875:10877 transaction failed 29201/-22, size 0-1025 line 3003 20:53:52 executing program 1: mkdir(&(0x7f00000018c0)='./file0\x00', 0x0) mount(&(0x7f00000007c0)='./file0/file1\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000000880)='./file0/file1\x00', 0x0) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)='.', &(0x7f0000000580)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9c0200451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab256493802001d7b205a07b90832736c00f97db2718ef89997", 0x18080d, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mount(&(0x7f0000000780)='./file0/file0\x00', &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000200)) mount(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000740)='sysfs\x00', 0x0, &(0x7f0000000740)) mount(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='.', &(0x7f0000753000)='ext4\x00', 0x3002480, &(0x7f0000000700)) 20:53:52 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x103000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r0}) r2 = dup(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x131) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e24, @rand_addr=0x8001}}) connect$inet(r2, &(0x7f0000d9dff0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}, 0x13f493aa}], 0x400000000000284, 0x20004bc0) 20:53:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x4, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, "00597a5e8e6b6e000900"}) [ 159.480554] binder: undelivered TRANSACTION_ERROR: 29201 20:53:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r1, 0x29dbadd0a342f6fe, 0x3}, 0x14) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000200)=0x3) 20:53:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300f5cbc65ed59bad0000"], 0x14}, 0x1}, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000080)={0x9, 0x7, 0x2}) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x5, 0x0, 0x0, {0x1}, [@generic="7b6c6e660f"]}, 0x1c}, 0x1}, 0x0) 20:53:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x829f9b27c9d21873) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ea5400c2", 0x10) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$alg(r0, 0x0, 0x0) r4 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x400000, 0x3) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @remote}, &(0x7f0000000080)=0xc) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f0000000740)={0x1d, r5}, 0x10, &(0x7f0000000700)={&(0x7f00000005c0)=@can={{0x0, 0x8, 0x10001, 0x5}, 0x0, 0x0, 0x0, 0x0, "284a374a3bb280a2"}, 0x10}, 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003340)=[{{&(0x7f00000000c0)=@sco, 0x48, &(0x7f0000000200), 0x4, &(0x7f0000000540)=""/94, 0x5e}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x20, &(0x7f0000003200), 0x19, &(0x7f0000000440)=""/239, 0xef}}], 0x2, 0x0, 0x0) getsockopt$netlink(r4, 0x10e, 0xb, &(0x7f0000000280)=""/82, &(0x7f00000001c0)=0x52) 20:53:53 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clone(0x200, &(0x7f0000b6b000), &(0x7f00000000c0), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000578fe8), &(0x7f0000775000)) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') read$eventfd(r0, &(0x7f0000000140), 0x8) clone(0x0, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000280), &(0x7f00000001c0)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x20000000000099a4) 20:53:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x3, &(0x7f0000000040)=@raw=[@alu={0x4, 0x1, 0xd, 0x0, 0x7, 0xffffffffffffffff}, @exit={0x95}, @exit={0x95}, @jmp={0x5, 0x7, 0xf, 0x1, 0x6, 0xffffffffffffffff}, @alu={0x4, 0x10000, 0x2, 0xd, 0x7, 0xfffffffffffffffc, 0xfffffffffffffff0}, @exit={0x95}, @generic={0x6, 0x1, 0x2, 0x40}, @call={0x85, 0x0, 0x0, 0xc}, @ldst={0x0, 0x0, 0x3, 0x7, 0x6, 0xfffffffffffffff4, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x46}], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x1}, 0x2d4) 20:53:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2}, 0x1c) listen(r1, 0x7f) listen(r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) sendto$inet6(r0, &(0x7f00002a0b14)="f6", 0x1, 0x200408d4, &(0x7f000072e000)={0xa, 0x2, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 159.886182] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 20:53:53 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x101, 0x400000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0x4020940d, 0x0) socketpair(0xa, 0x1, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 20:53:53 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_mcast\x00') ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000001c0)={0x3, &(0x7f0000000140)=[{}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}]}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x3, 0x87) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, [], 0xf}, 0xf3d}, {0xa, 0x4e24, 0xffff, @loopback={0x0, 0x1}, 0x5}, r4, 0x5ca}}, 0x48) connect$inet6(r2, &(0x7f00000000c0)={0xa}, 0x1c) 20:53:53 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x40, 0x40000) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x4c4, 0x5]) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7fffffff, 0x10200) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)={0x2, 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0x0, 0x14000}) getpeername(r1, &(0x7f0000000140)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', r2}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000240), 0x4) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x20000, 0x0) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f00000002c0)=0x1, 0x4) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000300)) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x0, 0x4) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000340)=0x400) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x100000001, 0x3, 0x3, 0x7, 0x8}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000480)={r5, 0x83, "61091674bed12b799024d0195053e35d0d39c51ca6660ef527b0ddae1ed6445f588f371abfe9374287c26f0f5d34bd84b197714c99de8c5562f3487d4f7c6fc613ad443291b6e568e5ba9c5a0df221f20ee2690bb2da9e1dd2187710fc0acdf381578d238cb0bdbdee9c9b02df0fc7da8fc3285e5646b3327b1bcdafdbad1c598d2508"}, &(0x7f0000000540)=0x8b) r7 = open(&(0x7f0000000640)='./file0\x00', 0x20000, 0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000680)={r5, 0xa8, "f6d8cd8d68cea83c68b7cf2c46cbe4b49ab70c0345cf188c739246feaab2cbd8edfdae781120fabac024abcbe5b2017d08631cbce804923b928bb018222c4933eeacf540eb92377f9d5e51dc237b2990359326345b878a14c3f78356e7a646d1bbe23dd195feb610a611168dca6389f011227d762f9ae43e1cbc55c060e7fd8d57b092e747ed169d2a1992e1be857ff4cfec4af2ee1325bdd288ace5ac586809ed1cbce48f35bbe6"}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000780)={r8, 0x7, 0xfffffffffffffff8}, &(0x7f00000007c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000800)={r6, 0x101, 0x30}, 0xc) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000840)={@mcast1={0xff, 0x1, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x0, 0xffffffffffffffff, 0x1, 0x400, 0xb8, 0x100006, r3}) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000008c0)={{0x32, @multicast2=0xe0000002, 0x4e24, 0x4, 'sh\x00', 0x8, 0x80000000000000, 0x13}, {@empty, 0x4e24, 0x2, 0x7, 0x0, 0x101}}, 0x44) setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000940)=@int=0x1, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000980)={0x80, 0x5, 0xffffffff, 0x7, 0x8, 0x7, 0x1, 0x3ff, 0x9, 0x950e, 0x826}, 0xb) kexec_load(0xffff, 0x9, &(0x7f0000001f80)=[{&(0x7f00000009c0)="83ee7ebec3dbca1203917bb5baae4c0b5d5e7d1aaaf4f7119bebf9913da3fabb1460525624bd3baaa1c8d1cc06551dc76fbb6355d001e9fee7a8aec08eda64a19395a0c2cbdf518d668255469b2abbccd671a994fdd9e1d560375f38cd2659a10f9b4ce13a2ec33edac244a3d31f0fb3d033673c4e7dc50be0581084c1cd285490b126675bd6cc619812191846216dacc9bca88984a204c92854d2d5e55d2db107edb8512ba5b810bd131b8e13ec63563aebe5a8e6ed6b241a2bd00c036c061544e0773f66cc8980", 0xc8, 0x1, 0x1e}, {&(0x7f0000000ac0)="655fee35b49ac5cd3af5686cf73d499bb80328e89d03b29fc5d35f0ec017f373b90f173284d16a660caa89a82dbc5bbc867e8d18dfc16f9856aa55834cd9d524059496ac50d526796bcb555e21ea29e1a39b06198f111a93767cc0b610d5c0", 0x5f, 0xb2e1, 0x1}, {&(0x7f0000000b40)="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", 0x1000, 0x31, 0x4}, {&(0x7f0000001b40)="93006276a144f67d64b9ea2f75eeae309a1bf2b383eedd21184a4cf5dea6b4f2f2a345bb732d6d70a523bac7457ebc9a1f20e3a9d5c104425342af496975f036b6a8db7140777e85666131cd4595398017b0fb1ba43208e6102deab48a30789f63dae92c88136ff4fc3dac46ba2e7de02c829dd81bccdd41394142402bd4f39edc1c3b71711def0dbbefed2a957b6861eef9280b7531913ed0022ba68e4e84a3a684291bec0ad785d14e0886860f6594561b52dd413b94cc43ae8a45a81969e304f6a8ab08a86c760210416d837b3f", 0xcf, 0x210, 0x40}, {&(0x7f0000001c40)="e842b69760919a9176e80844b288d66396735772031a09a68d7711c44d10ed64d2da067582597b23ca3bdd1e41e73a2243c03f40ad23644f6a5c2250d536879055282285e9b0357fccdaf08071f202c24c53c16ef340900dbd2147784148b3aa13ddd128affbc977947d44561604a4dee821a633751eb5d42b10d9b1dfad2b184a58193315a5e3feb62a8086784bf28d334a2eebfb56a772e497c1dc0831acbb48856503a04fe1941fa546e72b992968753e2d67d3abf3320ee6cb83f473b71f74b3c1bbd8132309b04f2b31e97bc552e3f43d", 0xd3, 0x3, 0x1f}, {&(0x7f0000001d40)="eae554146d5df6fd820e9bf6d4838521adaf682850980a4b39738406b41a111f7988afb31526c0475f57d9bedc97601086a18e2aee0fe9fd023a7835bb1d6018d080ccb93f3fb17abc471b045ca170684e249e18dc8334533cc68b738dae70e54daf64760d644f77c29ac393b53da4af3a5766b525110df567feffc6b200f45ad47d8bb14911c3b89aab45c0c16277c47dac031cab64e50f65f6f861fe051e91bcae7b2109aa1662ac518fc9c4e1559cda49e5730ce69993c020cf74cd7b57f1a67f25ed74a76e8314e28abb7ca34eaf685568a548ad7511e6d773e7f531950e199f2be708d8132272b77548fd503908f19f8b", 0xf3, 0x20, 0x1f}, {&(0x7f0000001e40)="f246cf26a9a997ac3261359ce495a971ca12d7b24679c3dac448dc3815ae59144b8c8564c109283b472f74f4dfaf8c88db77a9dc209bf2d99d27dce98225", 0x3e, 0x2}, {&(0x7f0000001e80)="c73e42a3707e65d7e70b1d", 0xb, 0x3, 0x8}, {&(0x7f0000001ec0)="d1312995c0888bddc0b3c99bb4fa31ec259960530147266653caac1ad595f678977c0dfd16b6ab9e6b4f0743793ad757f047d5feb4641a694611bd090ed24fdb9758b2799f04e008d9a1d416a3e63f40d57ceebcce2c0e66cd0874e09ffa68e5f1036c6b5dbc1c18609a104fe6c07e193efa4193e1b4377c41352902fcc557f8c2452790544476eda5", 0x89, 0x9, 0x4800000000000}], 0x140000) write$P9_RWSTAT(r7, &(0x7f00000020c0)={0x7, 0x7f, 0x1}, 0x7) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000002100)=0x1e7aa234, 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000002140)={'icmp\x00'}, &(0x7f0000002180)=0x1e) getsockname$inet6(r7, &(0x7f00000021c0), &(0x7f0000002200)=0x1c) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000002240)={0x0, @loopback, @loopback}, &(0x7f0000002280)=0xc) 20:53:53 executing program 7: socket$nl_route(0x10, 0x3, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c07}) socket$inet6(0xa, 0x3, 0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3f, 0x2) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/162, 0xa2, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000280), 0x0, 0x0, &(0x7f0000000140)) ioctl$TIOCNOTTY(r1, 0x5422) 20:53:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x16, r0, 0x0) iopl(0xdb7) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000580)=[@release={0x40046306, 0x1}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0)}}}], 0x0, 0x0, &(0x7f0000000480)}) [ 160.032789] binder: 10913:10915 got transaction with invalid offsets size, 1025 [ 160.066153] binder: 10913:10915 transaction failed 29201/-22, size 0-1025 line 3003 20:53:53 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cipher_null)\x00'}, 0x58) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000017c0)="01e6", 0x2}], 0x1, &(0x7f0000000100)}], 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000180)=""/184) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x139f}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xfffffffffffffce7}, 0x0) [ 160.122180] binder: undelivered TRANSACTION_ERROR: 29201 20:53:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x141000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @rand_addr=0x40000000}}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'lo\x00', {0x2}}) 20:53:53 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_delroute={0x1c, 0x19, 0x301, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1}, 0x0) [ 160.258696] binder_alloc: 10954: binder_alloc_buf, no vma [ 160.264412] binder: 10954:10962 transaction failed 29189/-3, size 24-8 line 2967 20:53:53 executing program 2: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x3c1, 0x2, 0x2b0, [0x20000660], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]}, 0x3ba) [ 160.330618] binder: 10954:10962 Release 1 refcount change on invalid ref 1 ret -22 [ 160.347304] binder: 10954:10962 got transaction to context manager from process owning it [ 160.355885] binder: 10954:10962 transaction failed 29201/-22, size 0-0 line 2843 20:53:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x4000000001c, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}, r2}, 0x14) [ 160.402787] kernel msg: ebtables bug: please report to author: Wrong len argument [ 160.478091] binder: BINDER_SET_CONTEXT_MGR already set 20:53:53 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x100000001, 0x12) [ 160.499256] binder: 10954:10962 ioctl 40046207 0 returned -16 [ 160.540361] binder: 10954:10985 Release 1 refcount change on invalid ref 1 ret -22 [ 160.540376] binder_alloc: 10954: binder_alloc_buf, no vma [ 160.548359] binder: 10954:10962 transaction failed 29189/-3, size 24-8 line 2967 [ 160.595762] binder: BINDER_SET_CONTEXT_MGR already set [ 160.618408] binder_alloc: 10954: binder_alloc_buf, no vma [ 160.624172] binder: 10954:10985 transaction failed 29189/-3, size 0-0 line 2967 [ 160.632255] binder: 10967:10969 ioctl 40046207 0 returned -16 20:53:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) flistxattr(r0, &(0x7f00000003c0)=""/235, 0xeb) ioctl(r0, 0x108912, &(0x7f0000000100)="028f7620700000000000003a53dce49dc419cf1c8b9222725b4e0a73893a39dd4c55087d46569c38bdc5a513f57a9ccbcb3ec24c537f82047695d9390066fd06ff71e28c7df9a65a9b79c3ed130de55668ff619de057b6fb3a82cc6b3127f3ac6a1003a26f886d8c9f580aff346f9464a5df3e3a11856bd9598c6fdc6ff26dbc02138e3663a77267aa2c8abec5f4c74487b874fc6ed843c5bebe3b37f3100d80b9ad5d6553a286ec7e299614b46923e409730bd8e63ba66139fb0509f58935e4abc3050449d20dafa40d32bd53ed613c2ca5bbf5070bcf29ca311888b117cf9801c95cf700f026") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x4100, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {}, {}]}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2880, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000240)=0x1, 0x68e5, 0x2) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000200)) write$P9_RLINK(r3, &(0x7f0000000280)={0x7, 0x47, 0x1}, 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) write$P9_RXATTRCREATE(r3, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) poll(&(0x7f00000000c0)=[{r1}, {r0}], 0x2, 0x6) [ 160.665178] binder_alloc: 10954: binder_alloc_buf, no vma [ 160.670936] binder: 10967:10969 transaction failed 29189/-3, size 0-1025 line 2967 [ 160.688277] binder: undelivered TRANSACTION_ERROR: 29189 [ 160.694665] binder: undelivered TRANSACTION_ERROR: 29189 [ 160.717382] binder: undelivered TRANSACTION_ERROR: 29189 [ 160.750060] binder: undelivered TRANSACTION_ERROR: 29189 [ 160.776220] binder: undelivered TRANSACTION_ERROR: 29201 20:53:54 executing program 1: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x20b00, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="0a000000ad32000400000000000077d7067f7264c9478944a7013ebef176c28e224bd51d0db83738dba4f53cea3fd15f0e87e3a4d3da2dea6d3de3f65171fd1b2d39c0723b475096b9bee666db70ce11e70aaaa7b794a2cea5e9c5aa9883350f5d207f2f2a68ae41389048b6c06a920ca3194fafd8efd0aa37e1fd9ef7cef68d4a1e7beb3a1d8efbba099514a7ade87cd4d4dc78d52ed4801ddf5253e6f14e9f3e7b33336605ac821c8c8f9fff675e23da3a32c952cc030000006db61411e71c"], &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0xffffffff7fffffff}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001000)=@newtaction={0x14fc, 0x30, 0x0, 0x70bd2d, 0x25dfdbff, {0x0, 0x7fffffff, 0x4}, [{0xcc, 0x1, @m_ipt={0xc8, 0x14, {{0x8, 0x1, 'ipt\x00'}, {0x20, 0x2, [@TCA_IPT_INDEX={0x8, 0x3, 0x4000}, @TCA_IPT_TABLE={0x14, 0x1, 'mangle\x00'}]}, {0x98, 0x6, "163b93bb8989ae27b518155e6ed2e65b29c18e52f26225498718a032f7532ed05a9e5bb6a3b275139a5b69e36ac503a2360981dde50e806c53fea015e5ae84a643cfd12efde5441a7d9d910f8b28939939c6fc0eeca38ea2365de597e39b4a4351943e650fb7abed98a5c6c0c336d6437f9c78e425c66e5876ab65b59ee96c6696495b3229af16d9348fa528fa6d997fb50229"}}}}, {0x10bc, 0x1, @m_gact={0x10b8, 0xd, {{0xc, 0x1, 'gact\x00'}, {0xa0, 0x2, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0xffff, 0x20000000, 0x8, 0x68cebb06}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3f, 0x7fff, 0x0, 0x8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8001, 0x7, 0x20000007, 0x8, 0x401}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xd44, 0x10000005}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x1536, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x61b, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1000, 0x9, 0x1, 0x5, 0x8000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x4, 0xf, 0xffffffffffffff00, 0x7}}]}, {0x1004, 0x6, "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"}}}}, {0x8c, 0x1, @m_skbmod={0x88, 0xe, {{0xc, 0x1, 'skbmod\x00'}, {0x18, 0x2, [@TCA_SKBMOD_ETYPE={0x8, 0x5, 0x5}, @TCA_SKBMOD_SMAC={0xc, 0x4}]}, {0x5c, 0x6, "c8b8582266b43a3f10555787ec1b2ef62275e7fed35c51a091fd2f73c50c6e83e6228568c8c5970884940c28c0c6dc6a6956b69b60073b3aa323c4b35679966609cd7c7405fabe66d6a1d707cfd9b38ba211edabf12d89"}}}}, {0x15c, 0x1, @m_vlan={0x158, 0x1a, {{0xc, 0x1, 'vlan\x00'}, {0x44, 0x2, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x3, 0x1, 0x2}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffffffff84d, 0x1, 0x6, 0x20, 0x400}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x8, 0x4, 0x88a8}]}, {0x100, 0x6, "52190de69b0a83e99c5197249d5530d71c519bba96f990032150b971abd1df2222e55fd7379d4be2d3aee6a3d3e7ac04e32e37d203802ea9289d614a4978a5a09ee37a885669da627f68cdb197de09bc06e89716327ea6c681a314fd0f2680b62ac84979e83391b324425aae186302e3f942cff4698ed837c769ee34c37334b5eb71fe22c06e2c1b895511387b965b148b0a961b067d39bf3ce6f447464270c9fd60fb20d31bc0ffb3a5ed8f5ac53a864a84586049946528d9ecc72c1f0542fdec651367ca5dbe468faa0b79c152265b701e762e204e4bed0d1254d418c0cd1b619eea9668bf3582de4fb7cdc43989e463b398285f684cb54078"}}}}, {0x12c, 0x1, @m_skbmod={0x128, 0x11, {{0xc, 0x1, 'skbmod\x00'}, {0x34, 0x2, [@TCA_SKBMOD_SMAC={0xc, 0x4}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa6e6, 0x4c0, 0x10000002, 0x1, 0x2c}, 0x1}}]}, {0xe0, 0x6, "60ab370422ca0bb8f1de8cb7edd6c21584341b69e2c4e4e10feb9aff8573bd0b77dedb15df6d1d2c8b1f4af523975a53d03bc0492c0aba7f1459a7ce789f26c2407e6c6c9f9f6934d9911b61e570bf5439dac33eef8ba11c2cf46f56edee62ff549d06c44909a4ac80256b0c7b528e3326ef68d9e7e8ae93faf097325386923d303c12275429b379f682753af3b642e7e2b156b440a6ce484768c179797ec55c93cb4e6b6f4b35ec332683de972fa085e913ed38db87cde5bbaf532947b57798cb1747b1c7a8b813dcc53041442658a4cb086298ee56aa160b"}}}}, {0x4c, 0x1, @m_sample={0x48, 0xf, {{0xc, 0x1, 'sample\x00'}, {0x24, 0x2, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffffffffff1e}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7f}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xffffffff}]}, {0x10, 0x6, "3d4aec19e9436546ca"}}}}]}, 0x14fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e793d3bee015944fb490f073e2033ed771ee7", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x10b882, 0x100) 20:53:54 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') pwrite64(r0, &(0x7f0000000240)="0f6f9699650d741927e1552199734e60ec65e20241f0b38542ce3c55dbf39ed7fd75f25d3c7c1be002eb3bbf78a3965aa8a19efca9f80a21471f597929dcc8556d6bb99c6dbd17f21b82fe156b9ce7de3a91255ae9b9d876941530aae001918907b50ef4ab5d0c96aae971321d3d4f09", 0x70, 0x0) exit(0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x1) io_setup(0x200, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0xffffffffffff0000, 0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}], &(0x7f0000000080), &(0x7f0000000200)={&(0x7f00000001c0)={0x6}, 0x8}) 20:53:54 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2000000000, 0x400) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r2, 0x1, 0x1}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={'dummy0\x00', {0x2, 0x0, @rand_addr}}) 20:53:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:54 executing program 6: r0 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000187000/0x600000)=nil, 0x600000, 0x400000000, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 160.930232] 9pnet: Insufficient options for proto=fd 20:53:54 executing program 0: r0 = open(&(0x7f0000000100)='./file1\x00', 0x8040, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 160.982711] binder_alloc: 11001: binder_alloc_buf, no vma [ 160.988421] binder: 11001:11003 transaction failed 29189/-3, size 0-1025 line 2967 [ 161.017795] binder: undelivered TRANSACTION_ERROR: 29189 20:53:54 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x9, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e24, @multicast2=0xe0000002}, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x80, 0x8, 0x5, 0x0, 0x10000, &(0x7f0000000240)='bridge_slave_0\x00', 0xfffffffffffffff8, 0x9, 0x1}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000200)={0x7f}, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000001c0)=0x1b559929) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000040)={0x3, {{0xa, 0x4e21, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x100}}, {{0xa, 0x4e21, 0x4, @empty, 0x8}}}, 0x108) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x179) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 20:53:54 executing program 6: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000100)={'trans=unix,', {[{@msize={'msize', 0x3d, 0xffffffffffffff80}, 0x2c}, {@fscache='fscache', 0x2c}, {@nodevmap='nodevmap', 0x2c}]}}) chroot(&(0x7f00000001c0)='./file0\x00') umount2(&(0x7f0000000200)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 20:53:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x2000000001}, 0x3d7) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r0, &(0x7f00005f1fe3)="c6", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000112000)={0x0, 0x0, 0x4}, 0x8) 20:53:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) socketpair$inet(0x2, 0x6, 0x101, &(0x7f00000001c0)={0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000180)="573e6ba329263d5e7285bac6", 0x1c, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) fadvise64(r0, 0x0, 0x24ffa55a, 0x5) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000000c0)) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x5, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000400)={0x6, 0x0, [{0x80000007, 0x0, 0x7fff, 0x65, 0x2}, {0x80000019, 0x1000, 0x5, 0x9, 0x5}, {0xc0000000, 0x100000000, 0xfffffffffffffe00, 0x1, 0x81}, {0x4000000b, 0x1, 0x7fff, 0x0, 0x1ff}, {0x80000007, 0x40, 0x1ff, 0x8001, 0xab6}, {0x40000000, 0x3, 0x100, 0x2, 0x2}]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000000)=0x2c2) 20:53:54 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000e8000)='/dev/cuse\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x100}, {r1}], 0x2, &(0x7f0000000000)={0x77359400}, &(0x7f0000000100), 0x8) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) [ 161.242616] 9pnet: p9_fd_create_unix (11032): problem connecting socket: ./file0: -111 [ 161.255459] binder_alloc: 11033: binder_alloc_buf, no vma [ 161.261199] binder: 11033:11035 transaction failed 29189/-3, size 0-1025 line 2967 20:53:54 executing program 5: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) signalfd(r0, &(0x7f0000000040)={0x200}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x2) [ 161.302251] 9pnet: p9_fd_create_unix (11032): problem connecting socket: ./file0: -111 [ 161.317742] binder: undelivered TRANSACTION_ERROR: 29189 20:53:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000000)="13ec7790eb1c9cf052061de58eb187fa906a36601b31c3b81fac", 0x1a) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x20) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$can_raw(r3, &(0x7f0000477000)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xff89}, 0x1}, 0x0) readv(r3, &(0x7f0000001700)=[{&(0x7f0000000540)=""/4096, 0x1003}], 0x1) 20:53:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x8e, 0x0) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r1, 0xffefffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x200, 0x145000) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000180)=0x1e) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @rand_addr}}}}, &(0x7f0000000140)=0xb0) [ 161.451414] binder_alloc: 11053: binder_alloc_buf, no vma [ 161.457174] binder: 11053:11054 transaction failed 29189/-3, size 0-1025 line 2967 [ 161.493861] binder: undelivered TRANSACTION_ERROR: 29189 20:53:55 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='fd\x00') fchdir(r1) exit(0x1) syz_fuseblk_mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 161.732581] 9pnet: Insufficient options for proto=fd 20:53:55 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x101}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r1, 0x5}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r1, 0x7}, 0x8) set_mempolicy(0x8000, &(0x7f0000000240)=0x100000001, 0xa6) clone(0xa29e0dcdcdf67d6b, &(0x7f0000000300), &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000180)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40003, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000100)={0x14, 0xfffffffffffffec6, 0xfa00, {r3, 0x10, 0x0, @ib={0x1b, 0x7f, 0x9, {"9acb88539c24fbbb999e929948161b9a"}, 0x9, 0x401, 0x1000}}}, 0x90) 20:53:55 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x4, 0x8, 0x776}) getsockopt$inet6_dccp_buf(r0, 0x21, 0xcf, &(0x7f00000001c0)=""/4096, &(0x7f0000000080)=0x1000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) unshare(0x2000000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f0000000100), 0x8, 0x0) 20:53:55 executing program 5: mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)={0xaa, 0x4}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f0000000040)='children\x00') r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x3, 0x4, 0x0, 0x7}) r5 = dup(r4) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) socket$inet6(0xa, 0x5, 0x2) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) dup3(r1, r0, 0x0) 20:53:55 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) get_mempolicy(&(0x7f0000000080), &(0x7f0000000200), 0x1, &(0x7f0000ffb000/0x4000)=nil, 0x1) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), 0xffffffff, 0x1}}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100), &(0x7f00000004c0)=0x30) 20:53:55 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x6e, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x200000000000) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9201, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/168, 0xa8) ioctl$KVM_RUN(r1, 0xae80, 0x0) 20:53:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:55 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x9, 0x4, 0x7, 0xffffffff80000000, 0x0, 0x2, 0x8, 0x0, 0x1, 0xa6, 0x7ff, 0x2fb, 0x9, 0x0, 0x800, 0x20, 0x3, 0x1ff, 0x0, 0x1, 0x8001, 0x6, 0x3, 0x8001, 0x9, 0x40, 0x7, 0xfffffffffffffbff, 0x0, 0x10001, 0x2, 0x4, 0x2, 0x6, 0xfffffffffffff001, 0x5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x200, 0x1f, 0xe8af, 0x0, 0x4, 0x8d, 0x4e}) getrusage(0x1, &(0x7f0000000240)) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') sendfile(r1, r3, &(0x7f0000000200), 0x7) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f00000001c0)) [ 162.025587] binder_alloc: 11080: binder_alloc_buf, no vma [ 162.031495] binder: 11080:11081 transaction failed 29189/-3, size 0-1025 line 2967 [ 162.106684] binder: undelivered TRANSACTION_ERROR: 29189 20:53:55 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000a7aff6)='./control\x00', 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x81000100) read(r1, &(0x7f0000000140)=""/229, 0xe5) dup3(r0, r1, 0x0) 20:53:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x80000) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x28ff, @dev={0xfe, 0x80, [], 0xd}, 0x61656027}, 0x1c) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000680)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x1, 0xa, [{{0x2, 0x4e20, @loopback=0x7f000001}}, {{0x2, 0x4e23, @multicast1=0xe0000001}}, {{0x2, 0x4e21, @broadcast=0xffffffff}}, {{0x2, 0x4e20, @broadcast=0xffffffff}}, {{0x2, 0x4e24, @multicast1=0xe0000001}}, {{0x2, 0x4e20, @rand_addr=0x5}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}, {{0x2, 0x4e24, @multicast1=0xe0000001}}, {{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}]}, 0x590) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x407, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}, 0x1}, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x2) 20:53:55 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"04ac720200000000ec973f820f7c4000", 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400601) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d8, 0x0, 0x430, 0x430, 0x258, 0x370, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x880, 0xb02, 0x0, 0x1}}, @common=@socket0={0x20, 'socket\x00'}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7b03, 0x7ff}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xc}, @loopback=0x7f000001, 0xffffffff, 0xffffffff, 'veth0_to_bridge\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xff, 0x2, 0x4}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x2, 0xf6f5}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x5, 0x8, 0x0, 0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0x0, @multicast1=0xe0000001, 0x4e24}}}, {{@ip={@empty, @rand_addr, 0xffffffff, 0xffffffff, 'ipddp0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x73, 0x3, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x0, 0x4}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x80, 0x8}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x3}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xb}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x638) close(r0) 20:53:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:55 executing program 4: prlimit64(0x0, 0x0, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) 20:53:55 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet(0x2, 0x80e, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000000000), &(0x7f0000000100)=0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='teql0\x00') lseek(r0, 0xfffffffffffffffc, 0x1) [ 162.348855] binder_alloc: 11114: binder_alloc_buf, no vma [ 162.355082] binder: 11114:11117 transaction failed 29189/-3, size 0-1025 line 2967 20:53:55 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1, 0x8000) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000100)="f7eed9f190cf346593bd1c28a93677457991ebca1f95df484daf41289ef3b2a031c7aaa160092309d7b3ce4ab4194ab76a6f7273b107955569d390f568824c2cc48b33741a6c79a4c2db7dea2772ee8778e691c598e8eb75736d13a62c296e80b802f857851b0aeb62a6") r2 = socket$inet6(0xa, 0x1, 0x4) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x1, 0x4) r3 = socket$inet(0x2, 0x806, 0x2) connect$inet(r3, &(0x7f0000000080)={0x2, 0x400, @loopback=0x7f000001}, 0xb) sendto$inet(r0, &(0x7f0000000000)='9', 0x1, 0xc0, 0x0, 0x0) 20:53:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x20}, &(0x7f0000000240)=0x8) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00006dc000)=[{0x2000000000000006, 0x0, 0x0, 0xa5}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x11b, 0x20000803, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) prctl$seccomp(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000140)}) dup(r0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/157, 0x9d}], 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4) time(&(0x7f0000000040)) [ 162.408845] binder: undelivered TRANSACTION_ERROR: 29189 [ 162.602985] kauditd_printk_skb: 280 callbacks suppressed [ 162.602996] audit: type=1326 audit(1531342435.947:295): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11134 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x0 20:53:56 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000007ffe) r1 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$sg(&(0x7f0000000d00)='/dev/sg#\x00', 0x401, 0x400) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r2 = accept4(r0, &(0x7f0000000000)=@in={0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x0, {0xb}}, 0x14}, 0x1}, 0x0) write(r1, &(0x7f0000000200)="7f759c837522160774708b2a49e365dad938821b936a98b54fd0d8f652f620f2b3259b1f1787dfa9d304d23d564213ddaa6c35c61c4d357d1cf289ffa24571c09a88328dd4e15ae6f936d2b7d3157771af02f024ce0bbf5803af74645e91b84b0278216ca17d19d6472152e66a66aaa570d289f87027a8f6065553a24f15077f51b91f0de38942d2d312088bf50156dbf96a1b1f7f82f93a3bb54358b07fdae49eca1663a3f25aafaa77125aa955eefe4ec8", 0xb2) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)={'mangle\x00'}, &(0x7f00000001c0)=0x54) accept4(0xffffffffffffffff, &(0x7f0000000340)=@vsock={0x0, 0x0, 0x0, @host}, &(0x7f00000002c0)=0x80, 0x0) sendmmsg$unix(r2, &(0x7f0000006180), 0x1b3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000440)={@loopback}, &(0x7f0000000480)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={@loopback=0x7f000001}, 0xc) pselect6(0x40, &(0x7f0000000300)={0x4, 0x427, 0xffff, 0x8, 0x4, 0x7, 0x100000000, 0x91c8}, &(0x7f00000005c0)={0x0, 0x1f, 0xea8, 0xff, 0x10000, 0x4df, 0x4, 0x8001}, &(0x7f0000000600)={0xffffffffffffffc1, 0x1000, 0x0, 0x10000, 0x6, 0x4, 0x80, 0x5}, &(0x7f0000000640)={0x0, 0x989680}, &(0x7f00000006c0)={&(0x7f0000000680)={0x7ff}, 0x8}) close(r2) close(r1) recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/22, 0x16}, {&(0x7f0000000740)=""/139, 0x8b}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000008c0)=""/206, 0xce}, {&(0x7f00000009c0)=""/6, 0x6}, {&(0x7f0000000a00)=""/141, 0x8d}, {&(0x7f0000000ac0)=""/150, 0x96}, {&(0x7f0000000b80)=""/166, 0xa6}], 0x8, 0x0, 0x0, 0x4800000000000000}, 0x2000) 20:53:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x301000) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x5, 0xfffffffffffffffd, 0x1, 0x8, 0x10001, 0x3, 0x4}) ioctl(r0, 0x8911, &(0x7f0000000280)="425cc83d6d345fa8762070") setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x4, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x18, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/udp\x00') ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 20:53:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 162.824328] binder_alloc: 11147: binder_alloc_buf, no vma [ 162.830139] binder: 11147:11148 transaction failed 29189/-3, size 0-1025 line 2967 [ 162.872209] binder: undelivered TRANSACTION_ERROR: 29189 20:53:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x82, "872414beadfc2dbd4a4574d7f76f8ad0e497a323d674c65b61541117446d760ab99cd3bc0a6c30df024ad119266df3638feb75abc2ee9453dc8fe974337e9cac27c77cb66337e63bd670d1d390df603f223feab8fbf0a65acbee76e74d23b4a62de5c7b8fe8129fb84b8d4d4e7b45c397f995fa9d26d721afb51f87f3307cfd8a23f"}, &(0x7f0000000240)=0x8a) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r1, 0xfffffffffffff001, 0x4}, &(0x7f00000002c0)=0x8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="a3656d1b36618de598244e97092edad1", 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x80ffff]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x4600, 0x0) 20:53:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = open(&(0x7f0000000180)='./file0\x00', 0x400000, 0x40) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000001c0)=""/241) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40140, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f00000000c0)=0x6) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000002c0)=""/208, &(0x7f00000003c0)=0xd0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x2f84) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="4d000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000084b2d3d21aa357a9de46f69efa0d96f3a9d3bc9414a6c522f424e934246c73dc712cfac03d4b1859b1f6a5fb4d92dd248431adcbcfc2b6c908cad28833090b7858528cbbb60e0e576f0e119d4e64c690"]}) close(r4) close(r1) 20:53:56 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x80, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x30, &(0x7f0000000880)=ANY=[], 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8982, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}}) close(r3) close(r2) 20:53:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:56 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0xf00, 0x70bd2b, 0x25dfdbff, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4000040) r3 = dup(r0) ioctl$void(r1, 0x5450) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a3047e6115266c2d539acc47d33a63bacf432d1945f3c35efa66c2e017507dd2deb07c2640112516e5716f2a8a5c8a4a3a2c000e8ecf68b7c971f61becc818809d42f97dbeafb390bdf73e0fc919671beca7c5298d2111c20008a7d5132fbc05c761e82d7412161a33854cc02ca44826db5c298d41f6ff7548c3177da665a9b30def689655280249a1c10c9433f0aaa6100000000005a6cb0b90becbda013943a0000c022546c21a91201f73a3687"], 0x9d) ioctl(r0, 0xfff, &(0x7f00000002c0)="32f00faebc09e99da9dc985c9af80c0c006bb62a883e2de55cc4e31f229ef91f451010004698b5d1a683d7ca7c83d51a5e2cb9bede9d548f030c12001e0d5fb771869abaef0714e1bd209eaafc9c4df875075bae938b0b13d2bb430f2e657349d922763709779262758da3b92ad5") ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0x40085400, &(0x7f0000000000)={0x7}) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000080)) open(&(0x7f0000000100)='./file0\x00', 0x40000, 0x1) [ 162.956241] dccp_close: ABORT with 178 bytes unread [ 162.968329] dccp_close: ABORT with 20 bytes unread [ 163.047555] binder: 11165:11167 transaction failed 29189/-22, size 0-1025 line 2852 [ 163.083196] binder: undelivered TRANSACTION_ERROR: 29189 20:53:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="480000001400197f09004b0101048c591188ffffcf5d3474bc9240e1052061a7766819e07900e0fe5f002824a6da8bb29f502c922408e9d647213ee20600d4ff5bffff00c7e5ed5e", 0x48}], 0x1) socketpair(0x0, 0xa, 0x3, &(0x7f0000000080)) 20:53:56 executing program 6: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)) fcntl$getown(0xffffffffffffff9c, 0x9) getpid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000240)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)="6e091be9a2f5e2d578629a9432fc24f547ffe1afddc35adcef1643fcbb9da77270f033d8b7d3410c13e2416cd1d9c7bfbe1271326f8fbf314d366f3a608677891084b6156aed69e9303f580e") lseek(r1, 0x8000000040000, 0x3) 20:53:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="02ff7f000006bd4ff6bafbb55a6a9db47dc11923c8c87f8f02c49db29ed0693dabe73038b60c6a3d5603011d5c50feee235cf310c5426976") r1 = syz_open_procfs(0x0, &(0x7f0000d09fe9)='smaps\x00') ioctl(r1, 0x20, &(0x7f0000000140)="109fe504630010120bfbdf8d4702d816d42666b539d97c1e7d52e082a6ddef53166cfbf8463f9e7a5db2479d116f9c8e5351a7528c13814dd1291dc6706e57365915eb41b51d9a4983fbaac249adf0f59056698a135df72d38e1486c1dfe00ab0e5916a428") mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000040)=""/8, 0xff5c, 0x100003) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) 20:53:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") keyctl$get_keyring_id(0x13, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x1001}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0x3}}, 0x18) 20:53:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r3 = accept$alg(r2, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x34, &(0x7f0000001400)=""/123, 0x2000147b}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}}, &(0x7f0000000080)) tkill(r1, 0x1000000000016) [ 163.454132] audit: type=1326 audit(1531342436.798:296): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11134 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x0 [ 163.490355] binder: 11189:11191 transaction failed 29189/-22, size 0-1025 line 2852 20:53:56 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0xc08c5102, &(0x7f00000001c0)) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) 20:53:56 executing program 1: socket$unix(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000200)=0xffffffffffffff81) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000040)="0009e0ffffffffffffff05000000000400000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) fstat(r0, &(0x7f0000000240)) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x11, 0x0, 0x100000001) 20:53:56 executing program 6: socketpair$unix(0x1, 0x10000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x8800, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000240)={0x1, {0x77359400}, 0xfffffffffffffff8}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") connect$unix(r0, &(0x7f000057eff8)=@abs, 0x8) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000b82000)={0x10000004}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x8e, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x402, 0x0) accept$inet(r5, &(0x7f0000000140)={0x0, 0x0, @rand_addr}, &(0x7f00000001c0)=0x10) recvmmsg(r0, &(0x7f000030efc4)=[{{&(0x7f0000413ffa)=@hci, 0x6, &(0x7f0000b60000), 0x0, &(0x7f00004f9000)}}], 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) [ 163.522959] binder: undelivered TRANSACTION_ERROR: 29189 20:53:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:57 executing program 2: r0 = inotify_init() mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000004c0)={0x80000000, 0x8, 0x9, 0x1}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x1ff}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x4, 0x1004000000000}, &(0x7f0000000a40)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYBLOB="0b000000e60afd23ddb96da80000004cc31efb320a16539f57fb9b29bf7bebfa31b31d43ca0e3e419cc794fce8dfd67fc1eaab2fecb5bb474fc92d9636ed7a7e105467d20e9347d9e7495d43a35742307514079aa23c0b357f758573e231767cb55a09af24c28a6782edc01ab7cea21b307bb5394b685038"], &(0x7f0000000300)=0x2) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)=0x0) perf_event_open(&(0x7f00000008c0)={0x5, 0x70, 0x90000, 0x3, 0x80, 0x5ff6, 0x0, 0x9, 0x4400, 0x8, 0x30, 0x0, 0x1, 0x9, 0x0, 0x7, 0xafc, 0xdfe, 0x81, 0x7, 0x7f0000000, 0x723f, 0x4, 0x4af, 0x0, 0x8, 0x7fffffff, 0x9, 0x100000001, 0xfffffffffffffffd, 0xd97, 0x6, 0x3, 0x80000000, 0x6fb9, 0x5b3, 0xfffffffffffffffa, 0x2400000000000, 0x0, 0x7f, 0x2, @perf_config_ext={0x7fffffff, 0x1}, 0x150, 0x58, 0xfffffffffffff000, 0x5, 0x8, 0x0, 0x5b}, r5, 0x0, r1, 0x1) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000980)={0x5, {{0xa, 0x4e21, 0xd8, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, 0x88) r6 = request_key(&(0x7f00000005c0)='big_key\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000640)='9p\x00', 0xfffffffffffffff9) r7 = request_key(&(0x7f0000000700)='cifs.idmap\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000780)='\x00', 0xfffffffffffffffe) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000840)={{0xa, 0x4e21, 0x1, @loopback={0x0, 0x1}, 0x2}, {0xa, 0x4e21, 0x20, @local={0xfe, 0x80, [], 0xaa}, 0xa9}, 0xffff, [0x200, 0x1000, 0x5, 0x200, 0xfffffffffffffffc, 0x80000001, 0x1, 0x4]}, 0x5c) keyctl$search(0xa, r6, &(0x7f0000000680)='rxrpc\x00', &(0x7f00000006c0)={0x73, 0x79, 0x7a, 0x3}, r7) socket$inet6(0xa, 0xe, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./control\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB="2c7766647e6fbe", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r8 = inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) openat$cgroup(r4, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0xed, "4e025c8916b79076a276c574c506b6d2cd412324365ea86692d668c84663d0fcd6e10258e105b351cf09c89b8205c6ce97bf15faff3b82f8524f569de83cd52ff21291921a797bcb9b4c9b010c4e481ee9dae7dfd7db2ff9149f90139a2085344643b6766f6b8b1893fe5c254e3dfcb7e4ddc892136d70c00e2a06a1a1e02a1017bf56351aef8284ca3349ed4b650933948d5cf5d9dc1002d691fb90edf12cb03f17fc91436de79597bff48421e55d0a27f6f236d3dcce5e182daf3802411041c0b2fddcd1d72d6a0aca39663f8582001766d79c3035c5847ca1e17d7b29ff4d4a4ebc37cd7c0ae9d8bc511f9a"}, &(0x7f0000000040)=0xf5) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r9, 0x1000}, 0x8) inotify_rm_watch(r0, r8) inotify_add_watch(r4, &(0x7f0000000000)='./control\x00', 0x28) [ 163.633054] QAT: Invalid ioctl 20:53:57 executing program 5: r0 = socket(0x3, 0x0, 0x9) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x8, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000000080)="00210300", 0x4) [ 163.719646] binder: 11218:11220 transaction failed 29189/-22, size 0-1025 line 2852 [ 163.792709] binder: undelivered TRANSACTION_ERROR: 29189 [ 163.923929] 9pnet: Insufficient options for proto=fd 20:53:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000240)={0x3}) sync() setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="845f47ce0000000002004e23ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e217f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000003a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) 20:53:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 164.002266] 9pnet: Insufficient options for proto=fd 20:53:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffffffffff001, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x301000) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x7fffffff, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000003c0)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], {0x77359400}}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSBRKP(r1, 0x5425, 0x20000000000000a) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x20000) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0xf01, &(0x7f0000000100)=0x1) 20:53:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = inotify_init() r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup2(r1, r3) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="43fa095aaf14e977ffec64ddd46a3902f5adbe0ea3c2c5c9ed886a309c9cf919778dd806af9c4da3f2dbb258cd409bb23629ce0a6ad7ed2b599c1ff86949b7011edd130f1986fa7c9170dfc554a9e7f32dee0772311eb04da4361003ad9e90373c95ad083195", 0x66}], 0x1, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3}, @iv={0x1018, 0x117, 0x2, 0x1000, "bb628a63c00c8ebe6354f2e52cfa580b2c0c57a765b56d572ee9d096e210c898bb0ed0f7a8a090abe36e4c9e42becf6b7566ec77363368b98bc498588c5897e3a1a7f7564daa90927b982ba3e90fd29bcf239b2e7a3a80848298e4fbc347ff11c86759c6f11b38bbff0533481f259fa57d7d558b6a21e0f9babbe53b0e0072243cd4accb9aa5fe1e160bf8a44b97467f9b6f0015992cd4125fbb679dc8a695d24ed1681f951b007f2bc6deb98a743be00ed79c33adeb56f947072e23f5d8df5c0c76ecbc37faedefbbf782e75e7a42ea55b5934e8366ff9c3b02ea847e77d909244116546f1f94f46d568b18ddab8b2e6e668e998004fccf6a1b492ebd1d70cc70813928065d736845ad53b3b515efc858453283cba84dc6708d5ac0d2803034bea44ed26e9b00c217e509e0d2a47bc087940060c6dd062468ff97f5d4ba0448fc60310c0d157cb668cced374b3ef8c8aa4b49586070b4684549e2dfbd33c63c0b41964c360f90ea58128e4c7e0f73c39cfcdb74336ac0fa977df05bbb0eac188c0e42ee7455975366ce6111647d802b27342b31e7a49160c4f9d4afc7c643a5de2092f2e1ad1819210a030afa5571415b91e5369a70abdc42eef0d3ea5f97d7979c415b82ad658e54530c84a6ce4d2733ac27aafdcdadf1d9115cc8d213f60cae5d55378cdb181c33a2692d7e88d1881d0eb91640d4fd685fa75980c59bb92ef033307c22eb35996c6434c0bb95232069bd252b03b9b541a8e05f8add842059a045718b20eba1b70f278f789ee6904abbb821e0424d60546bffd837ceda17acde37e1a497d7e0b4c3f936d48a82c236de293d4e32c0db52b59e08a5407551b42a35af0a64ef2f17bc372e0fd9153ef34963e9fb02a467bfd328a9705d46a82ed26cf38415c416a369e31b321a8a79227e78867822dc0f2218ff26ee69fb6022d31f8a78dc78370df8f09cbdbf9a6113c87a4f0c2d62319bb20506c751fa673aa8b558d751d32caae2753710f989051454ed27ac7d62a72049398e1b8518f389fbe078c150fcecc3fdd2b5a7601892917baf72ee6461ee78d79a3f31d4145a1f5a862e4e314053292e3d60e3f5007cc7068d67dd6778e57ca19b872a989bf22f96557a5c25f1a871392ac8be04206e760f3494f5f21f87ddb9f9ac0df077f0b58cd20c9100d642ceabf617b5e2590885136dd162a993a64bd00c28f3f1fb4f32b7185244aca62920000852bebb303eaafa5db87ab2b2b59fa516f8018f0a4afd989735579702667ea4dd087c15d8072fc3d2ccb9611be87ea201d8f0ec1ed37582b084948e9e9277ef0537722d61c30b6e1c77ebe990e07c56dad059f086d76d555fc7861cbe4c89ae405284d6c5be033684298b4112cec327d2d1f21fa6a1912297dc9b0214b60deeab4af39806431abe27125f66e25cb1bcd1817d6da4be71b20ea2549b7d7a0f83dba43a874655b6b13fbcc9bedc1d95171f114a438cd7146448e8e98bcc0639cfad202df8e6c325dcbd00782ad3e2828295f39ad1fb2c1dd3646b21d10b3bbb7f22272b96c2000ec345e84d66fe3fa1750577dd519c88f9b943e9f34ede2d13af05cce489141bb9f0dc4355fd61e7d10060932f42db8adef06be9d8665469c4c7348f97e8205505b5ba7878a4f857d17e7d14d6562c85e567a477639041d0ab78d8d56373ae54b29fc0ffb75569f14816f8ab78e87e16ee401d26dcda18a89cb485eaa96f2f7a20d03e5bc92a837d20b158b0b0ca7ff4907029083e4f57b537a74305eb7d99c82009a90fff781137ce0d1599b4eff829163a489feed79def54a1598f4118cfb787eb011bd0b6cd182d1589a2f635ee80fe6b09160e9cea87000b4e300ad448a02c018bf4664c32ed50735dc9a546ec6fbf06547f50741697df54383d53b3648da8cd4553cf82bf841356bf54fc40f1e25a95f2931a8eb9276edfd5e86cddcd648e862121506b335acfae362f657f7b44b10e6a396947a6d320fcc81f9750b05199128461dbf8ed3222be73427f0ed9d5e1d7c24b784fe6c702c89633f7305fb29953380720f7378da0b7a0cbc75fc3e10bcaf104ab5e7e8af25168b667a82628104cf998d98e8fb74db3ad877ab4b92c12b80596f3cb910222fdbad4c688d2afb7633de3695a37d657398034f109500f4bd18e3d9e9d0b8827d44588c616b2049732b234897fb81a452f71b380c7ef3d0de6b387378e0257c76d670e79bbf3f2b782949558206aaeaed2dc4150b076dac3c3de27f67a0240dcfbbd5161ac89062de618b3e632d0c754b1d5b5abf771d63fb76f99ef4cfdcf07effafadb4295a7939951bb52f7ab4f3f8ef0202cf9b5e1c8d66f0bac1d726c297dce64284b43a1206f0fe2633d292856b6ef63f1937dce25fe7ea532e734a8b145e59fd9410fe79926c00fb1768e883d0840738594b9586cdd3c2c55fe254b3ca5848455dc7a7cd1e80e47010d46508b52e498f8433205187c35d1fe2ef7547e8242446f9a09bfe2cc307e3aeb2263819f12902bf20eb7165cdba074ab2be34f2f0fe4a7a05e03af0bd04693088f539e1f80bd70452ca144b5588e0ea12755cecb191b22af410f0d4c417cb2bb0b23091f1e17d9f9b08462e18ad3e4b0d5a255f2d8c8bee97896e36dd2dd9f07b2d14df19472405ad5a0417686078b84222569ad4017cd7aaff8c241d24050bc652ae59192f12fc9c393129db060573d7fac5b8dbefaf4759ae1e354cbd557de0ac3df874674aa14ba02a775ef60577ad4097c8ef343175520259b6a514d28f16b48fe7099e2dfca24697c8bb9db9d6b9efd6712f1ad5153f848df8dfe8d988859f4f972d5e904d1202c8b3c21778ea7e0674c54727ce8a995cc179ddd10caeb601912f2c5c253486feb96a418a9cd21b3252b17d30ac18aa5a80b4f63fc98ab38cc9bf0fbd6436b816acda10f7ca4119281a406d5e865976e3ced3d4d321c9d5975087c5294d0dcdc54c713e2344843bd2d20c3f3e5a0aba867e79fc5f42e1c872ddbd626c9d20ef8c36872ab717baa8fd9a693795b88f35e6dd3f3aa0f86449e6854da60c0debdb8bcdf75c80ace52142c984c9f0bad22bc7b16a7320881c1eb2e7e38cf0faa6a4f5da4c27bc1505a1ee7be9dd8a721341be8e9c029d693274228ba52449e3a882b5fdd0b04419a25c17237f96a74257472b702ce460cd349bbdd8b58331da60735c11f4f98abaa0af58272c8d7fd344772419c9a1e85b4b8d0371d3cb7630f6577baca95430ff7fe94115ef8919e046230081157b3ca205caaf02d6c8b589e7ae31185477bb8fbbef674711f7450b3bde75352dbe81189ea611dd4889fce2b989c86b8220f4b6013f2d8f74bc0c22eda9bbe21f8911c206ba63ecd33541ed8af63bec3c34039a05900d65cebbace6a3011a8ce38b83e790afe2ef92650eaa0b495a2222c81b8b1ad996d336ef5837020cdc50920f17bc5d9751d4bb76478055da71e5ca17b17b85764412057008df8230133cb779f1bc8032b6cd8530f1802f6d55c5f6fc8b55ab54dabd6fa691219e981eea0af4b55feff50a604c9eb993ee8088555b32e9e4952f5166b4a52289340e81815ea25ef89b5cdd50ab83c8211ef491ab68bfa76ff89c14cc5117fceb82f8b12251ce36b0163469381f8db706928cbac94cb325135be5912031e19ddab97c2c39e84d5134054b3f0e747097922d4ea738f745377b96a52ae7246048777c064b4249633d937c02d05cabd0d140b9ec5316239a15e3ed390d256a03e15a97d576e0d26bfd9e5d8259bc658c2fd39ec9adf49deb45c4f0b8ba235ce0eb6810ef182e06f5e9d560a23a1e98602c55f4c7495d9eb553abf830796e03f9c0523adc58ebe2295a9343f8440174721d29cf1e669a676e81ac658ddd1ff52ae980c6064a84f097f4ef9f81da18537bb48cfd1a6606369ba19a7122ce9f3a3d598bcfa641e2c88bbb0603580744e3a59fd92e39e8dda91ab7649a89c8c72e2605eb72dd833dbe0628d9d42b27b9f0ab0ba57e48f681d2a5d7e91c2d57d8dec6c00e5dbe0ce7bdbd7059af19ce46a363cbfe4e058e112362f7f1e36d725b8bf443dc09515860daef9082f89a16fea2aa913ecef7a2f4a67a52bd7ccd18cfe5c5b12763ca7d6891603c1bae8c3be3ee2f9dc8f8c8fddb689dfba97dc4d97ba3ba975bb2140ecba31f03e47b1295f2bd49c3a4e1e95aaa5efbbbeb148e21bedaa49319ffa0b968d6a0876a566c2d5ca345e74b5866c8852fe5b36033416e12bd1158b02ae9ab5a25eb46124c486d6f8503c4f4ca10386d4d0c231fc926651107bba2c699c97af8155e580f31d2f77a0581cdaf66319c1c0a8a07407c477a0cb4fc85220941769047aad7379751575df82fb62548c8937a2a395bc42eaed8876081ccaa3d9d23018687f5b7ee269da477986abe9ed603681aa7920579007082fbc5ed0ffcdf96dcb3726b835eb0be1ddf541562d0ab0cc120824f991f0d666816af962437801a04c2ed3a68e1e605384d9ccc43a42e93ba1bb67398014fac6dd57bfa573524f2d618b9c200f4acc35dec3b4cb49a594cf610da9a9a8995f9ba6305b14fbb3d3b940d9c8f27edf4eadd8fabe55cf642c6ecf2fc9464936391975084a07f20cf57aaf11d7410f29cfdc39edcf4f779c8de39457bb046db067bba40706be5e3e24e3f5326e193b1f344fd713401a79de31709ad78fa403fab410b73d5e3f88bbf2d7e35651d4b38b048ee7ec21644407febddfed9573cb564615c88e1a07c2b834d94122f28eb4608c72c03251ec9b493a3699d282276daacc5d7d1d1142a64d0c8dbe3d5ad956d805564388baf1b39e5ad4ff77ae6f61d2777dc43d53f883053d8bac7496c23c446c757131245047d2e01fcaaaac6569649cee3ff1d9b2a01b11641679c1022b1df864fd1a17a486cc346264900bba56e67085f4230175605f2ca27e5b15d833490949c64f44480375e31e21e505a0bf4f6c4c09330d3591763bb584d3f1842f0df577fb6fe5da9481eaab038ecc6f1d5cc18a18e3628a70b7894815849503b59710928f414155ddf3e8cad3b0f020621e3b21fa2144e0148474bfdba34d340ac6d07f4515b213c6f44445d63f8c5509c96d2f60fd782412debca01b944eb938522d3f6504de67a9c63f08aa0453ee201bb19dee7b5eba8933f9bc8b7f5275459d226db599f808a6bf0ecd355eb1619dcd78d0a50bdada86ca075f4eacea27e477485700bf9fa8850d3de02f4231d9ad29cce27e8dfbc82a1a02f98849052a47d33ee367c59cc2a00151930e8f9a1992322527215beb17717f3a009a8b4940a661c84d7b36792f7f112c3faaa354a7c909b08ab4bfb287c005162f4cf48c93be1fa3f025d6f848787ab1dd71eb0d72982ad4d2cfbb14592ce4af4b36a0aedcb9ea919f4dccafac300487ea56be2e3d9d1433b6c2ea563c08b1ad28a39ba36effb0cc131cb976134541f243eea4ea976a43df46878f1ca420bb6ef356ad809b7ed8a6a71d2f4cf0c1a0c151f8d798bc6a9f0dd2466cc33ca6cdaa343b181d8f0e556b88b02e95d798baa493931b235670f9add9aa13d980c39997f223873364eda25c60bdc76f1fe18488e74ce320b67e2b8c10e61bc76261b9e67e0221d0e6393a9c8d14cf79971164509ccb0a7073d41330bc0179084310ad8e10d06868f0f1978969b0dc4d9eb5cc54397748faaa131edf8c8bcf2efd34bd9cd9b4406690eb357f21bbd80ffa59a125e0d9f959f6f85b0de2e2fe88996389dec85733ed388f918fd1ede7609a25604613db"}], 0x1048, 0x8000}], 0x1, 0x4) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="65dd3f2e050e00ffaac75866b9800000c00f326635000400000f300f01c86526af0f0117ddc7440f20c066350b000000440f22c0f20f1b51db", 0x39}], 0x1, 0x0, &(0x7f0000000580), 0xfffffea) 20:53:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'irlan0\x00'}, 0x18) close(r3) r4 = dup3(r1, r2, 0x0) write$P9_RLERROR(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000b4ff0000000b00000000000000"], 0x10) 20:53:57 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a000900000006000000000000000400ff7e", 0x24}], 0x1}, 0x0) 20:53:57 executing program 7: socketpair(0x11, 0x80002, 0x7, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0xfffffffffffffef4) mkdir(&(0x7f0000000500)='./file0\x00', 0xe7e8b12540463636) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f00000004c0)=0x8001, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000440)={0x4, 0x40, 0x4, {r3, r4/1000+10000}, {0x77359400}, {0x3, 0x8, 0x9, 0xb5e}, 0x1, @can={{0x0, 0x9, 0x7, 0x913b}, 0x7, 0x2, 0x0, 0x0, "9e248201668b77ec"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x80) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000280)=""/189, 0xbd) [ 164.273628] binder: 11255:11256 unknown command 536871232 [ 164.304145] binder: 11255:11256 ioctl c0306201 20000040 returned -22 20:53:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 164.478498] binder: 11272:11275 unknown command 536871232 [ 164.502199] binder: 11272:11275 ioctl c0306201 20000040 returned -22 [ 164.543105] QAT: Invalid ioctl 20:53:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:53:59 executing program 2: unshare(0x20000000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x20000000000098) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) 20:53:59 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x204e22, 0xd707, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x84}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x100, 0x0) write$fuse(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @fuse_notify_delete_out={0x0, 0xffffffffffffff00, 0x1f}}, 0x28) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 20:53:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0xffffffffffffff92, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x1c) signalfd4(r1, &(0x7f0000000140)={0x7fff}, 0x8, 0x80000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x80000000, 0x2}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e20, 0xfffffffffffffff8, @dev={0xfe, 0x80, [], 0x17}, 0x5}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000b94ff8)={0x0, 0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r0, &(0x7f0000ce6ffe)="da", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180), 0x8) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x80400, 0x0) write$P9_RWRITE(r3, &(0x7f00000002c0)={0xb, 0x77, 0x1, 0x9}, 0xb) 20:53:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:53:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000100)={{0xb8, 0xd2}, 'port1\x00', 0x50, 0x4, 0x5, 0x8000, 0x3, 0x5, 0x101, 0x0, 0x2, 0x10001}) ioctl$RTC_VL_CLR(r2, 0x7014) 20:53:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x100) getsockname$unix(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000301ffff100000000000000000000000"], 0x14}, 0x1}, 0x0) 20:53:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f00000000c0)={0x800, 0xd000}) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0xb3d7, 0x8, 0xffffffff}, 0x1}, 0x20, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x40201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r4 = socket$netlink(0x10, 0x3, 0x3) r5 = dup2(r4, r2) ioctl$KDSKBLED(r5, 0x4b65, 0x7) write$eventfd(r3, &(0x7f0000000300), 0x0) [ 166.603990] binder: 11287:11288 got transaction with invalid data ptr [ 166.628261] binder: 11287:11288 transaction failed 29201/-14, size 8192-0 line 2986 20:54:00 executing program 6: 20:54:00 executing program 2: [ 166.650912] binder: undelivered TRANSACTION_ERROR: 29201 20:54:00 executing program 7: 20:54:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:00 executing program 5: 20:54:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:00 executing program 2: 20:54:00 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0xd4, 0x20}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f00000002c0)="060e252929a96b47dcb6ff3638b162abed7df5c568545bef6b353ce1773b97720bc4318bb4a4329e779d652d2d3f7c154df80b104ec03dc2a26e8aca7d73847aae68847d789ab739a63f1eef587bcd9af8e2d2899f11d381c8624c76c662c704913063e2d1e859805a0aa86974954034b1a94876c45a3e7496f18a5a435d50bbf7e0a41811cf07e77993db6eceafcaad3f72f71f48d8751aca431c44ed4a11ab1242972b3232ea81e1655ba8e6ea52f59720551a62796da310c82b", &(0x7f0000000480)=""/212}, 0x18) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000100)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000000180)}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000041007110000000000000000000000000000095000000000000004bdf3c8cf7be5f8823e6f6394fdd95297a12735018eea3646cd87ad91bb57c6f771f4a482fc5fc3180963d9b1d8ce475041d2452a6c8670a2ab1def46713a930f8f595af0fa271900997f421e168740623fd9b52dfabc423d0cec8cbc3f36d8564fe79f5aa8a5b7235dc0101"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x7, 0x0) close(r1) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000003c0)={r1, r2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$kcm(r3, &(0x7f00000008c0)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)='c', 0x1}], 0x1, &(0x7f0000000480)=ANY=[]}, 0x2000c890) close(r3) 20:54:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800000800002, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 20:54:00 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x2, 0x3, 0x400000bff}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)=""/21}, 0x18) [ 166.824524] binder: 11322:11323 got transaction with invalid data ptr [ 166.878176] binder: 11322:11323 transaction failed 29201/-14, size 8192-0 line 2986 20:54:00 executing program 5: 20:54:00 executing program 0: [ 166.941276] binder: undelivered TRANSACTION_ERROR: 29201 20:54:00 executing program 7: 20:54:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:00 executing program 2: 20:54:00 executing program 1: 20:54:00 executing program 6: 20:54:00 executing program 5: 20:54:00 executing program 7: 20:54:00 executing program 0: [ 167.126613] binder: 11353:11355 got transaction with invalid data ptr 20:54:00 executing program 2: [ 167.167323] binder: 11353:11355 transaction failed 29201/-14, size 8192-0 line 2986 20:54:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:00 executing program 6: 20:54:00 executing program 5: 20:54:00 executing program 1: 20:54:00 executing program 7: [ 167.220315] binder: undelivered TRANSACTION_ERROR: 29201 20:54:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:00 executing program 6: 20:54:00 executing program 5: 20:54:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {{0x2}}], 0x30) 20:54:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") flistxattr(r0, &(0x7f0000000100)=""/5, 0x1e0) [ 167.388623] binder_alloc: 11381: binder_alloc_buf size 18014409246900224 failed, no address space [ 167.398315] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 167.407275] binder: 11381:11382 transaction failed 29201/-28, size 9007204623450112-9007204623450112 line 2967 20:54:00 executing program 6: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000003900)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7a8a295b90bf9cc85a2b1496c0c48000303080a2f858ad2c4aa412d", 0x48}], 0x1}, 0x0) 20:54:00 executing program 2: rt_sigaction(0x7, &(0x7f0000000000), &(0x7f0000d4efe8), 0x8, &(0x7f0000000040)) socketpair(0x18, 0xa, 0x78, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@multicast1, @remote}, &(0x7f0000000100)=0xc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x0, 0x2a8, 0x138, 0x410, 0x410, 0x548, 0x548, 0x548, 0x548, 0x548, 0x5, &(0x7f0000000200), {[{{@ipv6={@empty, @dev={0xfe, 0x80, [], 0x11}, [0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff0000ff], 'eql\x00', 'ipddp0\x00', {0xff}, {0xff}, 0x3f, 0x2, 0x1, 0x4}, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d4, 0x4d4, 0xffff, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x22, "bca540c31e76cc8baca04522607ac6ddc345e6cfc6e7a502dfba3551e0de"}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x19}, @remote={0xfe, 0x80, [], 0xbb}, [0xff000000, 0xff, 0xffffffff], [0x0, 0x0, 0xff0000ff, 0xffffffff], 'ip_vti0\x00', 'team0\x00', {0xff}, {0xff}, 0x3b, 0x6, 0x0, 0x40}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@state={0x28, 'state\x00', 0x0, {0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x13, @ipv4=@broadcast=0xffffffff, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}, @icmp_id=0x64, @gre_key=0x1ff}}}, {{@ipv6={@empty, @loopback={0x0, 0x1}, [0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00], 'veth0_to_bridge\x00', 'vlan0\x00', {}, {0xff}, 0x0, 0x770, 0x6, 0x10}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x1, 0x4, 0x1}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x8, 0x1, 0x3f, 0x5, 0x7, 0x4, 0x2002}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xc, @ipv4=@rand_addr, @ipv4=@multicast2=0xe0000002, @icmp_id=0x67, @icmp_id=0x66}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4, @ipv4=@loopback=0x7f000001, @port=0x4e23, @port=0x4e20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x640) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@rand_addr, @broadcast}, &(0x7f00000001c0)=0xc) 20:54:00 executing program 0: r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in6={0xa, 0x0, 0xd, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f00000003c0)}, 0x0) 20:54:00 executing program 5: setrlimit(0x0, &(0x7f0000000240)={0x4, 0x4000000001001}) 20:54:00 executing program 7: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000380)=ANY=[]) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xf, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0/file0\x00', r0}, 0x10) mount$bpf(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='bpf\x00', 0x0, &(0x7f00000003c0)=ANY=[]) 20:54:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:00 executing program 6: r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000003840)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000003900)="d90d0000768606681d012f629c75adfa4208d5febf524a024aface6a6ac7d846ed2fa163e15ffb5033e9ad60d7a8a295b90bf9cc85a2b1496c0c48000303080a2f858ad2c4aa412d", 0x48}], 0x1}, 0x0) [ 167.599979] binder: undelivered TRANSACTION_ERROR: 29201 20:54:01 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0605345, &(0x7f00000000c0)={0x0, @time}) socket$inet_smc(0x2b, 0x1, 0x0) 20:54:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:01 executing program 7: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, "6970365f76746930b0637c1db521b4d2"}}, 0xff96) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="277a4c148d89", 'bridge_slave_0\x00'}}, 0x1e) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r1, r2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 20:54:01 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(khazad-generic)\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000b37000)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000140)="cf2dc3a1c46717cbbd", 0x9}], 0x1, &(0x7f0000000000)}, 0x0) recvmsg$kcm(r1, &(0x7f0000e63000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000588fa9)=""/87, 0x57}], 0x1, &(0x7f0000142000)=""/60, 0x3c}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) accept$alg(r0, 0x0, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0xfffffffffffffff8, 0x1000, 0xfffffffffffffffd, 0x1, 0x10000, 0x1, 0x0, 0x20, 0x63, 0x6, 0x4e8fd944}, 0xb) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') 20:54:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000180)={0x37d, 0xfffffffffffffff7, 0x5, 0x0, [], [], [], 0x7, 0x400, 0x1000, 0x74e, "9ba7066be493a5d64df7918cc872ff84"}) pkey_alloc(0x0, 0x3) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x80000, 0x0) renameat(r2, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') 20:54:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x31e3, 0x8000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x111200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='/dev/audio\x00', r2}, 0x10) r3 = dup3(r0, r1, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, 0x3) 20:54:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x26, 0x701, 0x0, 0x0, {0x2003}}, 0x14}, 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x3f, &(0x7f0000000040), &(0x7f0000000100)=0x4) [ 167.774204] binder_alloc: 11423: binder_alloc_buf size 18014409246900224 failed, no address space [ 167.783411] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 167.792375] binder: 11423:11424 transaction failed 29201/-28, size 9007204623450112-9007204623450112 line 2967 [ 167.956744] binder: undelivered TRANSACTION_ERROR: 29201 20:54:01 executing program 2: mq_open(&(0x7f00000001c0)='/dev/vsock\x00', 0x1, 0x13c, &(0x7f0000000200)={0x2, 0x2, 0x6, 0x0, 0x3, 0x2fe, 0x10000, 0x8}) r0 = mq_open(&(0x7f0000000280)='/dev/vsock\x00', 0x1, 0x0, &(0x7f00000002c0)={0x6a16, 0x0, 0x8, 0x2, 0x35, 0xb7, 0x20, 0xa44c}) ioctl(r0, 0x20, &(0x7f0000000240)="025cc83d6d345f8f762070") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000140)={0x3, 0x0, 0x5, {0x0, 0x989680}, 0x4, 0x2}) read(r1, &(0x7f0000a16000)=""/71, 0x47) 20:54:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) clock_gettime(0x0, &(0x7f0000000180)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0)={r2}, 0x10) 20:54:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) read(r1, &(0x7f0000000640)=""/202, 0xca) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) write$binfmt_elf64(r1, &(0x7f0000000600)=ANY=[@ANYRES64=r1, @ANYRESOCT, @ANYRESHEX], 0x31) sendto(r0, &(0x7f0000000140)="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", 0xfc, 0x400c0, &(0x7f00000002c0)=@sco={0x1f, {0x2, 0x0, 0x8, 0x4, 0x100000000000000, 0x3ff}}, 0x80) 20:54:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:01 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111, 0x1}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x84, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}}}}}}, &(0x7f0000000000)) 20:54:01 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(r0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') unshare(0x400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000080)={{0x9, 0x3, 0x7, 0x3ff, 0x7, 0x7}, 0x10000}) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000000)) 20:54:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:01 executing program 0: r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x21}, 0x47d1}}, 0x13a, 0x100000000, 0x5, 0x0, 0x2}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r3, 0xfffffffffffffffb, 0xb0e8, 0x4, 0x5, 0x8000}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r1) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100000000, 0x204000) getsockopt$inet_buf(r4, 0x0, 0x3f, &(0x7f0000000100)=""/28, &(0x7f0000000140)=0x1c) dup3(r2, r1, 0x80000) 20:54:01 executing program 6: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000a9a000), 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) ftruncate(r1, 0x3ff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r3 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/236, 0xec) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETOWNER(r2, 0x400454cc, r4) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) dup(r1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) [ 168.521724] binder_alloc: 11454: binder_alloc_buf size 18014409246900224 failed, no address space [ 168.530910] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 168.539975] binder: 11454:11456 transaction failed 29201/-28, size 9007204623450112-9007204623450112 line 2967 20:54:01 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x24100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000/0x18000)=nil, &(0x7f0000002900)=[@text64={0x40, &(0x7f0000002880)="c481cc569cbf4800000066baf80cb87466208aef66bafc0ced0f30b98e0b00000f328f0960959d3200000045f66c216b66b89c000f00d0b9800000c00f3235000800000f308f49989a655936d0e2", 0x4e}], 0x1, 0x0, &(0x7f0000002940), 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:54:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xa, 0x6d, 0x20000000000001, 0x0, 0x0}, 0x2c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = accept(r1, &(0x7f0000000000)=@in={0x0, 0x0, @loopback}, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendto$packet(r2, &(0x7f0000000300)="dafdea167b3cbcc58f3cfdfd8a6c2167b8e5000723e4dbfb0648aea101af87138acb6c554a9bb24b692d04548feb7150f34ec50ca896740396217a8a908ca66465f62764e6a481acbc6f804c38fb3db89785b6d7f9a41453e82902472ba8b5b00ade110b8256e95543edc91663720d6fb7fbe1a5bf8fe75c63504e88469968e9daae19149c77d9ff1de3622e481be7866ea1c5f1ce2e14bf216338f73a6a18e960296ba01ab6538682ecf38a3237d8b8", 0xb0, 0x4800, 0x0, 0x0) ioctl(r1, 0x5, &(0x7f0000000200)="027e2070c234b1e2a07f09d33c30862726040a2b4f15a30c027fb2b32aa33f6b3079f9303dbf27581d4d2886d8f03aaf78ba4830a34379b1a99630b2061e7db98340fdbef00e5b999115e3153f8f9115af6bb5156da43851ad44d09d2ba3100a0ab110ccfd0956fa2237467eac0efdf54d9a46e1e0275b9d1bdc4f754caa111f0796f4b77a0ba07e6d950cf56c780c1537b68e1e146f1cf84843ab09eea5309157a41cd52e30cdaabd3145a24028a512797e4b0b47eb6856c2588fa2f59f97b1afa448c723e111f5e8a08dee29df4637215a521cca21fe724618e01da963fdfec02374df813d4d7a16da23de7444bdd8e9633734a5bf5b") bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) 20:54:02 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xde6, 0x200000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe9}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000080)=""/69, 0x45) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 20:54:02 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000"], 0x138}, 0x1}, 0x0) 20:54:02 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000300)="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") perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x4, 0x2) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000)=0xffffffff, 0x4) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = socket$inet6(0xa, 0x7fe, 0x8) ioctl(r4, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) eventfd(0xffffffffffffffe0) getsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000140), &(0x7f0000000200)=0x4) ppoll(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x8) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff}]}, 0x10) sendfile(r3, r5, &(0x7f0000d83ff8), 0x200800900000002) [ 168.687152] binder: undelivered TRANSACTION_ERROR: 29201 20:54:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:02 executing program 5: select(0x40, &(0x7f0000000300)={0x4, 0x6, 0x10001, 0x2, 0xed7b, 0x8, 0xc1dc, 0x3}, &(0x7f0000000340)={0x5, 0x40b3a264, 0x8, 0xffffffffffffffe1, 0x1, 0x672e, 0x2, 0x3}, &(0x7f0000000380)={0x0, 0xd38d, 0x800, 0x200, 0x8001, 0x0, 0x100000000, 0x9}, &(0x7f00000003c0)={0x77359400}) r0 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f00000004c0)=0x20) setsockopt$inet_tcp_buf(r1, 0x6, 0x16, &(0x7f0000000240)="d1a90bc5270f2304184475f0bd4ec4fab7a24a0b40ecbe2e2395effdda371c775c9679d9b929f988656a5840fea226a68f2b1ea034767795c3d9375f7cc8fa94507cf9f27c9edfad152943b354d28b8fd23297ba951d1278f91e5a84b3790e1a4e6a4cf6581cd32972ef223b703073ce088cdd2c3a5c5e517d69c8970953c058460575303822d507d4e2738b778811e1c59a03698a234753bf19a3fb776867dc08272b39925a462305bba8114607b6872061921257c6ae6516e6914c4736a7c3", 0xc0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000000040)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) 20:54:02 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000006bd55104000c0502ebd9f7ed58d6127ae2d2264c52e8805737e11911c5d7b7f99a04b3abd17d067773d6c831e8fc4b12fd5a4fb403431e8b32f7c7177c31ade3522d71ff9b704003690d582a33b99ae3abac04a005f907"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffbf}, [@ldst={0x7, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 168.845639] binder_alloc: 11503: binder_alloc_buf size 35184393061384 failed, no address space [ 168.855251] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 168.864203] binder: 11503:11504 transaction failed 29201/-28, size 0-35184393061377 line 2967 [ 168.920760] binder: BINDER_SET_CONTEXT_MGR already set [ 168.935153] binder: 11510:11515 ioctl 40046207 0 returned -16 [ 168.974590] binder: undelivered TRANSACTION_ERROR: 29201 [ 168.984338] binder_alloc: 11503: binder_alloc_buf size -1119914062392389848 failed, no address space [ 168.993755] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 169.003092] binder: 11510:11515 transaction failed 29201/-28, size 0-0 line 2967 [ 169.013005] binder: 11510:11515 ERROR: BC_REGISTER_LOOPER called without request [ 169.020753] binder: 11515 RLIMIT_NICE not set 20:54:02 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)="6173796d6d65747269630000f623c165dbdd5da4e516feae1218931b7f62f1989e779cb3e199015e6f224dc786b78b696462c7dec58cd05fa42773a0af0a703d63e19620fd165b5d862cf735059c401152746037a51f9d035dcf4197d265f6f5d246b14212db69e767574420fb11a7308eb293967dbd5a729bb8c6833a854e2036d4e9270fef4cef270638e56c144263ecf69038c96c9d38f68668c21513e19c1311eea8ee94c59609987d033ca3c8ad624dbc5c8958aaa4e9158c5850c6228a22d0adaabe8bb566c069d5baa64e30af6d878c", &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000040)="3080", 0x2, r0) io_setup(0x9, &(0x7f00000000c0)=0x0) io_destroy(r1) 20:54:02 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0xff7ffffffffffffd) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = dup3(r1, r0, 0x80000) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2, 0x8, &(0x7f00000000c0)=0x5}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000080)=0x400) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={"6c6f0000ffffff9f0000ddff00"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'lo\x00', 0x4000}) 20:54:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x8, 0x100) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000440)) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x3, 0x87) r3 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={r3, r4, r5}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0xfffffdfe) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) 20:54:02 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x7, 0x143f, 0x10be}, {0x5, 0x9, 0x7f, 0x2}]}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x2, 0x0) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000001800)={"deda92746c1d1360e16baaccd4d8ac11bece5386d15bfc0537932f5006b0f892ebf972437cbb9866cdef53228d66dbb83c5bf883b2d692b1711b6c326ea6a54eeddefdc94bb6639b18ab85435457589bb7468758120eb50734c3d24f98e81cc66cfb8cfebbd3ce08ff92c723cd3c7cd6423dbee6d052f0575aa5cc247944fdfadfce3a199479e96af0b898279b9894a45e5f87ea7af7b5b89e3d32152710efde0ddbb0f1e55efba08fde10c0e384f03e75b2a349b9b02f2358c81ec6f62f92f2b6917b6813b08b7b3ce543848c79e8164dbdf4cb6c6b1fffe08e964acca85972987aacc0087f1490f9c788cc0721f7c1ce4a182457d1aa79565a0c046b57dd5200f3e8bf499c36d50b6a6aa63429203b48eb67b1e1a50e4fde79ad1fb2a54c4d9f235cbe3c38185c9000f0178b2996651d647ac91f9addb4f03c91cc005177fbc038fd800c31d491782234a8f3eece08dc374a13028c2677926f9836d57a7262f6637fc020bf14c9fcdecd94a5d837a2f084b1ff77bb367ad70c453892ad0437694c35289bdd93ad36a4bbd7ac99edf65d59003d0a69f1d8303717224840a47a3a4928a62491043ee617d4381812eae7cc66b2c36bc73121ede2c790181a660a503a895a4253b5e2cf2946253d6a065b239e8ec77a110adb2f4028620fbf71b02dc9efa2afbf9891ff7cfed64d35b5b19dcb3347a3b42b1831ffc1906bc468282addf5bf5fea549b722a8ac33853c6b92777982b8c87daec52bb89c61aa09139754044c7aa80093f52a6cf1d4cc6893c52ccb5d14fb826d3ca61e6455651072677be3084002e55dc4984222895399a26f31eca52ce8deca8e57c8827daad42ade36fabb63115ec07e23c3c6d0f818c30314ae9511c1cc44c5c2c2ed4459e6b239c63c72ebb0f21036a2a2ed39f6d66419261cfe7ff2d8f05c8a2d6297d52e8dbd45b234cf46e040a84b57b6c79a0db5bc0c1a23bb4da993801b9666c2134d957e359646d963acf30b4b50595cd94f1a9470f2059ad33aa0f879c4ebf693a65e5295eb82241637bfb93c868c3faa464d010b5b4699a657737cf329225e73d13c28d4ebc18a69e55bbf742c0a4155b03dddacd26ae6f8e0dad6491f081f3ca457d4ba3e0abdb170217d1953f164002b7def7690cb033ca7feacde8f19bc6a63921b7fe8cbd5063491f9a522eed674e13d6708fe38755aba7ab3656898e7f738b9a1adbdd14ee0563f7125022bd50fbe88b994a208d5c4064cb81905cef125bce2c548d0825893479554c4d43b9fddb038887162de7c999c41240fbf72e241669277990e1db19d4be0728fd4bca184c5ac4131f6f26d81ae6977a1cec50e7ec02d2bf4081c2fac8a39516cf4e0c4558d7cadb9559db29cdb5a63dfaed9843d2cc5af57c37bc3741e1e0b34373fb595731c23f2a9cc28c333bab32abeab0039e1e9e"}) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000680)="017b46b8", 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000000c0)=0x1) write$binfmt_elf64(r2, &(0x7f0000003d80)=ANY=[@ANYBLOB="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"], 0x15b0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001cc0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001c80)={0xffffffffffffffff}, 0x117, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000001d00)={0x4, 0x8, 0xfa00, {r3, 0x7}}, 0x10) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000580)={0x5, 0x0, [{0x7, 0x4, 0x0, 0x0, @msi={0x3, 0x3, 0x3}}, {0x9, 0x2, 0x0, 0x0, @msi={0x9, 0xf5, 0x3}}, {0x256, 0x0, 0x0, 0x0, @msi={0x80000001, 0x81, 0x6}}, {0x2, 0x1, 0x0, 0x0, @adapter={0x3, 0x1, 0x8000, 0x7fff, 0xfffffffffffeffff}}, {0x9, 0x3, 0x0, 0x0, @msi={0x9, 0x7e}}]}) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000001780)) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f00000017c0)={0x1ff, 0x1, 0x10001}) ioctl$sock_ifreq(r4, 0x8994, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names="00907000"}) 20:54:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) socket$inet6(0xa, 0x1000000000002, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x1, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020707041dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x3, 0x7f}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) 20:54:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 169.407278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 169.425414] binder_alloc: 11535: binder_alloc_buf size 35184393061384 failed, no address space [ 169.434338] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 169.443278] binder: 11535:11537 transaction failed 29201/-28, size 0-35184393061377 line 2967 20:54:02 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x200000) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000080)={@dev, @multicast1}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x6, 0x7f38, 0x5, 0x7f, 0x7f, 0xffffffffffffff8f, 0x1, {0x0, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x3, 0x8, 0x4, 0x0, 0x100}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x1, 0x900, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x0, 0x3f}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "9e2af8dfef4a564c3de69c35c5bd92206c8bf328ea20bb90cf609fce9352a049e09bc94deb70f1474a85812401d065ffdb35c3e24ac90f7471c1251178ca8178"}}, 0x80}, 0x1}, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x2000000000000001, 0x902, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}, 0x1}, 0x0) [ 169.463282] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 169.500277] binder: undelivered TRANSACTION_ERROR: 29201 20:54:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3e, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:02 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = getuid() r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x6100, 0x0) quotactl(0xc3, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000180)="24e6b7ade90aa38b02c7442f32d3d539be5c6c9503ecbee25d738a0d4d5ca6e8d1c9970b8377f871c97f4a58bc8855626f9b4e77e4cce07e8e6b71e5b8e016bd8dd28c4fd338f08aae2240d23f6e6122506cba014efce42e75abcf344b288d9b0f7d964dba6f06338152fda66068ae590ed7cc7c281fc59c9228fd2f492bca76cdc432b4213bfbffeacd0e6f126943c41b510fc44ff13e871d32f580a113f60f02e08db72934cb89672ad247") setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000500)=ANY=[@ANYBLOB="4ed33b808ade1596b1af9bebe97be9875c743952f82a0024c161db78b4b3a85f03ed396c7e9fd96a3c508994fcd755d670b973a71a779fdca5"], 0x8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x81, @local={0xfe, 0x80, [], 0xaa}, 0x2}}, [0x2, 0x100000001, 0x100, 0x9, 0x9, 0x6, 0x3, 0xffff, 0x1b05, 0x800, 0xffffffffffff1791, 0x0, 0x80, 0x10001, 0x3]}, &(0x7f0000000440)=0x100) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)=r5) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000004c0)=0x64c, 0x4) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000480)={0x7a6, 0x21, 0x2}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 20:54:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:03 executing program 7: r0 = socket(0x10, 0x3, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000200)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x19, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) getsockname(r0, &(0x7f0000000140)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x80) 20:54:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 169.703567] binder: 11510:11565 ERROR: BC_REGISTER_LOOPER called without request [ 169.711186] binder: 11565 RLIMIT_NICE not set [ 169.740602] binder_alloc: 11510: binder_alloc_buf size -1119914062392389848 failed, no address space [ 169.750137] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 169.759148] binder: 11510:11564 transaction failed 29201/-28, size 0-0 line 2967 20:54:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) fcntl$addseals(r0, 0x409, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000640)={0x0, 0x0, 0x34}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x0, 0x0) [ 169.843411] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.855108] binder: undelivered TRANSACTION_ERROR: 29201 [ 169.926358] binder_alloc: 11555: binder_alloc_buf size 35184393061384 failed, no address space [ 169.935319] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 169.944269] binder: 11555:11556 transaction failed 29201/-28, size 0-35184393061377 line 2967 20:54:03 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sysfs$3(0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400810700000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000100000000000000000000000000000000001400060004000000770f00000000000000000000"], 0x40}, 0x1}, 0x0) 20:54:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000240)) [ 169.984863] binder: undelivered TRANSACTION_ERROR: 29201 20:54:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1=0xe0000001, @in=@dev={0xac, 0x14, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x33}, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x3f}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xfffffffffffffdc2}, 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)=""/80, 0x50}, {&(0x7f0000000380)=""/152, 0x98}], 0x2, &(0x7f0000001040)=""/4096, 0x1000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)={0x2, 0xd, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200001100000026bd7000fcdbdf2501001400790000000800120003000000000000003800000046003270b4a69956a98fe40000000000ac1414bb0000000000000000000400000000000000000000000000000000000004000400170000001f000000000700003f00000000000000030000000000000002000b00050000000100000000000000"], 0x88}, 0x1}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) 20:54:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tu\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x34, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x4, [@typed={0xc, 0x0, @fd}]}]}]}, 0x34}, 0x1}, 0x0) 20:54:03 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x8080, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000480)={0x53, 0x2db, 0x4, {0x10000, 0xccab}, {0x9, 0x7f}, @const={0x6, {0x0, 0x6, 0x5, 0x3}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x5, &(0x7f00000001c0)=0x0) r3 = socket$nl_xfrm(0x11, 0x3, 0x6) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6}, 0x14) io_getevents(r2, 0x0, 0x80000000000026b, &(0x7f0000000240), &(0x7f0000000000)={0x0, 0x1c9c380}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) openat(r6, &(0x7f0000000140)='./file0\x00', 0x44840, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000340)=""/149, 0x95}], 0x2, 0x0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x5ee}]) 20:54:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x41, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:03 executing program 7: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x101000, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000001c0)=@hopopts={0x0, 0x16, [], [@generic={0x9, 0x54, "4051972fff626a7f9c17ea2505caa7d557605829b2af6cf6152873d0a7f1df4a036ab673d9bd9d8e494fc43cffeaff528f318d73593090cf4ab5146dd458669f2fea69d0ea6f2ca144806b86b4a900a77b7b46c0"}, @generic={0x20, 0x58, "ebdca9a4e2b7732e289619109ad7c2cd5c4d3a7412e92760e3768570aec36bc8d5fac9a1d9af5f4c91720e671ba59e959d6575fd644db8dd28b7bb35584764a626a5600ca162cfae444f1c288781482ffc0eb58165852bc3"}, @pad1={0x0, 0x1}]}, 0xc0) getitimer(0x2, &(0x7f0000000080)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 20:54:03 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x214000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240), &(0x7f0000000300)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='!.md5sum\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000003c0)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000480)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200082}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) write$P9_RRENAME(r3, &(0x7f0000000200)={0x7, 0x15, 0x2}, 0x7) [ 170.134179] binder_alloc: 11591: binder_alloc_buf size 351843720889352 failed, no address space [ 170.143181] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 170.152126] binder: 11591:11597 transaction failed 29201/-28, size 0-351843720889345 line 2967 20:54:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x0, [{r1}]}) 20:54:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, 'port1\x00', 0x0, 0x100000, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{}, {0x80}}) 20:54:03 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040)) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295e273b5abcf477671070") connect(r0, &(0x7f0000000080)=@ax25={0x3, {"3384f28d6b84ba"}}, 0x80) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x8, &(0x7f0000000140)='$', 0x1) getsockopt$inet_opts(r2, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) [ 170.238411] binder: undelivered TRANSACTION_ERROR: 29201 20:54:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000202030000000000000000000000000004000c00d9afc096b9c912b6"], 0x20}, 0x1}, 0x0) 20:54:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x41, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:03 executing program 7: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000bc0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000f7ffffff0000000001000000ad3a2344373746c1fcda6be1a0918f1807eb4ab935638b499357d5a8a2124ebfb1e40a1322c313a6a5a970c45bbf9955e14111fdc00800020000000000000721b84818254263e364966fe529c86ef6896670ab5f24d189a497f309c42bc5c1bca62412f0888106c3cddd6efc4e19f53374cae2e44bd7c596d84c00d091519ad461d10055611bda88a4c9f79205046e08c13c7717ec7f1be888a13c83b38a71b7d9f63c65e8190796368c66562b76eb82bebe89754ad8f48163d180e88521ddfa4f091c64d7ad911b04a5037e39e805e1b13cfb75cf747a4013adea5847a2af7e07e82ad3251d5e9e0be1e280ab0a18d49c2cbdadd517fbaa290a", @ANYRES32=r3, @ANYRES32=r1], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/156, 0x9c}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000580)=""/102, 0x66}, {&(0x7f0000000600)=""/118, 0x76}, {&(0x7f00000007c0)=""/240, 0xf0}, {&(0x7f0000000680)=""/39, 0x27}, {&(0x7f00000006c0)=""/43, 0x2b}], 0x9, &(0x7f0000000980)=""/113, 0x71}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000a00)={0x0, @empty, @local}, &(0x7f0000000b40)=0xc) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000b80)={r5, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740), &(0x7f0000000780)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) stat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000003240)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003740)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000003840)=0xe8) getgroups(0x1, &(0x7f0000005080)=[0x0]) recvmmsg(r2, &(0x7f0000002f40)=[{{&(0x7f0000000a40)=@sco, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000002f00)=""/60, 0x3c}}], 0x1, 0x0, &(0x7f0000003000)) [ 170.340584] binder: 11613:11626 BC_INCREFS_DONE node 151 has no pending increfs request [ 170.403643] binder: BINDER_SET_CONTEXT_MGR already set [ 170.427221] binder: BINDER_SET_CONTEXT_MGR already set [ 170.431465] binder: 11630:11631 ioctl 40046207 0 returned -16 [ 170.449985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 170.454170] binder: 11613:11633 ioctl 40046207 0 returned -16 [ 170.462632] binder_alloc: 11613: binder_alloc_buf, no vma [ 170.470475] binder: 11630:11631 transaction failed 29189/-3, size 0-351843720889345 line 2967 [ 170.484773] binder: 11613:11639 BC_INCREFS_DONE u0000000000000000 no match [ 170.495209] binder: undelivered TRANSACTION_ERROR: 29189 20:54:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f000000cffc)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000008ff4)={0x10}, 0xc, &(0x7f0000001000)={&(0x7f0000007000)=@newsa={0xf0, 0x10, 0x129, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in6=@mcast2={0xff, 0x2, [], 0x1}}, {@in=@multicast2=0xe0000002}, @in=@rand_addr}}, 0xf0}, 0x1}, 0x0) 20:54:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f0000ff5000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x14}, 0x1}, 0x0) 20:54:04 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"00000000000000ff00", 0x2003}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r3) 20:54:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:04 executing program 0: syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009480)=[{{&(0x7f0000000680)=@hci, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/89, 0x59}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f0000000880)=""/67, 0x43}, {&(0x7f0000000900)=""/208, 0xd0}, {&(0x7f0000000a00)=""/142, 0x8e}, {&(0x7f0000000ac0)=""/227, 0xe3}], 0x6, &(0x7f0000000c40)=""/49, 0x31, 0x80000000}, 0xffffffffffffff9b}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000c80)=""/84, 0x54}, {&(0x7f0000000d00)=""/174, 0xae}, {&(0x7f0000000dc0)=""/163, 0xa3}, {&(0x7f0000000e80)=""/180, 0xb4}, {&(0x7f0000000f40)=""/20, 0x14}, {&(0x7f0000000f80)=""/62, 0x3e}, {&(0x7f0000000fc0)=""/227, 0xe3}, {&(0x7f00000010c0)=""/27, 0x1b}, {&(0x7f0000001100)=""/121, 0x79}, {&(0x7f0000001180)=""/201, 0xc9}], 0xa, 0x0, 0x0, 0x2a347f89}, 0xe77}, {{&(0x7f0000001340)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001540)=[{&(0x7f00000013c0)=""/177, 0xb1}, {&(0x7f0000001480)=""/169, 0xa9}], 0x2, &(0x7f0000001580)=""/98, 0x62, 0x8}, 0xfffffffffffeffff}, {{&(0x7f0000001600)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)=""/98, 0x62}], 0x1, &(0x7f0000001740)=""/23, 0x17, 0x9}, 0x3ad0000}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001780)=""/243, 0xf3}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/51, 0x33}, {&(0x7f00000028c0)=""/121, 0x79}, {&(0x7f0000002940)=""/175, 0xaf}, {&(0x7f0000002a00)=""/45, 0x2d}, {&(0x7f0000002a40)=""/29, 0x1d}], 0x7, 0x0, 0x0, 0x9}, 0x3}, {{&(0x7f0000002b00)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/221, 0xdd}, {&(0x7f0000003c80)=""/237, 0xed}, {&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/4096, 0x1000}], 0x5, 0x0, 0x0, 0xd}, 0xc63f}, {{0x0, 0x0, &(0x7f0000006f00)=[{&(0x7f0000005e00)=""/231, 0xe7}, {&(0x7f0000005f00)=""/4096, 0x1000}], 0x2, &(0x7f0000006f40)=""/4096, 0x1000, 0x6}, 0x8}, {{0x0, 0x0, &(0x7f0000009180)=[{&(0x7f0000007f40)=""/4096, 0x1000}, {&(0x7f0000008f40)=""/227, 0xe3}, {&(0x7f0000009040)=""/174, 0xae}, {&(0x7f0000009100)=""/69, 0x45}], 0x4, 0x0, 0x0, 0x9}, 0x5}, {{&(0x7f00000091c0)=@l2, 0x80, &(0x7f0000009380)=[{&(0x7f0000009240)=""/52, 0x34}, {&(0x7f0000009280)=""/114, 0x72}, {&(0x7f0000009300)=""/124, 0x7c}], 0x3, &(0x7f00000093c0)=""/146, 0x92, 0x2e5}}], 0x9, 0x10000, &(0x7f00000096c0)={0x77359400}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) sendmsg$can_raw(r0, &(0x7f0000009800)={&(0x7f0000009700)={0x1d, r1}, 0x10, &(0x7f00000097c0)={&(0x7f0000009740)=@canfd={{0x2, 0x8, 0x9, 0x80}, 0xd, 0x3, 0x0, 0x0, "e596f4194834aacaf2df25870dbfdf4f28af6b3277228eb632da3454fe69339a18580b33deb87ad447c707a95c0c1cc0bd6bb4354b2ed9526e50fbf106490be6"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 20:54:04 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="0000000001000400000000000000000033a5e2584ec6a599867df0e826f69fb42fb2a6e80ddf5961"], 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x1d}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000280000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00ebffff070000000000000000010000c4d981ae211e6951"], 0x48}, 0x1}, 0x0) 20:54:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x41, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 171.013330] binder_alloc: 11654: binder_alloc_buf size 351843720889352 failed, no address space [ 171.022430] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 171.031647] binder: 11654:11656 transaction failed 29201/-28, size 0-351843720889345 line 2967 20:54:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x700, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x40086200, &(0x7f0000000000)) 20:54:04 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x1, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x2}}, 0x0, 0x0, r0, 0xb) r3 = dup2(r1, r2) mq_unlink(&(0x7f0000000100)='\\.vboxnet0*{&keyringvmnet0.selfppp0:\x00') connect$pptp(r3, &(0x7f0000000140)={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x1e) 20:54:04 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r1, &(0x7f0000000380)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x100, 0xfffffffffffffd3f) sendto$inet(r1, &(0x7f0000000040)='$', 0x1, 0xc870a3c305c5634f, &(0x7f0000257ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendto$inet(r1, &(0x7f0000000240)=',', 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr}, 0x10) recvfrom$inet(r1, &(0x7f0000000140)=""/176, 0xffffffffffffffca, 0x40012021, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x709000) [ 171.060362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.068334] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 171.094982] binder: undelivered TRANSACTION_ERROR: 29201 20:54:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x43, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000001040000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:04 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0xc0045103, &(0x7f0000000000)={0x400ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000040)=""/56) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f00000000c0)) 20:54:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000000)={0xffffffff, 0x0, {0x1, 0x1, 0x59080000000000, 0x3, 0x8001}}) ioctl(r1, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0xc3e5, 0x1f, 0x8, 0x7fffffff, "c53b5a411a3e6b99d226e5a74e9a6090cb61c4c37832b6ea88d77ad1a5b96050"}) dup3(r1, r0, 0x0) [ 171.208205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:54:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x800}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000700)=@broute={'broute\x00', 0x20, 0x1, 0x340, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'bcsh0\x00', 'ip6_vti0\x00', 'nr0\x00', 'veth1_to_bridge\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x100, 0x260, 0x2b0, [@limit={'limit\x00', 0x20, {{0x7fffffff, 0x10001}}}, @ip={'ip\x00', 0x20, {{@empty, @loopback=0x7f000001}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x3b8) [ 171.353724] ebt_limit: overflow, try lower: 2147483647/65537 [ 171.368707] ebt_limit: overflow, try lower: 2147483647/65537 20:54:04 executing program 7: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="00000a00ffffffffffffaaaaaaaaaabbaaaaaaaaaa00ffffffffffffaaaaaaaaaa00ffffffffffff0700c2000000aaaaaaaaaaaa0180c2000000aaaaaaaaaabb"]) 20:54:04 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0xffffa888], [], {@ipv6={0x86dd, {0x0, 0x6, "110c11", 0x30, 0x21, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x6, [], {0x41, 0x6, "cb155d", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80}}}}}}}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x6000000000000, 0x400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x3, r2, 0x10, 0x1, @in6={0xa, 0x4e20, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffff64e}}}, 0xa0) 20:54:04 executing program 5: r0 = memfd_create(&(0x7f0000000000)=',cpuset\x00', 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40440, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x4) write(r0, &(0x7f0000000140), 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x6, 0x4) [ 171.569546] binder_alloc: 11689: binder_alloc_buf size 4611686018427388936 failed, no address space [ 171.579272] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 171.588193] binder: 11689:11690 transaction failed 29201/-28, size 0-4611686018427388929 line 2967 [ 171.610766] binder: undelivered TRANSACTION_ERROR: 29201 [ 171.710582] dccp_v6_rcv: dropped packet with invalid checksum [ 171.765992] dccp_v6_rcv: dropped packet with invalid checksum 20:54:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x100000000805, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0xfff, &(0x7f0000ffc000/0x4000)=nil, 0x1) shutdown(r0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @remote}, &(0x7f0000000100)=0xc) listen(r1, 0x800006) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x2078cc7b105a22c8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000745ffc), &(0x7f0000b96000)=0x4) 20:54:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235004000000f306466420ff7f266ba4200b802000000ef66460f2fcdb9bf080000b8c21b0000ba000000000f30c422dd3ffb2665400f232566baf80cb8f3139a8def66bafc0cec430fc718f2470f2157", 0x57}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 20:54:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x563a, 0x101000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)={0x5}) ioctl$KVM_RUN(r4, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) 20:54:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x43, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000001040000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:05 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x30, &(0x7f0000000300)=ANY=[], 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x890b, &(0x7f0000000180)={@mcast1={0xff, 0x1, [], 0x1}}) close(r0) 20:54:05 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9d6f, 0x10040) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$VT_RELDISP(r1, 0xb701) socket$can_raw(0x1d, 0x3, 0x1) 20:54:05 executing program 7: r0 = dup(0xffffffffffffffff) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/61) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10) r2 = dup3(0xffffffffffffffff, r1, 0xfffffffffffffffd) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000000)) prctl$intptr(0x21, 0x400) [ 171.970660] binder_alloc: 11733: binder_alloc_buf size 4611686018427388936 failed, no address space [ 171.980149] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 171.989114] binder: 11733:11734 transaction failed 29201/-28, size 0-4611686018427388929 line 2967 20:54:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000003400000325bd7004fedbdf2520000fed135cee4f546935e2caed24b4e362cc974361c4259c6d0f271b4dbec97d2ea11579d179c6b7dee13d69f7881ac7"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$TCXONC(r1, 0x4008af04, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x6) symlinkat(&(0x7f0000000600)='./file0\x00', r1, &(0x7f0000000640)='./file0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454da, 0x0) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0xab, 0x311001) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000200)={"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"}) accept$packet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x14) [ 172.056512] binder: undelivered TRANSACTION_ERROR: 29201 20:54:05 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='%\x00', 0xfffffffffffffffe) set_mempolicy(0x0, &(0x7f0000000140)=0x3, 0x2457) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)=',!-\x00') r1 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000580)) 20:54:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60a0e72000031100fe8000000000000000000000000000aafe000000000000000000ff07000000000000000000002489335b060a0e785301b3cbadd47cac307df0352f750dad7201a2ba1223d0d8d2e0be175519ff6cc089e671aded750a1c36df165e845b280eccfef58cda408d945a902e9ece93b1faaf04b4bd3a92b06773c3dd59a2952d7c0fbe817e93c450998a05fd81c707497f010fe063403f5e650a0169d30c2e9b2b563acfdc6f3ff088facd70dcdaafe63636a904c96ff1f0e5642b6d56b71cbd9859892305af5503006a724c0937719729574e20cd118c0000"], &(0x7f0000000000)) 20:54:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f0000ff5000)={&(0x7f00002a0e50)={0x1c, 0x18, 0x3, 0x3, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic='\n']}]}, 0x1c}, 0x1}, 0x0) 20:54:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x43, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000001040000000000", @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:05 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:05 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x5, 0x30, 0x2, 0xa00000}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="002a0600b70003009a5c3dfaf82b6787bd78c4d1dc000000ff7f7f000000"], 0x16) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x2e1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x4}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_team\x00', 0x10) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x40004e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0xd0, 0x80000000, 0xfffffffffffffff7, 0x4, 0x2, &(0x7f00000001c0)='ifb0\x00', 0x5, 0x1000, 0x86}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_team\x00', 0x10) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 20:54:05 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x5, 0x4) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f00000000c0)={0x4, 0x775}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @broadcast=0xffffffff}, {0x0, @random="c3037158ec99"}, 0x8, {0x2}, 'ip_vti0\x00'}) 20:54:05 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x9, 0x440) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000000), 0x1fe, 0xffffffffffffffff) 20:54:05 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) fsetxattr(r0, &(0x7f0000000000)=@random={'user.', 'sha384-avx2\x00'}, &(0x7f0000000040)=']%em1vmnet0@procwlan1^md5sum&\x00', 0x1e, 0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002040)=[{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001900)="f0b6a2e05e3cce50989fad8f8bc6563f", 0x10}], 0x1, &(0x7f0000001a80)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001400)={&(0x7f0000f7ffa8)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x6, 0x1, {0xffffffffffffffff, 0x0, 0x1f, 0x3, 0x4}}) 20:54:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, &(0x7f0000000080)=""/223, 0xdf, 0x10040, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8000, 0x10000) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r4, 0x0, 0x0, 0x73e0) sendfile(r2, r4, &(0x7f00007ed000), 0x1000) [ 172.295523] binder_alloc: 11772: binder_alloc_buf size 4611686018427388936 failed, no address space [ 172.305064] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 172.314015] binder: 11772:11777 transaction failed 29201/-28, size 0-4611686018427388929 line 2967 20:54:05 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setflags(r1, 0x2, 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x80000000}, 0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000400)) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r3}) setsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000040)="9ef13ae8c2c98b43ed866f8d0f9f79f62cb6d45bbf8718885bcb1af951fac3edf003afcd750b7384d652bdaef81c3706104fb512d3f48840", 0x38) r4 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x0, 0x20a80) ppoll(&(0x7f0000000300)=[{r4, 0x8000}, {r2, 0x2}, {r0, 0x80}, {r1, 0x401}, {r2, 0x4000}, {r2, 0x10}, {r0, 0x1000}, {r1, 0x8}, {r0, 0x5}], 0x9, &(0x7f0000000380), &(0x7f00000003c0)={0x5}, 0x8) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000040), 0x0, [{}]}, 0x88) 20:54:05 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cuse\x00', 0x2801, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000680)=ANY=[]) memfd_create(&(0x7f00000000c0)='\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(0xffffffffffffffff, 0xae45, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000440)=""/133) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) [ 172.414172] binder: undelivered TRANSACTION_ERROR: 29201 [ 172.497705] kernel msg: ebtables bug: please report to author: Wrong nr of counters [ 172.546772] kernel msg: ebtables bug: please report to author: Wrong nr of counters 20:54:06 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@fragment, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f000037aff8)=@fragment, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:54:06 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2275, 0x80fd01) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x3ff, 0x4) 20:54:06 executing program 6: syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x20, 0x2) r0 = socket$inet6(0xa, 0x2, 0xfffffffffffffffe) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}]}, 0x10c) socketpair(0x13, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xe98, 0x1ff, 0x3, 0x80000000, 0x5, 0x5, 0x400, 0x9, 0x2, 0x9, 0x800}, 0xb) 20:54:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:06 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2}, 0x10) io_setup(0x8, &(0x7f0000000000)) 20:54:06 executing program 7: clock_gettime(0x2, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, r0+10000000}, &(0x7f0000000140)) clock_gettime(0x7, &(0x7f0000000200)={0x0, 0x0}) clock_nanosleep(0x7, 0x1, &(0x7f0000000040)={r1, r2+30000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 20:54:06 executing program 5: r0 = socket$packet(0x11, 0x10000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x4000000000080003, 0x0) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)}}], 0x1, 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/59, 0x3b, 0x10102, &(0x7f0000000080)={0x2, 0x4e24, @multicast2=0xe0000002}, 0x10) [ 172.950096] binder: 11825:11827 got transaction with invalid offsets ptr 20:54:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = semget(0x3, 0x4c0b05139cb7e414, 0x10) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x4]) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000000)={0x1c, 0x28, 0x10000000000005, 0x0, 0x0, {0x1}, [@generic="7b6c6e6602"]}, 0x1c}, 0x1}, 0x0) 20:54:06 executing program 6: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r0 = socket(0x15, 0x80005, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x114, 0x2710, &(0x7f0000000000), &(0x7f00000000c0)=0x4) sysfs$1(0x1, &(0x7f0000000040)='/dev/qat_adf_ctl\x00') [ 173.007546] binder: 11825:11827 transaction failed 29201/-14, size 0-1025 line 2995 20:54:06 executing program 5: mprotect(&(0x7f0000dfd000/0x200000)=nil, 0x200000, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getdents64(r0, &(0x7f0000000340)=""/160, 0xa0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0xfff, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x88) socketpair(0x2, 0x6, 0x7, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') pread64(r3, &(0x7f0000000040)=""/8, 0xff5c, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000080)={0xfffffffffffffe00, 0x3, 0x10000, 0x0, 0x0, [], [], [], 0xffffffff}) 20:54:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x80000000, 0x1, 0x3, 0x3, 0x60}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r1, 0x6c, "5249985d420c8fbb6a16d7ed46a53071f98e20da35775b0590c72ad7067207d1135843b299e342a44875f5565536e18d991e95e19588c6323bcdd0a8f1c977ed8c9ee3e73ddc7eca8602b5918c28555757793b2e5bf99cb313fc71b3ba6260e8ecbee56c86ffbe726cfa52a2"}, &(0x7f0000000240)=0x74) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@can={0xc, {{0x4, 0x2, 0x1}, 0x6, 0x1, 0x0, 0x0, "276199a48b7dc4f5"}}}}, &(0x7f00000016c0)={0x0, 0x0, [0x0, 0xffffffffffffffff]}) [ 173.059219] binder: undelivered TRANSACTION_ERROR: 29201 20:54:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x8000}, &(0x7f0000000140)=0x8) sendto$inet6(r1, &(0x7f000087dffe)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) close(r1) 20:54:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}) set_tid_address(&(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x1, 0xfdfd, &(0x7f0000000040)="ef"}) 20:54:06 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(pcrypt(rfc4106-gcm-aesni))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106-gcm-aesni)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc4106(generic-gcm-aesni))\x00'}, 0x58) [ 173.223352] binder: 11855:11856 got transaction with invalid offsets ptr 20:54:06 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) clone(0x0, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) socket$pppoe(0x18, 0x1, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x8000400141042, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000140)) write$P9_RATTACH(r0, &(0x7f0000000180)={0x14, 0x69, 0x2, {0x10, 0x3, 0x4}}, 0x14) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x1, 0xb5, 0x2, 0x0, 0x9, 0x0, 0x40, 0xa50a, 0x7, 0xffffffff00000001}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x3, 0x6987, 0x2, 0xd86}}) mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x0, 0x11, r0, 0x0) waitid(0x0, 0x0, &(0x7f0000000000), 0x4000000c, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000000c0)={0xbb, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e20, 0x0, 'dh\x00', 0x14, 0x80000001, 0x66}, 0x2c) [ 173.290828] binder: 11855:11856 transaction failed 29201/-14, size 0-1025 line 2995 20:54:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 173.346547] binder: undelivered TRANSACTION_ERROR: 29201 20:54:06 executing program 5: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4)={0x10}, 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840000000000000000000000000000000046659a62290ffc380c2dbfc75e89e106ba4206274d760dfe0597260617e101000006000000001cb4e2bf501db1bb9427ecd8337f6d63cc8769c29c4d91b00ffff0be48b748d3050bc1700612dbc3080c91125fa158cf0d70309f7f19007c8262d732940142ab1cf90b11e0141c63f5f94035"], 0x83}, 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f000053b000)={0xa}, 0x1c) r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x101, 0x1) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000002c0)={@any=0xffffffff}) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000240)=""/83) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x81, 0xa, [0x1000, 0x4, 0x4, 0x3, 0xfff, 0x80000001, 0x81, 0x819, 0x8, 0x100000001]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0xb0, &(0x7f0000000100)=[@in={0x2, 0x9, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e22, 0x8000, @remote={0xfe, 0x80, [], 0xbb}, 0xff}, @in6={0xa, 0x4e20, 0x1, @empty, 0x7}, @in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e20, 0x9, @loopback={0x0, 0x1}}]}, &(0x7f0000000200)=0x10) [ 173.482264] binder: 11879:11881 got transaction with invalid offsets ptr [ 173.507382] binder: BINDER_SET_CONTEXT_MGR already set 20:54:06 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x11000000000b) r1 = dup3(r0, r0, 0x80000) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000000c0)) ioctl(r0, 0xfff, &(0x7f0000000100)="a0d1f6c8b558b71089564f71ad147cac8138e683b5c85074d345e0c8eca92b93ce783bb534d1aa53a23eceda5f7f0aa070822e4a804344047504e67aa134b02ba10843227b3e42698a37fae6a0c09351b182c3b28edfa2d092e4209bcdcb2b72c293355558eec523f0ee30ef71bcaf69ff1cb3e68e64264a2888147fe81ea8a53a1ffa2eb7ec1a6cf99ef9ad381ff0e7c97a70cddd3a07c3a0c3a52fbe3d27fba111e171609d8a28b070ac974b628f3cd9f03af32127e74bdae96f20a24c7fd7") socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 173.531255] binder: 11879:11881 transaction failed 29201/-14, size 0-1025 line 2995 [ 173.541392] binder: 11865:11872 ioctl 40046207 0 returned -16 [ 173.569755] binder: 11865:11872 ioctl c0306201 204edfd0 returned -14 [ 173.587679] binder: undelivered TRANSACTION_ERROR: 29201 [ 173.590885] binder: 11865:11872 ioctl c0306201 20007000 returned -14 [ 173.655385] binder: 11865:11872 ioctl c0306201 20000000 returned -14 [ 173.720202] binder_alloc: binder_alloc_mmap_handler: 11865 20010000-20014000 already mapped failed -16 [ 173.766793] binder: 11865:11872 ioctl c0306201 204edfd0 returned -14 [ 173.793774] binder: 11865:11901 ioctl c0306201 20000000 returned -14 [ 173.812246] binder: 11865:11872 ioctl c0306201 20007000 returned -14 20:54:07 executing program 7: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500)='/dev/urandom\x00', 0x80000, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00'}, 0x10) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x0, 0x401, 0x7, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc297, 0x0, 0x1, 0xacf, 0x1, 0x3ff, 0x9, 0x0, 0x200, 0x8d0c, 0x0, 0x0, 0x80000001, 0x0, 0x100000001, 0x4c134760, 0x1000, 0x0, 0x9, 0x6e, 0x1, 0x0, 0x0, 0x40, 0x1000, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x4, @perf_config_ext={0x100000000, 0x9fb4}, 0x42, 0x0, 0x0, 0x2, 0x6, 0x77}, r1, 0xc, r0, 0x8) flistxattr(r0, &(0x7f0000000680)=""/243, 0xf3) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x1, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x4100, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000180)=0x9) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x0, 0xf771, @ipv4={[], [0xff, 0xff], @rand_addr}, 0x1}, {0xa, 0x4e20, 0xffff, @loopback={0x0, 0x1}, 0x3315}, 0x5, [0x5, 0x3, 0x0, 0x0, 0x7, 0x9, 0x0, 0xfff]}, 0x5c) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000540)=ANY=[], &(0x7f0000000240)) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000380)={0x0, 0xffff}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000400)={r5, 0x9}, &(0x7f0000000540)=0x8) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x8200) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000005c0)=0x3b4) r8 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r8, 0x0) readv(r6, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x1f, 0x3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000200)=0x8) clock_gettime(0xc00bb6c1dee3d5b9, &(0x7f00000004c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) 20:54:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [], [0x0, 0x4b564d02]}) 20:54:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:07 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x94901, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x710, 0x70bd2c, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x10401, 0x0) fremovexattr(r0, &(0x7f0000000040)=@random={'security.', '\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x101000, 0x0) 20:54:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000090607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x6c0, 0x0]}, 0x8) 20:54:07 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x8001, "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", 0x43, 0x0, 0xffffffff, 0xb377, 0xfffffffffffffffb, 0xffffffffffffff8c, 0x1, 0x1}, r1}}, 0x128) r2 = socket(0x14, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="080002000000a6cba4f55392552bd31f1bd4d613290000"], 0x20}, 0x1}, 0x0) 20:54:07 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000640)=@newsa={0xf8, 0x10, 0x1, 0x0, 0x0, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@local={0xac, 0x14, 0x14, 0xaa}}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x3c}, @in=@multicast1=0xe0000001, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16}]}, 0xf8}, 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x9, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x1000}, r3}}, 0x30) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0x1) [ 174.042339] binder: 11949:11951 got transaction with invalid offsets ptr [ 174.066455] netlink: 'syz-executor0': attribute type 1 has an invalid length. 20:54:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x20000007, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)) close(r1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) fsetxattr(r3, &(0x7f0000000240)=@known='trusted.syz\x00', &(0x7f0000000040)='em1pwlan0-!\x00', 0xc, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x6, 0x1, 0x3, 0x2, 0x1, 0x8, 0x80}, 0x20) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) [ 174.096752] binder: 11949:11951 transaction failed 29201/-14, size 0-1025 line 2995 [ 174.123924] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 174.135851] binder: undelivered TRANSACTION_ERROR: 29201 20:54:07 executing program 5: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000240)) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1000082) r3 = memfd_create(&(0x7f0000000140)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x1081806) accept$inet6(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) sync() pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 20:54:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[]], 0x0, 0x0, &(0x7f0000000300)}) [ 174.157979] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 20:54:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', &(0x7f0000000140)=""/233, 0xe9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89fb, &(0x7f0000000100)={"626f6e643000000000041300", @ifru_names="00a07000"}) 20:54:07 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0f015d082e0f3566b9800000c00f326635001000000f300f01d1d9fa660ffacabaf80c66b884cdab8066efbafc0c66ed9a06000000baf80c66b88f27ba8c66efbafc0cb000eeba4000b800e0ef", 0x4d}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:54:07 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0xf, &(0x7f0000a0c000)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@broadcast=0xffffffff}}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, 0xe8) bind$inet(r1, &(0x7f0000a0dff0)={0x2, 0xce20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x123402, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000180)={0x6, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @remote}, {}]}) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, &(0x7f0000000040)) 20:54:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000080)='G', 0x1}], 0x1, 0x0) [ 174.306456] binder: 11978:11979 got transaction with invalid offsets ptr 20:54:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f06762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f0000000040)="f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000480)}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) [ 174.369198] binder: 11978:11979 transaction failed 29201/-14, size 0-1025 line 2995 20:54:07 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x80000001, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) poll(&(0x7f0000000100)=[{r0, 0x200}, {r0, 0x4}, {r1}], 0x3, 0x3f) r2 = dup2(r1, r1) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x10001) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r3 = accept$alg(r1, 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000140)) io_submit(r4, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x8, 0x0, r3, &(0x7f000079a000)}]) [ 174.431986] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.467482] binder: BINDER_SET_CONTEXT_MGR already set 20:54:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="2400000058001f00ff07f4f9002304000a04f51108000100020100020800038001000000", 0x24) [ 174.496440] binder: 12003:12004 ioctl 40046207 0 returned -16 20:54:07 executing program 7: r0 = socket(0x19, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0xec, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0), 0x10) [ 174.553322] binder: 12003:12004 transaction failed 29189/-22, size 0-0 line 2852 [ 174.559367] binder: 12010:12013 got transaction with invalid offsets ptr [ 174.583954] binder: 12003:12004 unknown command 0 [ 174.593227] binder: 12003:12004 ioctl c0306201 20000140 returned -22 [ 174.629421] binder: 12010:12013 transaction failed 29201/-14, size 0-1025 line 2995 [ 174.652972] binder_alloc: binder_alloc_mmap_handler: 12003 20001000-20004000 already mapped failed -16 [ 174.671903] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.683898] binder: 12003:12026 unknown command 0 [ 174.689613] binder: BINDER_SET_CONTEXT_MGR already set [ 174.697196] binder: 12003:12026 ioctl c0306201 20000140 returned -22 [ 174.699997] binder: 12003:12004 ioctl 40046207 0 returned -16 [ 174.712100] binder: 12003:12028 got reply transaction with no transaction stack [ 174.712787] binder: send failed reply for transaction 175 to 12003:12026 [ 174.719664] binder: 12003:12028 transaction failed 29201/-71, size 0-0 line 2759 [ 174.751876] binder: undelivered TRANSACTION_COMPLETE [ 174.757118] binder: undelivered TRANSACTION_ERROR: 29189 [ 174.762647] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.797910] binder: undelivered TRANSACTION_ERROR: 29189 20:54:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = socket(0x1e, 0x4, 0x0) recvfrom$inet(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f0000000000)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x264, 0x0, 0x3, 0x3}, 0x1c) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) 20:54:08 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) select(0x40, &(0x7f0000000040)={0x2, 0xffffffff, 0x3, 0x80000001, 0x1, 0x4618bb84, 0xc9, 0x5}, &(0x7f0000000080)={0x9, 0x1, 0x5, 0x5, 0x80000000, 0x1f, 0x200, 0x8}, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0xb29, 0x2, 0x0, 0x0, 0x7}, &(0x7f0000000100)={0x0, 0x7530}) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0xc003, 0x0, 0x0, 0x0, 0x1200020) 20:54:08 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x802, 0x0) unshare(0x400) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000140)={"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"}) ioctl(r1, 0x0, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x6, 0xc3d) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "c2afae9f6755edc34a320da23c8d14a30fc23c9fc06b607b41f5ff138187cfe659954d09369aa3472dead3524cc148a777097c9293726b54f4e3729e0863ef4e307f7dd1cebf840a0b38af1bd752529f897f527a4530eb968498c9a3cd04bf61d0e24e45bb084a802d02b1f033bb8b00e9f4daabddbd5acf9f2220aa356d85db7b7816fa6f5683c43402452b7a0ec790d9c59c2c7a2fc3ae11fecc5b224bf310959b958ed81d6adb7d8d2b7cbd0970cb65"}, 0xb5) fcntl$getownex(r2, 0x10, &(0x7f0000000540)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f00000000c0)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") connect$inet6(r2, &(0x7f0000000580)={0xa, 0x4e20, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) ioctl$int_in(r0, 0x80000080045010, &(0x7f00006e1000)) 20:54:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000080)="47504c5d7b28757365720f00", 0x2) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'rdma', 0x20}, {0x2b, 'rdma', 0x20}, {0x0, 'cpu', 0x20}, {0x2b, 'cpu', 0x20}]}, 0x16) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000240007031dfffd946f61830020200a0009000000ff1c85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 20:54:08 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x100) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)="c6caef3735cc4f2b59929f0944058d2e9291f1405effe089b96b06ca2ec2e419bc1e8cfe138efdd9bc13d6832026633967b6cc272947057e9f43443ba2007d0f5947701491c76f2e5a475fe9470716f9489a162e6f6ce6ccbf1e42b78f82d34c28f0c3944fce1638a684cd54cd38ce7e2b7216c0693756e8a01ae61ac7313519a65d6ff2140e70ae05448b20f8da01b963efdc63580570a536c78622076e649a751cda31cc7d7849db0dca7ac9e64cb62b7201bb950b7f5cf39aaaab8a89a4a8bb", 0xc1, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x1010008) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback={0x0, 0x1}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3ff, 0x0, 0xa0, 0x0, 0x8, 0x0, r4}, {0x5, 0x800, 0x7, 0x10000, 0x5, 0x8, 0xfffffffffffffff9, 0x1000}, {0x8000, 0x7fffffff, 0x605, 0x3}, 0x17, 0x6e6bc0, 0x2, 0x0, 0x1, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d5, 0x32}, 0xa, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x3}}, 0xe8) dup3(r0, r2, 0x3) 20:54:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) r2 = getpid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e000000040000001005000098020000b8030000000000000000000000000000780400007804000078040000780300007804000004000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003802980200000000000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000800800000001000000000000005001686173686c696d697400000000000000000000000000000000000000000279616d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e40000000000000fcffffffffffffff01000000030000000700000004000000ff0f00000858000007000000000000006000434c5553544552495000000000000000000000000000000000000000000000000000aaaaaaaaaa0d02000e0016000e000b002100080015002200140007000c00160029002c003400240021000000000000000000000108000000000000000000000000000001ffffff00ff0000ff697036746e6c3000000000000000000076657468315f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000ff0003010000000000000000000000000000f8002001000000000000000000000000000000000000000000000000300061680000000000000000000000000000000000000000000000000000000002000000ce00000000000000000000003000616800000000000000000000000000000000000000000000000000000000fdffffff09000000000000000000000028005345540000000000000000000000000000000000000000000000000000014ae7d80800040600ac141413ac1414aaffffff00ff0000ff6263736830000000000000000000000069703667726530000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000ff00032a00000000000000000000000000009800c000000000000000000000000000000000000000000000000000280053594e50524f5859000000000000000000000000000000000000000000000120090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x570) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000340)={0x206, &(0x7f0000000300)=[{0x40, 0x81, 0xe864, 0x5}, {0xfffffffffffff804, 0x0, 0xdb, 0x8000}, {0x8, 0x10001, 0x100000001, 0xfffffffffffeffff}]}, 0xfffffeca) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) ptrace$poke(0x4, r7, &(0x7f0000000780), 0xc9) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={"6272696467653000800000000040f400"}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/mcfilter\x00') alarm(0x7fffffff) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x1, 0x81}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000280)={r9, 0x7}, &(0x7f0000000840)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) accept(r4, &(0x7f0000000880)=@in={0x0, 0x0, @multicast2}, &(0x7f0000000900)=0x80) syz_open_pts(r10, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000740)={@multicast1, @dev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000003c0)={@local={0xfe, 0x80, [], 0xaa}, r11}, 0xfffffffffffffe79) ioctl$FIONREAD(r8, 0x541b, &(0x7f0000000040)) accept4(r6, &(0x7f0000000940)=@hci, &(0x7f0000000700)=0x2c4, 0x20080000) getsockopt$inet6_int(r4, 0x29, 0x50, &(0x7f0000000000), &(0x7f0000000040)=0x4) kcmp(r2, r3, 0x0, r1, r1) [ 175.205647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 175.220936] binder: 12042:12046 got transaction with invalid offsets ptr 20:54:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001640)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000004c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x1c, r1}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$mice(&(0x7f0000001580)='/dev/input/mice\x00', 0x0, 0x10000) r5 = getpid() stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000001a80)=[{&(0x7f0000001740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000017c0)="fe539202d8ef7740120bdb827f2a280e0c040059164af67c03dcb3f3f39ca0049f0e255e7712ddfe84a0580be1380e1a75c82830b8506e10c590f37544d269d06ef476a781b376e57cd073fbfad77665023307754c0e7f041d9a05feea657c84ab2cddb5b3d768956607d6f8e04d8e0777866748ef1dee551f34dba91f8816e9306ce2b51668440a40117dbb80bd416017a272693ecd15c58ad2170987fe3b649d1a95186be68017375d2b36818570a64a190b2958b21241873933ff278fa51147170ebe91066a4f7a7492f096161fd93fc3c294cd4d41be0f51fc3f8425576d5c688eded45fc7d3634db59c6d054229bed10cbc", 0xf4}, {&(0x7f00000018c0)="67f30a5fec44490eb9c29636c1d732f98fd1c6e417773203f3d77133cefcb475037e75558a075942b7c6d795229f32a332e2748f073de81003d934cc209d8ea9b105e1d7e09a8347d8e6dafaa1ad25f83bae510cb6b22a7059ee69639e5093f777c58ac3ae06029cd885bb00c6520a4f2c1bdf2db45122fc4b3793f5d584edc0953330b4d0e5013e301db178e5840f1aacfc", 0x92}], 0x2, &(0x7f0000001a40)=[@cred={0x20, 0x1, 0x2, r5, r2, r6}], 0x20, 0x4000800}], 0x1, 0x20000000) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) write$vnet(r7, &(0x7f0000000140)={0x1, {&(0x7f00000002c0)=""/250, 0xfa, &(0x7f00000003c0)=""/233, 0x0, 0x3}}, 0x68) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x787) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x60b) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0xe3) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r9 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) recvmsg(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000500)=""/84, 0xf}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000000c0)=""/50, 0x32}, 0x0) [ 175.251658] binder: 12042:12046 transaction failed 29201/-14, size 0-1025 line 2995 [ 175.269965] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.277159] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.281279] binder: undelivered TRANSACTION_ERROR: 29201 20:54:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:08 executing program 0: mprotect(&(0x7f0000033000/0x3000)=nil, 0x3000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x8000000000004002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2001, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0x6d) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x3e00406000) 20:54:08 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x8000000000000004, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x8, 0x5, 0x7, 0x3ff, 'syz1\x00', 0x3}, 0x3, 0x3, 0x7, 0x0, 0x3, 0x2, 'syz0\x00', &(0x7f0000000040)=[':lo\x00', 'lo/\x00', '/dev/snd/controlC#\x00'], 0x1b, [], [0x0, 0x2, 0x100000000, 0xff]}) 20:54:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f00000005c0)={0x5, 0x70, 0x5, 0x7f, 0x800, 0x4, 0x0, 0x20, 0x106, 0xc, 0x5, 0x7, 0x2, 0x5, 0xabb, 0x98, 0x7, 0x4, 0x5, 0x8, 0x200, 0xff, 0xfffffffffffffb31, 0x8, 0x401, 0x6, 0x2, 0x0, 0x1, 0x10001, 0x0, 0x4, 0x5, 0xcc5, 0x0, 0x3, 0x3, 0x0, 0x0, 0x2, 0x5, @perf_bp={&(0x7f0000000180)}, 0x10000, 0x6, 0x6, 0x7, 0xffffffff, 0x8, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x7) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001000000000000000000ffff7f0000000000000000"]) r4 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2, 0x80800) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000680)={0x0, 0x2}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000700)={r5, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0xffffffffffff4961}, 0x90) r6 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x4, 0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000640)={0x0, 0x0}) fcntl$setownex(r6, 0xf, &(0x7f00000007c0)={0x1, r7}) getpgrp(r7) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004020000000800004e23700d4ab51d59768870e39b6d9414d91718c987154408baa0751b92526bc7de8389d2a63a4078e038a8d98c8ecc"]) 20:54:09 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00001ed000/0x4000)=nil, 0x4000, 0x0, 0x4012, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f00001f0000/0x10000)=nil, 0x10000}, &(0x7f0000000040)=0x10) [ 175.803813] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 175.819307] binder: 12061:12062 got transaction with invalid offsets ptr [ 175.826486] device bridge_slave_1 left promiscuous mode [ 175.832542] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.837041] binder: 12061:12062 transaction failed 29201/-14, size 0-1025 line 2995 20:54:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:09 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0xfffffffffffffff7, 0x4, 0x13015ff9, "5c02c14ab7ee623ce8e7c7fe1f137b921525a79280499f8b9f503b68b6f6cc1c62b54a64201896b934034d14322e972a94a212beff590e7205577ed99af4c0c663c13bf2d89ab65d71fd8abc33e094c1"}, 0xd8) write$cgroup_int(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2d2fd5f5"], 0x4) [ 175.868288] binder: undelivered TRANSACTION_ERROR: 29201 [ 175.938991] device bridge_slave_0 left promiscuous mode [ 175.945262] bridge0: port 1(bridge_slave_0) entered disabled state 20:54:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x40, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r1, 0x1) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4800, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x6) 20:54:09 executing program 0: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f00003b6ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd8000), &(0x7f0000e7fffc), 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x0, 0x0) futimesat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0x7530}}) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000080)) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xee) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) prctl$seccomp(0x16, 0x1, &(0x7f00000000c0)={0x0, &(0x7f00000001c0)}) 20:54:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:09 executing program 7: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r0 = socket(0x10, 0x802, 0x0) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x0, 0x13db187881c6980c}, 0xc) r1 = getpid() r2 = getpgid(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4300, 0x0) fchmodat(r3, &(0x7f0000000100)='./file0\x00', 0x1a) capset(&(0x7f0000000040)={0x19980330, r2}, &(0x7f0000000080)={0x7fffffff, 0xfff, 0x7, 0x40000000000, 0x3, 0xffffffff}) 20:54:09 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x4, 0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000100)={0xfffffffffffffffc, 0x1, 0x81, {r1, r2+10000000}, 0x7dcc, 0x20}) r3 = socket(0x10, 0x803, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x1}, 0xb) sendto(r3, &(0x7f0000cfefee)="120000001200bd00007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 20:54:09 executing program 6: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x2000, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x0, 0x81, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x7fff, 0x0, 0x4}}) 20:54:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 176.128673] binder: 12104:12106 got transaction with invalid offsets ptr 20:54:09 executing program 1: semget$private(0x0, 0x0, 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x2, 0x200000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x2}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r4, 0x1000}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={r4, 0x7}, &(0x7f0000000180)=0x8) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x5) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fchmod(r3, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000640)=0x1) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = request_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000500)='tls\x00', 0x0) add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)="f2b1487db156f6239683a4c84906ac523502f71528c9080727b328d5ffb853c2136362cda6350d1b3f4451388349d35f1319e5a1fce62b5177103c564967e99c497df6d1852d036c63bc6bfcfcd8274b08ea050d493828f375579f23fe72a11f895ee28fcf4427bd8cddd900c7d7436db869329d24bcc3bbdd148225e5e4baebb5213ce3667a0d99e48aa80038967668736596de363f67149343d1fbc057469bf4902f79984b0cddde52cf90aa82c018d5fc6ee6e6bac277c24176e689a776", 0xbf, r6) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000005c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0xc}, 0x3a6d17bf}, {0xa, 0x4e20, 0xb1a, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffff6861}, r7, 0x6}}, 0x48) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200480, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r8, 0x4010aeab, &(0x7f0000000080)={0xc9}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000015000)=0x4, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20}, 0x10) listen(r0, 0xfffffffffffffffe) 20:54:09 executing program 7: r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00003f3fd5)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x4000, 0x4e21, 0x8}}}}}, 0x0) 20:54:09 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/arp\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1, 0x400082) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000071, 0x7f04]}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') sendfile(r4, r0, &(0x7f0000000040)=0x5d, 0x79ffffffffffff) sendfile(r4, r4, &(0x7f0000000000), 0x100000000) 20:54:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x2040) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000000c0)={0x36, 0x1e, 0x8, 0x14, 0x1, 0x5, 0x2, 0x103}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000700)={0x40, {{0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}, 0x100000000}}, 0x1, 0x7, [{{0xa, 0x4e24, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x3f}}, {{0xa, 0x4e24, 0x4, @loopback={0x0, 0x1}}}, {{0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, [], 0x17}, 0x712}}, {{0xa, 0x4e23, 0x28f9, @loopback={0x0, 0x1}}}, {{0xa, 0x4e20, 0x100000001, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}, {{0xa, 0x4e21, 0x8000, @loopback={0x0, 0x1}}}, {{0xa, 0x4e20, 0x100000000, @local={0xfe, 0x80, [], 0xaa}}}]}, 0x410) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x6c, 0x0, &(0x7f0000000680)=[@acquire_done={0x40106309}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380)}}], 0x0, 0x0, &(0x7f00000007c0)}) [ 176.197330] binder: 12104:12106 transaction failed 29201/-14, size 0-1025 line 2995 [ 176.227065] binder: undelivered TRANSACTION_ERROR: 29201 20:54:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd88"]], 0x0, 0x0, &(0x7f0000000300)}) [ 176.287614] binder: BINDER_SET_CONTEXT_MGR already set [ 176.319230] binder: 12119:12121 ioctl 40046207 0 returned -16 [ 176.347791] binder: 12119:12121 transaction failed 29189/-22, size 24-8 line 2852 [ 176.364271] binder: 12132:12133 got transaction with invalid offsets ptr [ 176.385648] binder: 12119:12121 Release 1 refcount change on invalid ref 1 ret -22 [ 176.390894] binder: 12132:12133 transaction failed 29201/-14, size 0-1025 line 2995 [ 176.408196] binder: 12119:12121 BC_ACQUIRE_DONE u0000000000000000 no match 20:54:09 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000461000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x80000) 20:54:09 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x90000, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) close(r0) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000000c0)=""/69, &(0x7f0000000140)=0x45) bind$unix(r2, &(0x7f000094cff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) recvmmsg(r2, &(0x7f0000006d80)=[{{&(0x7f0000001840)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000006c80)=""/209, 0xd1}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00005c8ff8)) sendmmsg$unix(r2, &(0x7f0000000640)=[{&(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}], 0x1, 0x0) [ 176.415453] binder: 12119:12121 BC_INCREFS_DONE u0000000000000000 no match 20:54:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, r1, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, r1, 0x0) r4 = dup2(r3, r2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0xa0d, @ipv4={[], [0xff, 0xff], @rand_addr=0x2c}, 0x5}}, 0x1000, 0x8, 0xcd, 0x10001, 0x9}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000180)={r5, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x7, 0x3}, 0x90) 20:54:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d00)='cpuset.effective_cpus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000d40)={0x0, 0x7fffffff, 0xffffffffffffffff}, &(0x7f0000000d80)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000dc0)={r1, 0x4, 0x9, 0x5, 0x4, 0x1}, &(0x7f0000000e00)=0x14) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='btrfs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="f2000000a0f96b31c10cae9aff9ede951b2b757db99ea2689a4ddbb6271b87a2b3da78c328d0ba16520fcda18d14dfd4e6dd7bae7986afb7c6d785b7dc4dec0a348e1f77349c0d31de0ecf6c66cd4c6163958347c149d0773238f7cb8973213f8eeb4455c43a4a25ec1e0cc4936c419353307774cc647c03d8f71ec15f1acc1955002fff25ead9c3715cefdd47ea5c7688da8c3d439340bee59bd457de880c79a07aacf5232dfef8b331ee01109aa4d26b9b9d9ffc29b8770858b887eb6c2d327f297ca8673575e446f010bb23c07c7d2e2778f55c9a17d03b5d41c2f2d19e3d339c61a086b1049e87ca5a18cfdaa696f1a167e7d84b8b1dc8143d4cc3dd7d0ee9ef06169a3e957fe57d33cd22395ad6f43d23811b259218007606df67e8f156ebcda0d8b89b14105eea19f4b42ad2dc553c0545979fa746202fa47839ea3bc5a9594bc3afb34315f44cf9dc954243ab4c78ac5bd3b7955a9f4811cee5d2ab903b85820891ad98853d1f74e33405fb700fca0257cb73b93dd0c14c957e0004f0a17853abcc63518e3dd33d5a5b310fc7672c668f591bdcf7ec080ceb7aa840939eb88c0429c7792ca58205339012532f84c4"], &(0x7f00000000c0)=0xfa) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r4, 0x7}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e20, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x3}}}, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000c80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000cc0)={0x7, 0x8, 0xfa00, {r5, 0xffff}}, 0x10) connect$unix(r2, &(0x7f0000000c00)=@file={0x0, './file1\x00'}, 0x6e) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x0, 0xf0, 0x230, 0x230, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffffff], 'ifb0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x1d, 0x7ff, 0x4, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d2, 0x0, 0x8, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}, @ipv6=@dev={0xfe, 0x80, [], 0x12}, @icmp_id=0x67, @gre_key=0x7f}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xff000000, 0xffffff00], 'bond_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x3f, 0x6, 0xa}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x4, 0x200}}}, {{@ipv6={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @loopback={0x0, 0x1}, [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0xc8cacee2ef2d735a, 0xff000000, 0xff, 0xff000000], 'yam0\x00', 'lo\x00', {}, {0xff}, 0x0, 0x1000, 0x0, 0x20}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={0x48, 'hbh\x00', 0x0, {0x1, 0x4, 0x1, [0x47, 0x6, 0x0, 0x5, 0x7fffffff, 0x8000, 0x400, 0x4, 0x6, 0x0, 0x9, 0x3, 0x1, 0x100000001, 0x8, 0xf387ca1], 0xf}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x1, @ipv6=@loopback={0x0, 0x1}, @ipv6=@dev={0xfe, 0x80, [], 0x15}, @port=0x4e20, @gre_key=0x3ff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5d0) [ 176.476528] binder: BINDER_SET_CONTEXT_MGR already set [ 176.481990] binder: undelivered TRANSACTION_ERROR: 29201 [ 176.492964] binder: 12119:12121 ioctl 40046207 0 returned -16 [ 176.501076] binder: 12119:12140 Release 1 refcount change on invalid ref 1 ret -22 [ 176.538655] binder: release 12119:12121 transaction 186 out, still active [ 176.545849] binder: undelivered TRANSACTION_COMPLETE [ 176.597709] binder: release 12119:12140 transaction 187 out, still active [ 176.619949] binder: send failed reply for transaction 186, target dead [ 176.626840] binder: send failed reply for transaction 187, target dead [ 176.973704] audit: type=1326 audit(1531342450.318:297): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12097 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x0 20:54:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x17) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x440000) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000100)=""/192, &(0x7f00000001c0)=0xc0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x3c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8, 0xb}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'ifb0\x00'}]}, 0x3c}, 0x1}, 0x0) 20:54:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd88"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:10 executing program 5: r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x42000, 0x0) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000680)='\x00', 0x1, r3) r5 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a}, &(0x7f0000000480), 0xfffffffffffffe20, r2) r6 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='u', 0x1, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, &(0x7f0000000200)=""/5, 0x4, &(0x7f0000000240)={&(0x7f0000a3dffa)={'sha224-avx\x00'}}) io_setup(0x7fff, &(0x7f0000000040)=0x0) io_cancel(r7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000480)="ff35b387127defc8fcf3f6c101b97bc46aa4ec2acb23bfdd96dee2442453802ca6bbd8b516d6a06212a3bbed3a8a2786300f1b1c29b8c4ee5b5016d9d87580e5173fa3bf79167dc7f25a139ef04b6cd09bb07da4a0cc1b2ce6fda8547e", 0x5d, 0x5, 0x0, 0x1, r1}, &(0x7f00000005c0)) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x12000, 0x0) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f00000003c0)={0x7, 0x74, &(0x7f0000000340)="461b15ffe1136c8ffa666e98e5ce47eca02615876c55bac006136a7379181886b2ccb9dd3db9290b3335575a0d7bfbb2df9fb45c89a77de09e3aebec298715ef78e81a9672d12517c220da82b4cd4b8a7a05a0b27030b63b260e6863e3ea08354571bf19fbcd93b970cedf059e36ce4387d11059"}) 20:54:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@local={0xfe, 0x80, [], 0xaa}}, &(0x7f0000000100)=0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, @empty, 0x6, 0x6, 0x9, 0x500, 0xffffffffffffffff, 0x40000000, r1}) 20:54:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:10 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xfffffffffffffffc}, 0xc, &(0x7f0000000000)={&(0x7f0000002f00)={0x14, 0x1c, 0xfffffffffffffffd, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 20:54:10 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000000c0)=""/54) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10c80, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 177.077198] audit: type=1326 audit(1531342450.421:298): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12097 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455e29 code=0x0 [ 177.154335] binder: 12172:12176 got transaction with invalid offsets ptr [ 177.184768] binder: 12172:12176 transaction failed 29201/-14, size 0-1025 line 2995 20:54:10 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="375c3910a24400199c2302000000415845391ae390c62034db4ae1ef7e10d79f468bc5a8a08156804aeb1a19fdecf8677d00000000000000000000000000000000000000000000008d249bcb8883fb19425b0340c9674e30bdc5000000"], &(0x7f00000000c0)=0x3f) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24}}, 0xffffffff, 0x800}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000440)={r3, 0xd67, 0x1, 0x3, 0x3ff, 0x5000000000000, 0x6, 0x80, {r3, @in6={{0xa, 0x4e21, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}, 0x4, 0x8, 0x40ffffffff, 0x4000000009, 0x8}}, &(0x7f0000000340)=0x80) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 20:54:10 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000280)=0x2, 0x4) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) lseek(r2, 0x0, 0x3) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000004c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x2, 0x3, 0xdf, 0x0, 0x2f, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_ident={0x2, 0xb, 0x9, 0x0, 0xc5f}, @sadb_address={0x3, 0x17, 0x32, 0x80, 0x0, @in={0x2, 0x4e24, @loopback=0x7f000001}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x20, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7}, @in6={0xa, 0x4e21, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x401}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bbd, 0x6, {0x6, 0xff, 0x4, 0x100000001, 0x0, 0xa84, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, @sadb_address={0x5, 0x5, 0x7e, 0x80, 0x0, @in6={0xa, 0x4e24, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x20, @local={0xfe, 0x80, [], 0xaa}, 0xe}, @in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, [], 0x1f}, 0x1}}, @sadb_x_sec_ctx={0x7, 0x18, 0x8, 0x5, 0x30, "acbe99c7f1d811c2914c006e9cfda610e44dbf22bcbbff3175ac95ea7e29b76343f4327bb0f38b0896c28ccc026cca58"}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_sa={0x2, 0x1, 0x4d6, 0x5, 0xffffffffffffffe1, 0x9e, 0x4}]}, 0x178}, 0x1}, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000040)={0xff, 0x8004, 0x7, 0x7}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x80, @empty, 0x80}}, 0xffffffffe2c5c0cb, 0x1000000000000000, 0x4ba, 0x2e, 0x9}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x7fffffff}, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r4) 20:54:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r1, 0x80045700, &(0x7f0000000080)) read(r1, &(0x7f00000003c0)=""/220, 0xc4) 20:54:10 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x89fb17bdc3e28583) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x265, 0x202, 0x101, 0x0, r1}, &(0x7f0000000100)=0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000e25000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) [ 177.207314] binder: undelivered TRANSACTION_ERROR: 29201 20:54:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd88"]], 0x0, 0x0, &(0x7f0000000300)}) [ 177.310800] sctp: [Deprecated]: syz-executor1 (pid 12198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.310800] Use struct sctp_sack_info instead [ 177.366590] sctp: [Deprecated]: syz-executor1 (pid 12198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.366590] Use struct sctp_sack_info instead [ 177.368337] binder: 12204:12205 got transaction with invalid offsets ptr [ 177.396214] binder: 12204:12205 transaction failed 29201/-14, size 0-1025 line 2995 20:54:10 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x8001, 0x0) 20:54:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:10 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000140)=[@cstype3={0x5, 0x3}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x800000001}, &(0x7f0000000080)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:54:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4, 0x0, @empty, 0x8}, 0x1c) 20:54:10 executing program 1: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84803) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) r2 = dup2(r1, r0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1, 0x0) accept$packet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000280)={0x0, 0x100, 0xe7b1, {0x0, 0x7530}, {}, {0x3, 0x7, 0x140000000, 0x7}, 0x1, @can={{0x4, 0x10001, 0x2, 0x1}, 0x2, 0x2, 0x0, 0x0, "0e1e57a5018ef06d"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4008805) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000100)=0x35fc) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/255) 20:54:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x2) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b90e020000b800980000ba000000000f3036670f01cf640f01c9c4e1d8c2d5eb9a00e000001d01c4e161e9d0b9800000c00f3235000800000f30660f3810596d0f20e035000010000f22e00f20e035000002000f22e0", 0x56}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) msync(&(0x7f0000014000/0x4000)=nil, 0x4000, 0x4) [ 177.434781] binder: undelivered TRANSACTION_ERROR: 29201 [ 177.493657] 9pnet: Insufficient options for proto=fd 20:54:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:10 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x6, 0x11, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r1) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x8000, 0x3, 0x6}) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x5}, 0x8) [ 177.533936] 9pnet: Insufficient options for proto=fd 20:54:10 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) dup3(r1, 0xffffffffffffffff, 0x0) 20:54:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7ff, 0x2400) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000140)={r0, 0x8, 0x6, "2ccc06d9994c24fdbeb001f32de321d5a7edc03018bf54dc474929c9c3a52e467c8eb65df656b424140c373d82d51c32df0b61b513548abfbe797bddb51997686bbf1217186243fb41981f634a74f26c"}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket(0x5, 0x0, 0x380000000) r3 = memfd_create(&(0x7f0000000100)="e450ded6ab3de2d7017acbdaeb02efd3cea2a48c8f64afd71b579f725d5eedbc46b0251008c10d9c603d527e5d", 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$addseals(r3, 0x409, 0x8) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000000)=0xfffffffffffffff7, 0x2) [ 177.624142] binder: 12232:12233 got transaction with invalid offsets ptr [ 177.657459] binder: 12232:12233 transaction failed 29201/-14, size 0-1025 line 2995 20:54:11 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6, 0x0) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x4) [ 177.700861] binder: undelivered TRANSACTION_ERROR: 29201 20:54:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc"]], 0x0, 0x0, &(0x7f0000000300)}) [ 177.844126] binder: 12255:12256 got transaction with invalid offsets ptr [ 177.862305] binder: 12255:12256 transaction failed 29201/-14, size 0-1025 line 2995 [ 177.882244] binder: undelivered TRANSACTION_ERROR: 29201 20:54:11 executing program 0: add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f00000003c0)="107f1034d1e0f956196a217fd6be96e97754e6cbe70749d48bb45c7fc42c21a3e5ca3328e60818123c66ff59b522051841ce64d3bdc607002bdea9586bef9a05078318a880908a33d9236ad0e5912d92864cf6d0609297fe8e007bc1009264093fc6e182d4904353462cd2f23110a9af35f40dbe8a6ba24db90268745e1f624344", 0x43a, 0xffffffffffffffff) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ff5000/0x1000)=nil) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x400, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000340)) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/172) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_proto_private(r2, 0x89eb, &(0x7f0000000200)="fa0e618d375d9adb656845717476db4933ccc12db48accca37fe4247cd4319db6a74408ec5e52cbd215f0f117bf73d44983b5974331cf04178cf9fc6bedfa4611718d1fc7c5a81d5b86a888eb39152771e9df3ae0ca81d1a6f97eb7572188b16bc6cd2586a6a1d41f2df778c8478cccb4fb01cc0ccf0fd9310ec5de0460df0e8f0c30bfbcfcf65b39cebaf9adecb7b1f2a639b4b3df3933581f5c0837aa6391db82f50394f182d65876f3ee238a2292f") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd/3\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) 20:54:11 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f0000000240)=""/234, 0xea}, &(0x7f0000000340), 0x3b}, 0x20) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)=""/162, &(0x7f0000000080)=0xa2) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000400000000000000000000"], 0x24}, 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0x0, &(0x7f00000008c0)={&(0x7f0000000dc0)=@gettaction={0x18, 0x32, 0x5, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4, 0x1}]}, 0x18}, 0x1}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f00000003c0)=0xffffffffffffffe2) 20:54:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:11 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2000000000, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d6405000000000065040400010000000704000001000000b7050000000000006a0a00fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x323002, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2f8, 0x0, 0x1a0, 0x1a0, 0x1a0, 0xc0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x400, 0x1}}}, {{@ip={@rand_addr=0xd, @multicast1=0xe0000001, 0xffffffff, 0x0, '\x00', 'ip6tnl0\x00', {}, {0xff}, 0x5c, 0x3, 0xa}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x358) 20:54:11 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup2(r0, r2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0), &(0x7f0000000100)=0x10) set_thread_area(&(0x7f0000000040)={0x7f, 0x0, 0x0, 0x0, 0x101, 0xfffffffffffff585, 0x6, 0x1b, 0x5, 0x20}) r5 = dup3(r0, r1, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)={0xffffffffffffffc1, 0x2, 0x9, 0x0, 0x0, [{r2, 0x0, 0x7fffffff}, {r4, 0x0, 0xffffffffffffff7f}, {r2, 0x0, 0x2}, {r5}, {r5, 0x0, 0xfff}, {r0}, {r3, 0x0, 0x19e7}, {r2, 0x0, 0x3}, {r2, 0x0, 0x34c}]}) 20:54:11 executing program 2: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000740)=@req3={0xff, 0x8}, 0x1a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x6, 0x8, 0xffff, 0x11be, 0x40}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r1, 0x7}, &(0x7f0000000440)=0x8) sendmsg(r0, &(0x7f0000030000)={&(0x7f0000000080)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000040), 0x0, &(0x7f00006e9c68)}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='io.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000280)={0x7, 0x0, {0xffffffffffffffff, 0x1, 0x10001}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0xddb, @dev={0xfe, 0x80, [], 0x1c}, 0xcba}}, 0x7747, 0x4}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r3, 0x1}, &(0x7f0000000200)=0x8) 20:54:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc"]], 0x0, 0x0, &(0x7f0000000300)}) [ 178.147517] binder: 12265:12266 got transaction with invalid offsets ptr 20:54:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$keyring(&(0x7f0000001880)='keyring\x00', &(0x7f00000018c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) [ 178.193286] binder: 12265:12266 transaction failed 29201/-14, size 0-1025 line 2995 [ 178.221596] binder: undelivered TRANSACTION_ERROR: 29201 20:54:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:11 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/hwrng\x00', 0x414000, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000001900)=0x9, &(0x7f0000001940)=0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001840)='/proc/self/net/pfkey\x00', 0x801fe, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80042407, &(0x7f0000001800)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001540)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@dev}}, &(0x7f0000001640)=0xe8) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000001500)=0x1, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0}, &(0x7f00000016c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001700)={{{@in6=@ipv4={[], [0xff, 0xff]}, @in=@rand_addr=0x41d0, 0x4e22, 0x0, 0x4e22, 0x8, 0x2, 0xa0, 0x80, 0x7f, r2, r3}, {0x64c, 0x80000000, 0x2, 0x2, 0x4, 0x67bb, 0x1}, {0x800, 0xffffffffffff69e6, 0x6, 0x7ff}, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d3, 0x32}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3504, 0x4, 0x3, 0x9, 0x2, 0x3ff, 0xfff}}, 0xe8) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000000009, 0x73, r1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x3, 0x4) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="73796569e700000000000000000000000000d42911392cad407c073c4b2ea48e4cfa8682aa7adee44c838cae46125b22daa157340e4d74897bd29c20b87eb2099b601fd57e3f243c0c05e6828c29b10f6770c2a66bd7076cba91f45b1f1babecb936ac9da39bfa18fc1b09968b20f931dd18943bc68988be1056e3f8fa6d3d4dc3cf46c0cb5ec9b2928b3b530b47408871766b63a0b25859de2c2cbde430684132a3ebb17776"]) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) pwritev(r1, &(0x7f0000001b40)=[{&(0x7f0000001880)="ab576c98801dde53364707f3198e89dfd7d8fdf052b0473adf89a69c", 0x1c}, {&(0x7f00000019c0)="6a08cd041f017e81dd6d3eb30b1efe17a423dbaae54496eb3bd19a60387bc124fa514e514c180c98a9bb86f731ebb4f3045cbff02df576f9c4a5a8c511d5132bff70a1e1924d8a29fbb9aafd909403092d5ba46ed899baf359d7b78e93f93b19913588ce25b4fdd961854a4f079b182b0e0758984bb451126024eb49dac8129954e7a9503cc229b52b395aba45600b9c43fb547a3dbe2b9a78f55c029595a215431a1eb8acdc18a5cdc8a755f2a0e52d76609aea91f20cfe6d6a32ee74f02f758d88ffc120535eee998c76c4bbf39c4ab2d7e700ab4de2a70f89705f2a38a4e08fae4596b95ae9df71361844e50286539a19", 0xf2}], 0x2, 0x0) shutdown(r4, 0x1) recvmsg(r4, &(0x7f00000012c0)={&(0x7f0000000180)=@pppol2tpv3in6, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/143, 0x8f}], 0x1, &(0x7f00000002c0)=""/4096, 0x1000, 0x7}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001300)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@ipv4={[], [], @loopback}}}, {{@in=@multicast1}}}, &(0x7f0000001400)=0xe8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001c40)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000001d00)={0x0, @in6={{0xa}}}, 0x84) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000001b80)=ANY=[]) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r4, &(0x7f000099bf26), 0x143, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) [ 178.440476] binder: 12295:12296 got transaction with invalid offsets ptr [ 178.467587] binder: 12295:12296 transaction failed 29201/-14, size 0-1025 line 2995 [ 178.480200] binder: undelivered TRANSACTION_ERROR: 29201 20:54:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000000e6ffff000000000000800000000000000000000000000fc4dd2b270c114dcc66a353841dc60650f940561dc27858865ebfe567896ff13cf4bad14ab8d80e4d857ca84fe47bb4512dba5867542a3f5f0fd0"]}) r1 = accept4(r0, &(0x7f0000000040)=@in={0x0, 0x0, @loopback}, &(0x7f0000000100)=0x80, 0x800) clock_nanosleep(0x2, 0x1, &(0x7f0000000140), &(0x7f0000000180)) sendmmsg$inet_sctp(r1, &(0x7f0000000140), 0x0, 0x50) 20:54:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x9) 20:54:11 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) recvfrom$inet(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x40000040, &(0x7f0000000000)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x3, r1}) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x200) 20:54:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) dup3(r1, r1, 0x80000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0984124, &(0x7f0000001f64)) 20:54:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2c0e"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vsock\x00', 0x1ffffd, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000440)={0x77359400}, 0x10) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000280)={0xe3, 0xbee, &(0x7f0000000300)="f495951593f3f6b844601c486d198da40bd4ef943b823cf4c345fdfbc75a9ad966cd61de8ca25609dc3eb9bf857351b243fba6d94fda0a67f96cfd0532cb374354129ec99024f43ff0bdeae797a762aebb77b2e803c3d1f5af31f7d422ab363bac3233db61", &(0x7f0000000380)="eb90b4e8a19e8773dce3b11ac392d3c7767c2f02f90333eb59b168f96582659f7070f20e691c16870d17b339a190ae5be2e16fe0078586c4d16e4893e741e9f6e3c07457881481159dfc074d951ef974fb2f20ddab1539590abedd589ba6143a954c7f9e3b3fbd8d2f57be86d3310e48268fcd4c56f5aca67ee21508846a928b97525f38a8ab92a70ea0b9c891c43481d4b5d2001214cdb66c7f407b6fd2fc92718301029058c69f8bd5294efdac27ea", 0x65, 0xb0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x113}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x6, 0xffffffff, "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", 0xdd, 0x101, 0xffffffffffffffff, 0xffffffffffffff08, 0xe3, 0xffffffffffff5ed7, 0x8, 0x1}, r3}}, 0x120) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 20:54:11 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x408, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x3, 0x3, {0x2, 0x1, 0x3, 0x3, 0x5}}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000440)="7669b374e56e0a135a78f10448e3abd8761c902e70418bf0f515cbc7f954ebb8ffcab9e843042ac15e8a8eda4b302ea7bbdd3ca2b3894fb154ec6a09fe8392", 0x3f, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) recvmmsg(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000000100)=""/71, 0x47}], 0x3, &(0x7f0000000300)=""/239, 0xef, 0xc7f}, 0x6}], 0x1, 0x121, &(0x7f0000000480)) 20:54:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getresgid(&(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) setgid(r1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000240)={0x6, 0x800}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)={0x0, 0x1}) [ 178.603688] binder: 12307:12309 got transaction with invalid offsets ptr [ 178.626307] binder: 12307:12309 transaction failed 29201/-14, size 0-1025 line 2995 20:54:12 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x890f, &(0x7f00000000c0)="025cc83d6d345f8f762070") ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000240)) sendfile(r1, r1, &(0x7f0000000040), 0x1) 20:54:12 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x88) recvfrom$inet6(r0, &(0x7f0000000100)=""/185, 0x72f393b83c42f278, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000000802, 0x88) r2 = dup3(r1, r0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000000)={&(0x7f00005dafe4)=@in={0x2, 0x4e23}, 0x10, &(0x7f0000002500)=[{&(0x7f0000002440)="5d78bca3197b7618b39ec0c5e5000ea219904da05628d42b25a59daa74dc757443d72d2155eebce56a34efcb086ae25ebbdc8af6dbb94dbe7d2f829ee115ad11be4a2b", 0x43}], 0x1}, 0x10008000) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="b79b", 0x2, 0x0, 0x0, 0x0) [ 178.690774] binder: undelivered TRANSACTION_ERROR: 29201 20:54:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x2d, &(0x7f0000000200)={@broadcast=0xffffffff, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000580)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x12) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000100), &(0x7f0000000ff0)={&(0x7f00000001c0), 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0x12) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x2, 0x8, 0xfff, @time, {0x3, 0x4}, {0x0, 0x100000000}, @raw32={[0x2, 0x1310000, 0x6f]}}], 0x30) dup2(r3, r4) 20:54:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0), 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x9}, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x13}}) close(r3) close(r2) 20:54:12 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/net\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x80100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000300)={0x16, 0x98, 0xfa00, {&(0x7f0000000240), 0x1, r2, 0x30, 0x0, @in6={0xa, 0x4e21, 0x3, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7}}}, 0xa0) r3 = dup(0xffffffffffffff9c) getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000000)={@loopback, @empty, @local}, &(0x7f0000000040)=0xc) seccomp(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0xffffffffffffffff, 0x407ffffffd}]}) ioctl$RTC_PIE_OFF(r1, 0x7006) clone(0x0, &(0x7f0000000280), &(0x7f0000000080), &(0x7f0000000100), &(0x7f00000001c0)) socket$nl_generic(0x10, 0x3, 0x10) 20:54:12 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000119078ac2314aaac14142bed6fe5553fd78f2c"], &(0x7f00000000c0)) [ 178.876626] binder: 12350:12352 got transaction with invalid offsets ptr [ 178.915642] binder: 12350:12352 transaction failed 29201/-14, size 0-1025 line 2995 20:54:12 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000080)=0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000000)=0x98) accept$inet(r0, 0x0, &(0x7f0000000240)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x2a01}) 20:54:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:12 executing program 7: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000000000b34b370cc34682e7e88bdd91d93d28d3b86139d1cb81a48a3605fe0129f27f3fd93b0eafbb793a65247c4fc49b0c673d50f166a068351508c7b8750a1a06a7ee8c76c93d49dd"], 0x8, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0x2}, 0x1c) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)) tkill(r2, 0x1000000000013) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, r2}) [ 178.948549] binder: undelivered TRANSACTION_ERROR: 29201 20:54:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000080)=""/13, 0xd) [ 179.061296] binder: 12375:12376 got transaction with invalid offsets ptr [ 179.084859] binder: 12375:12376 transaction failed 29201/-14, size 0-1025 line 2995 [ 179.100853] binder: undelivered TRANSACTION_ERROR: 29201 20:54:12 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={"62726964676530000000000000000300", &(0x7f00000000c0)=@ethtool_gstrings={0x1b, 0xffff, 0xad, "b468a629fbceb95bd6efe8f7ae0afbd8138d0859c55aec1952be8470200414f017efc3116e8d27d10648da5bd3fd16c669f9289f591bfba7eb49332483ec8897b89f2b5d7e08f3884299a0576602b01e5ea22b8470809fb3475c25b6017e834d30ae1c0e7183c237c03422a09ff2925ccb90d1ce20c78e0f4b55f15e5e65bafc400ee804d993c68d652e99ff6fde0b75118ee491b087a6cf762aa51f6a359265befe5338817d0c7b8442d9bab7"}}) 20:54:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) fstatfs(r2, &(0x7f0000000040)=""/63) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8947, &(0x7f00000000c0)={'veth1_to_bond:\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="3b00000000000000a8f7a95d1042a15272610a27a82faf592713823facdbf4e2e1ae7b0bbe6a8a8626846da00224fa3f15f6b6709af5f9a5116c9575f0d26615ce8b271f02e958eaea93d01b232a1b3e96d0a28a4246ef7e098dedb95c8ae8095faa8a8e256806638df00dc71a3a0216a43c377ee1af8c0134038a6b5c6923ef920efa04cc6d8fb9d749be4ce01e2633dd1e135018b4fd95f80dcc4b"]}) close(r2) close(r1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) [ 179.208648] binder: 12388:12389 got transaction with invalid offsets ptr [ 179.226292] binder: 12388:12389 transaction failed 29201/-14, size 0-1025 line 2995 [ 179.240730] binder: undelivered TRANSACTION_ERROR: 29201 20:54:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:13 executing program 6: r0 = socket(0x200000000010, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0)={0x0}, &(0x7f0000001300)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000001340)={0x800100}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r0, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80, 0x0) r3 = dup2(r2, r2) write$vnet(r3, &(0x7f0000000100)={0x1, {&(0x7f0000000200)=""/179, 0xb3, &(0x7f00000002c0)=""/4096, 0x2, 0x1}}, 0x68) write(r0, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 20:54:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:13 executing program 2: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x0, 0x6, 0x0, 0x2, 0xffffffffffff9a6e, 0x100000001}, &(0x7f0000000080)={0xffffffff, 0x89, 0x3, 0x1ff, 0x1, 0x4, 0x6, 0x7}, &(0x7f0000000100)={0xffff, 0x9d0, 0x8, 0x7fff, 0x1, 0x7, 0xffff, 0x8}, &(0x7f00000001c0)={r0, r1+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={0x1ff}, 0x8}) r2 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x7, 0x10102) ioctl$sock_bt(r2, 0x0, &(0x7f0000000580)="d631d5eec92f8698f36e78f386f6379c4ca9ce4c0a1cd0bd12b118c0bb76327a9f40fe821084f1e5f3df503f09cdba28191d01019fee3cbb6cd7569014db2b57b6cc081491d1d72b42038f718150e920a193e44e9892bfac69e9b5a8bc5082833cfc999238e4e88ed6bf1be0418cf9b97f28a4aa48d2934d5f889ac62a149d8b2be3f9640506398be29504bd7edfaa59a4ac18aceb86122624b99f8678f40fd2f64e992a4c74639d3bac1da7f84ff665405172168f974c84a44d2d14") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x9}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r5 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x80000002, 0xc0080) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0xcf}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000340)={r6, 0x2, 0x6}, 0x8) r7 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x402) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f0000013000)) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000480)) close(r4) [ 179.720908] binder: 12406:12407 got transaction with invalid offsets ptr [ 179.738212] binder: 12406:12407 transaction failed 29201/-14, size 0-1025 line 2995 [ 179.748830] binder: undelivered TRANSACTION_ERROR: 29201 20:54:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000005, 0x3ff) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4a0000) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x48024000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x800, 0x70bd27, 0x25dfdbfe, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d}, 0x2c, {[{@common=@privport='privport', 0x2c}]}}) 20:54:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2287, &(0x7f0000000140)) futex(&(0x7f00000000c0)=0x2, 0x3, 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000680), 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400200, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x7, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000180)={{0x4, 0x0, 0x75, 0xb33, '\x00', 0x7fff}, 0x0, [0x100000001, 0xfffffffffffffffc, 0xb4, 0x7fffffff, 0x52f985ad, 0x200, 0x7f, 0xfffffffffffffffa, 0x3, 0x1ff, 0x3ff, 0x100000001, 0x29e, 0x4, 0x7c4, 0xd2b1, 0xbc6, 0x9, 0x0, 0x401, 0x6, 0x3, 0x4, 0x4, 0x8, 0x8001, 0x6, 0xa5e0, 0x20, 0x1000, 0x3f, 0x998, 0x9, 0x5, 0x8001, 0x8001, 0xfffffffffffffff8, 0x7, 0x45e4, 0xb1b9, 0x6, 0x4, 0xa35, 0x6, 0xacfd, 0x7ff, 0x3f, 0x3, 0x0, 0x3e38, 0x8, 0x1, 0x0, 0x2, 0x1ff, 0x101, 0x4, 0x80, 0x7ff, 0x8, 0x9, 0x8, 0x3, 0xe7, 0x0, 0x5, 0x10001, 0x7fff, 0x4f2, 0x11, 0x1000, 0x7, 0x5, 0x9, 0x10000, 0xb9e, 0x9, 0xfff, 0x9, 0x0, 0x2, 0x1, 0x3bc3, 0x9, 0x7c0, 0x4, 0x6, 0x4, 0xfffffffffffffff8, 0x6, 0x3, 0x1, 0x7, 0x3, 0x8000, 0x9, 0xfffffffffffffffb, 0x3, 0x6, 0x8, 0x100, 0x400, 0x0, 0xb3, 0xffffffffffffff2e, 0x80000001, 0x8, 0x9f8, 0x46, 0x10001, 0x1f, 0x7f, 0x0, 0xfff0000, 0x8, 0x80000001, 0x1f, 0x3, 0x4, 0x6, 0xa4d, 0x2, 0xffffffff, 0x1000, 0xf6d, 0x7, 0x40, 0xfffffffffffffffd]}) 20:54:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf2"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:13 executing program 6: syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x443922b0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)=ANY=[]) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[]) keyctl$chown(0x4, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) [ 179.839398] binder: 12419:12421 got transaction with invalid offsets ptr [ 179.864717] binder: 12419:12421 transaction failed 29201/-14, size 0-1025 line 2995 [ 179.895931] binder: undelivered TRANSACTION_ERROR: 29201 20:54:13 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x3) socketpair(0x11, 0x0, 0x1, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="be3b04fe7ddcac79b117e85464f286e151673329b93343853a1a33e531d24caae79c964123348e7df36df8", 0x2b) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0xa00, 0x70bd27, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x20000000) r3 = dup2(r0, r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) 20:54:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000300)="c4e12dfbf60f3066bad00466edb8010000000f01d9b97b0a0000b80e640000ba000000000f3066baf80cb8f4fbbe86ef66bafc0c66ed66b87a008ec80f01c3410f30660ffa8e08000000", 0x4a}], 0x1, 0x0, &(0x7f0000000400), 0x1029) r4 = memfd_create(&(0x7f0000000000)='mime_type\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000040)={{0x100000001, 0x7f}, 'port1\x00', 0x4, 0x21, 0x80, 0x8, 0x1, 0x400, 0x2, 0x0, 0x11ada4584d3a9f2f, 0x1}) 20:54:13 executing program 5: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x80044d76, &(0x7f0000000100)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8a000, 0x0) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x44, 0x2}, 0x5}}, 0x18) connect$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x4) 20:54:13 executing program 7: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000240)=""/4096, 0x20001240}, {&(0x7f0000001240)=""/227, 0xe3}], 0x3) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000)) fsetxattr(r0, &(0x7f0000000040)=@known='security.ima\x00', &(0x7f0000000080)='/dev/nullb0\x00', 0xc, 0x3) 20:54:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf2"]], 0x0, 0x0, &(0x7f0000000300)}) [ 179.966650] 9pnet_rdma: rdma_create_trans (12435): problem binding to privport: 13 20:54:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 180.026658] 9pnet_rdma: rdma_create_trans (12447): problem binding to privport: 13 [ 180.033880] binder: 12439:12445 got transaction with invalid offsets ptr [ 180.085943] binder: 12439:12445 transaction failed 29201/-14, size 0-1025 line 2995 20:54:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="07afd9d74cfc324aba37d63e6369f0864c698c1f8c34a85d239d1ce17853b154fcc823e5af144c120082dbd4d66cdc59158b81ebedcfe4afb19d495c299884d166ef0aafd784ce3a1ffa4b85e455ae704526fe62709dcab28957b1765c45e23cf636461989e179781e6a1b6ab41ab14c2aaa90cd1805c59ec421b1129f7ad36cd6c95954c09d9dcb6c45b986691e6a862b3736031712ff3ba262b2fe9f37c71a613119461dff4fd1dd0e438a9fdd5e13caf07148c48b5e9b9e335dde411afc8ad304c92a0acce8d663b39d230ebcb1483b821cfde369d8202e2b6035a122e19e69e19bec72aca283920c2e"}, {&(0x7f0000000100)="d46329cd20f2181b6bdd7559febd5653b7e39b0cee0c48dca4ab16f1aff4de500ca3027916fa2fc8aa5b9705b778e5276843844cd9cfbab98ca4876999aeaac5090439fbcb3f4e8ace7f81a56641da270fee5a669010c3c5a88673861e618717d0"}, {&(0x7f00000001c0)="18f20ceef8f6f923f8cc0d00f7b04cf051a0cef60ccdad0c54dbca135f83ee11eb505d599bc88e556c004b020a9ad41bd6b1d0143bb908e9990436a8c81014c8657cdbc6ea368e6f31811345ad882054de1622c9bd33352a285bbe3ce6a87671a5f057814d808d1ddfa5287d8db5819b4b49d220d4c6c06225fdc8c8bdac776529df96d7240e9855651d8be7e15b9cd06f6e5f3b1034828d1dc4246d01eccab7e1c116a28d398fd7b38fa3b2c01ab33b48"}, {&(0x7f0000000280)="0e56b2f620bb497dc6e45062155fee1e7d5eb5f1994b1a9611367d4c7e332ec73f83fc50ef3f9a2d3c48bcde9cdc9eac24f6396d9257eecffe9d6f3771e4b7c2f42a82a4310e4d9ce94c4059a5a57a4a13d0ea06d99cd49d9f0a52bcc260f1c959"}, {&(0x7f0000000300)="41b35bcf0a7169e7379959ddc05b2bb42bd1a970bd436611d8ebda0f350d6ee8db8ed847d5226ee6f4e9a7"}, {&(0x7f0000000340)="bee32069ba87e26060404ce17bb8702bb24bb970ad6a7c07f89b5cf9667bdc78926788e6bf82d9d21a82c9e56da8eb09e163c7f9ab87fb10dd983e02ac45db16eb269a648583d70f684290194d2f83345775c1d9049b1fa3f4054ce1c707a572774d106f24f0cfc2c3a4c9072ce9fa0833a1dd0b6de6f61a438f1f2e7e2cba9e259ab54d94541928bee1e0db361a29182849468b554de93da4cde8c688"}], 0x1) 20:54:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf503}, 0xbb, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x27, 0x1, 0x0, 0x0, {0x8}, [@nested={0x4, 0x4}]}, 0x18}, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x6c3b}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x8}, &(0x7f0000000200)=0x8) 20:54:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000000, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x80000, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000080)) mmap(&(0x7f0000ba6000/0x200000)=nil, 0x200000, 0x2, 0x8012, r1, 0x0) 20:54:13 executing program 6: clock_getres(0x0, &(0x7f0000000040)) r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffc) keyctl$assume_authority(0x10, r0) 20:54:13 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x10) syz_fuseblk_mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00', 0x1, 0xffffffffffffffff, 0xee01, 0xb99, 0x6, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0x6, &(0x7f0000000480)=@raw=[@ldst={0x3, 0x0, 0x0, 0x4, 0x1, 0xfffffffffffffff4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x3}, @generic={0xdf, 0x10000, 0x1000, 0x4}], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x11, &(0x7f0000000500)=""/17, 0x41100, 0x1, [], 0x0, 0x6}, 0x48) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000080)) r3 = syz_open_procfs(r1, &(0x7f0000000140)='coredump_filter\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21}}, 0x1, 0x5, 0x800, 0xfffffffffffffffc, 0x3}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e22, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x5c3}}, 0x5, 0x5}, &(0x7f0000000340)=0x90) write$cgroup_int(r3, &(0x7f0000000000)=0xfffffffffffffffb, 0x12) [ 180.143239] binder: undelivered TRANSACTION_ERROR: 29201 20:54:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf2"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:13 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='\x00', 0xffffffffffffff9c}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000440)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000004c0)={r4, @in6={{0xa, 0x4e23, 0x401, @dev={0xfe, 0x80, [], 0x1d}, 0x3177bc09}}}, 0x84) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x38) r6 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x100000000}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x8, 0x91, 0xc4e, r8}, 0x10) r9 = socket$pppoe(0x18, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f00000002c0)={0xf0000001}) ioctl$sock_SIOCETHTOOL(r9, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000000000093bf2cba01000000000000ff000000000000000000ffff000000000100170016857e39f96202f10bfedac0b74a2e6609a78a462f2b540c0a198d7b0c5a6ab67adac33d1f4e9e18b094d710095aed260f3f76d31fe50bdc16b55796597e12c98e8643f892cfd6cc129ee9553743a50321083ef55e99662894635679b7599857fb6513475885adf4ff503c39f2cbebeb9174fd3c6804a4712824d58db4014e826be9692bfac08d26c1645dff973236ecdc97faf0a9b07c78a344596e72000000000000000000000000000000"]}) 20:54:13 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) r1 = socket$vsock_stream(0x28, 0x1, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f00000011c0)={0x0, 0x989680}, &(0x7f0000001200)) timer_create(0x4, &(0x7f0000001240)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000001280)=0x0) timer_settime(r2, 0x0, &(0x7f00000012c0)={{0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000001140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f00000010c0)={0x8}, &(0x7f0000001100), &(0x7f0000001180)={r3, r4+10000000}, 0x8) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) 20:54:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mremap(&(0x7f0000ffe000/0x2000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 20:54:13 executing program 1: r0 = semget(0x3, 0x6, 0x400) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/178) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = timerfd_create(0x0, 0x800) read(r1, &(0x7f0000a16000)=""/71, 0x47) [ 180.350476] binder: 12481:12482 got transaction with invalid offsets ptr [ 180.372194] binder: 12481:12482 transaction failed 29201/-14, size 0-1025 line 2995 20:54:13 executing program 6: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r0, 0x11000000000b) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x1000, 0x4) r1 = accept4(r0, &(0x7f0000000040)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f00000000c0)=0x80, 0x80000) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000280)={0x6}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8, 0xec}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, &(0x7f00000001c0)=0x4) 20:54:13 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) fcntl$notify(r0, 0x402, 0x7fffeffd) [ 180.426014] binder: undelivered TRANSACTION_ERROR: 29201 20:54:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000010]}) 20:54:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f00000000c0)=""/1, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) tkill(r2, 0x1000000000016) [ 180.576140] binder: 12516:12518 got transaction with invalid offsets ptr 20:54:13 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x1, 0x5, &(0x7f0000000080)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1810}], {0x95}}, &(0x7f000039cff6)="7379e66b616c6c657200", 0x8, 0x1000, &(0x7f000039c000)=""/4096}, 0x48) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1500063700000, 0x40a80) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x6, 0x9, 0x280}, &(0x7f0000000380)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r1, 0x80000000, 0x16, 0xffffffffffffffff}, 0x10) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000440)={0x2c, 0x5, r2, 0x24, r0}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x10, &(0x7f0000000140)=@raw=[@exit={0x95}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x8, 0xf, 0x5, 0x6, 0xffffffffffffffff, 0x10}, @alu={0x4, 0xfffffffffffffffe, 0x6, 0x3, 0x7, 0x30, 0xfffffffffffffff0}, @generic={0x2, 0x800, 0x5, 0x3ff}, @generic={0x3, 0xffff, 0x4, 0x7fffffff}, @map={0x18, 0xf, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41f00, 0x1, [], r3}, 0x48) [ 180.623172] binder: 12516:12518 transaction failed 29201/-14, size 0-1025 line 2995 20:54:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259"]], 0x0, 0x0, &(0x7f0000000300)}) [ 180.674819] binder: undelivered TRANSACTION_ERROR: 29201 20:54:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') fchdir(r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)='@-user\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702f00797a3000bbd3c2830f2a102ed2060bdc00ca0afc0a0ab40400005d8ec474c281f5f1a6d118bc38d1a31d6c7a9aa66f072682cf09de0cb8bef55a1a530a3d2cee9ed82516a500ca71b2d0426b9ecd1e2567f55fc232021cb7b1dc618056acf431027a552b2b37cf5317c9194789fbfbfec9159de60772992222334c67e84ec1", 0x1ff) 20:54:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) r1 = dup2(r0, r0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)={0x0, 0x5, 0xdc, &(0x7f0000000000)=0x6}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0a, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 20:54:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish-asm)\x00'}, 0x58) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d559166593ae164c990a0", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000022c0)=[{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="7ffb139ebbae15363c9396a0ae82f0d8d5a3c9eb358e12f86c3dfeab648229e0765248f4421f7d86faae045cf7f5d0bcfafa56f823105701120803c159d466e590dafc74dbe3aac6dfabc52d859b7166ecc3d4b369496599abb973347d328677e9a0eff94f7d9864209aebb5b32f89b20f67ac0000000000010000614801ca3fb5fe869baec5ce07fd1660c434983e24b12c118e4c2059abf78e92ca4533662f16c438d0c68e40868f58b854511b59461c099e50b1527d5107f285bd194a9cfd63912b561313494c1ff4276af8ea8ce5fbf93c2f"], 0x1) readv(r3, &(0x7f0000000680)=[{&(0x7f0000000280)=""/129, 0x19}], 0x1f5) [ 180.779362] binder: 12537:12539 got transaction with invalid offsets ptr [ 180.808222] binder: 12537:12539 transaction failed 29201/-14, size 0-1025 line 2995 [ 180.843282] binder: undelivered TRANSACTION_ERROR: 29201 20:54:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140), 0x0, 0x0, 0xffffffffffffffc9, 0x3}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16, @ANYRES16=r0, @ANYPTR64, @ANYRES16]], 0xfde0, 0x2}, 0x100000001}], 0x2, 0x0) 20:54:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:14 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c379146600006543a02d0000000000000064670f01cab8010000000f01d946d8f1e1b066ba400066edb9f60800000f32f2400f0964460f35", 0x39}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000002c0)) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000001c0)={[{0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:54:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 181.301189] binder: 12571:12572 got transaction with invalid offsets ptr [ 181.327487] binder: 12571:12572 transaction failed 29201/-14, size 0-1025 line 2995 [ 181.351514] binder: undelivered TRANSACTION_ERROR: 29201 20:54:14 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) unshare(0x400) pselect6(0x2e7, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x7, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) 20:54:14 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025ca93d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha3-384-generic)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) write(r2, &(0x7f00000002c0), 0x0) sendmmsg$alg(r2, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002780)}], 0x1, 0x8881) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000080)={0xf7f, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) 20:54:14 executing program 2: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x501b80, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000100)=0x8) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x2000000, r2}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x6) 20:54:14 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20000, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x8, 0x0, [{0xaff, 0x0, 0x10001}, {0xbaa, 0x0, 0x7fff}, {0xffe, 0x0, 0x7}, {0x988, 0x0, 0x6}, {0x1, 0x0, 0x2}, {0xa0b, 0x0, 0x8000}, {0x892, 0x0, 0x7}, {0x3df, 0x0, 0x2}]}) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") listen(r0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f6e65742f697076342f765f58a9a55c3c9b9072b1030000000000", 0x2, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000140)="9701e8a28cf5f55f730713be3df6e366045e049f12dbcf05206809b58bbf241d64c6aacf8749fc7950a47c2bc0e951f959495e9233737ee885f86cb65fc97e73891b37dcba38354495eb27c848aa80a56d4e4aaa35319083f31405b61804b3bc5b189d9d0bfaa760e49429519329aaae0c8ec3ff6a28d2f834cb5d65a07664206f3ef068ad1448d5e8a21d3c1fdb558310b1dea388eca4409c33e3b16eea966c6e7499108a4ee6f6a5385dbd374dbeaa564c3e70a129338ee5f850c79fd01272dcfc00a4966c742474b62c0eceb79219ad863f185b26") close(r0) 20:54:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:14 executing program 3 (fault-call:6 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1200000000000002, 0x0) r1 = accept(r0, &(0x7f0000000180)=@hci={0x0, 0x0}, &(0x7f0000000080)=0x80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x7, 0x4) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 20:54:14 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x101080, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1fdd) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) [ 181.563145] FAULT_INJECTION: forcing a failure. [ 181.563145] name failslab, interval 1, probability 0, space 0, times 1 [ 181.574507] CPU: 1 PID: 12604 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #141 [ 181.581894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.591436] Call Trace: [ 181.594075] dump_stack+0x1c9/0x2b4 [ 181.597731] ? dump_stack_print_info.cold.2+0x52/0x52 [ 181.603129] ? trace_hardirqs_on+0x10/0x10 [ 181.607585] should_fail.cold.4+0xa/0x1a [ 181.611657] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 181.616779] ? print_usage_bug+0xc0/0xc0 [ 181.620839] ? graph_lock+0x170/0x170 [ 181.624635] ? trace_hardirqs_on+0x10/0x10 [ 181.628864] ? find_held_lock+0x36/0x1c0 [ 181.632956] ? check_same_owner+0x340/0x340 [ 181.637267] ? rcu_note_context_switch+0x730/0x730 [ 181.642188] __should_failslab+0x124/0x180 [ 181.646429] should_failslab+0x9/0x14 [ 181.650232] kmem_cache_alloc_trace+0x2cb/0x780 [ 181.654899] ? do_raw_spin_lock+0xc1/0x200 [ 181.659215] ? _raw_spin_unlock+0x22/0x30 [ 181.663362] binder_get_thread+0x255/0x880 [ 181.667590] ? binder_open+0x920/0x920 [ 181.671482] ? check_same_owner+0x340/0x340 [ 181.675803] ? _kstrtoull+0x188/0x250 [ 181.679599] ? rcu_note_context_switch+0x730/0x730 [ 181.684615] binder_ioctl+0x25d/0x141e [ 181.688505] ? binder_ioctl_write_read.isra.41+0xb10/0xb10 [ 181.694135] ? lock_downgrade+0x8f0/0x8f0 [ 181.698289] ? kasan_check_read+0x11/0x20 [ 181.702426] ? rcu_is_watching+0x8c/0x150 [ 181.706562] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 181.710966] ? __fget+0x414/0x670 [ 181.714413] ? match_held_lock+0x821/0x8d0 [ 181.718735] ? expand_files.part.8+0x9c0/0x9c0 [ 181.723307] ? kasan_check_write+0x14/0x20 [ 181.727534] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 181.732460] ? binder_ioctl_write_read.isra.41+0xb10/0xb10 [ 181.739056] do_vfs_ioctl+0x1de/0x1720 [ 181.742942] ? __lock_is_held+0xb5/0x140 [ 181.746993] ? ioctl_preallocate+0x300/0x300 [ 181.751478] ? __fget_light+0x2f7/0x440 [ 181.755527] ? fget_raw+0x20/0x20 [ 181.758971] ? __sb_end_write+0xac/0xe0 [ 181.762953] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 181.768563] ? fput+0x130/0x1a0 [ 181.771830] ? ksys_write+0x1ae/0x260 [ 181.775724] ? security_file_ioctl+0x94/0xc0 [ 181.780135] ksys_ioctl+0xa9/0xd0 [ 181.783598] __x64_sys_ioctl+0x73/0xb0 [ 181.787475] do_syscall_64+0x1b9/0x820 [ 181.791352] ? finish_task_switch+0x1d3/0x870 [ 181.795837] ? syscall_return_slowpath+0x5e0/0x5e0 [ 181.800777] ? syscall_return_slowpath+0x31d/0x5e0 [ 181.805705] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 181.811078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 181.815917] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 181.821092] RIP: 0033:0x455e29 [ 181.824282] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 181.843543] RSP: 002b:00007f7bcd678c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.851240] RAX: ffffffffffffffda RBX: 00007f7bcd6796d4 RCX: 0000000000455e29 [ 181.858499] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000014 [ 181.865756] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 181.873016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 181.880278] R13: 00000000004bca1c R14: 00000000004caeb0 R15: 0000000000000000 20:54:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(cipher_null-generic)\x00'}, 0x58) write(r1, &(0x7f0000000000)="fbda4f9f28ed2001e3cc96e0c5d8d3fc0c474c5ce03402a17689cb74d43a47b271c7793153472ece996c779c058111dafc13b86148bdf703cf32b0696d887fff394a2e6ddca58121d433e14a6d14e931f2c6eb30febd48e86592d83eafb72711a3437fb6d9e1c04f4aca25937ec2ff28fc0f3bd8f5be", 0x76) close(r0) 20:54:15 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x10001, @loopback={0x0, 0x1}, 0x80000000}, @in6={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [0xff, 0xff]}, 0xfffffffffffff001}, @in6={0xa, 0x4e21, 0x3, @empty, 0x4}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x1}], 0xd8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x0, @rand_addr=0xc6120000}], 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x15e7d7109b3b6b40) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) setsockopt$inet_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000200), 0x0) futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x2710}, {r2, r3/1000+10000}}) 20:54:15 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x4f, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4d5) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)=""/56, &(0x7f0000000000)=0x38) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000280)={0x8, 0x2, 'client0\x00', 0xffffffff80000000, "e5c3fc367b466597", "93b7152709602e423d09247e140e12ee086e565f7633140bef86d826cd568f4a", 0x5, 0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r2, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @broadcast=0xffffffff}]}, &(0x7f00000001c0)=0x10) accept$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000380)=0x1c) 20:54:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udplite6\x00') ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f00000000c0)={0x2, 0x9, 0x6, 0x149, 0x8001}) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001400090500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000600000040000000000000000014000200fe800000000000000000000000000238"], 0x40}, 0x1}, 0x0) 20:54:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni-avx2\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) dup2(r1, r1) socket$alg(0x26, 0x5, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) sendmmsg$alg(r1, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f0000000a00), 0x0, &(0x7f0000000ac0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) 20:54:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x80, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x101401, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000100)) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='ceph\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000280)={0xffffffffffffffff}, 0x4, {0xa, 0x4e20, 0x68, @empty, 0x100000000}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) 20:54:15 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2e200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x1, 0x3000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda={0x66646185}], &(0x7f0000000140)=[0x0]}}], 0x0, 0x0, &(0x7f0000002000)}) 20:54:15 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2100) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000080)={{0x1, 0x1, 0x3, 0x0, 0x7}, 0x8cd6, 0x0, 'id0\x00', 'timer0\x00', 0x0, 0x4, 0x0, 0x2d7, 0x8}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001a00)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000001b00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b40)={0x0, 0x0}, &(0x7f0000001b80)=0xc) sendmsg$nl_route(r1, &(0x7f0000001c80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001bc0)=@ipmr_newroute={0x48, 0x18, 0x800, 0x70bd2c, 0x25dfdbff, {0x80, 0x14, 0x14, 0x8, 0xff, 0x1, 0xc8, 0x6, 0x3800}, [@RTA_MULTIPATH={0xc, 0x9, {0xfffffffffffffeff, 0x2, 0x6, r2}}, @RTA_DST={0x8, 0x1, @loopback=0x7f000001}, @RTA_DST={0x8, 0x1, @remote={0xac, 0x14, 0x14, 0xbb}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x3}, @RTA_UID={0x8, 0x19, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@getae={0x40, 0x1f, 0x103, 0x0, 0x0, {{}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x3503}}, 0x40}, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'teql0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="800000001400200c28bd7000fbdbdf25025100ff", @ANYRES32=r4, @ANYBLOB="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"], 0x80}, 0x1}, 0x8000) 20:54:15 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") socket$alg(0x26, 0x5, 0x0) [ 182.091309] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. [ 182.167760] binder: BINDER_SET_CONTEXT_MGR already set 20:54:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:15 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x800000000007) bind$netlink(r0, &(0x7f000006c000)={0x10, 0x0, 0x0, 0xffffffffffffffff}, 0xc) 20:54:15 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x7, 0x2cb8, 0x2, 0x3, 0x0, 0x40, 0x5, 0x9ccc, 0x100000000, 0x4, 0x800, 0x800, 0x8000}, {0x9b9b, 0x5, 0x7, 0xfffffffffffffffe, 0x4000000000000, 0x6, 0x0, 0x3, 0x9, 0x1, 0x400, 0xcc, 0x8}, {0x9c74, 0x1f, 0xdc97, 0x5, 0x4, 0xffff, 0x6, 0x1ff, 0x8, 0xffffffff, 0x3, 0x5, 0x3ff}], 0x8}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sync_file_range(r2, 0x6, 0x1, 0x3) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x280000) ioctl$RTC_WIE_OFF(r3, 0x7010) [ 182.199880] ceph: device name is missing path (no : separator in ./file0) [ 182.203393] binder: 12653:12660 ioctl 40046207 0 returned -16 [ 182.237404] netlink: 20 bytes leftover after parsing attributes in process `syz-executor2'. 20:54:15 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000feb000)=0xa90d, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x1f, @empty, 0x6}], 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x105c00, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000380)) recvfrom$inet6(r0, &(0x7f0000e89f47)=""/185, 0xffffffffffffff3f, 0x1000026, 0x0, 0x0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x307, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}, 0x100000000, 0xffffffffffffffc1}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x58, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x8001, @dev={0xfe, 0x80, [], 0x16}, 0x6}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e22, 0x7, @loopback={0x0, 0x1}, 0x3}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r2, 0x2, 0x4, 0xd5, 0x64, 0x4, 0x6, 0x8d, {r3, @in6={{0xa, 0x4e22, 0x7fff, @empty, 0x5}}, 0x216, 0x7, 0x32, 0x35, 0x7}}, &(0x7f00000002c0)=0xb0) r4 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r4, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x8000) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f00000003c0)=""/208, &(0x7f00000004c0)=0xd0) sendto$inet6(r4, &(0x7f0000b0cf6e), 0xffed, 0x0, &(0x7f000001b000)={0xa}, 0x1c) [ 182.247896] ceph: device name is missing path (no : separator in ./file0) [ 182.266578] binder: 12653:12660 got transaction with invalid parent offset or type [ 182.280835] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 182.309833] binder: 12653:12660 transaction failed 29201/-22, size 32-8 line 3090 [ 182.349386] binder_alloc: binder_alloc_mmap_handler: 12653 20001000-20004000 already mapped failed -16 [ 182.356663] binder: 12598:12604 ioctl c0306201 20000040 returned -12 [ 182.369650] binder: BINDER_SET_CONTEXT_MGR already set [ 182.380861] binder: 12653:12678 got transaction with invalid parent offset or type [ 182.389132] kvm: pic: level sensitive irq not supported [ 182.390856] kvm: pic: single mode not supported [ 182.396949] binder: 12653:12660 ioctl 40046207 0 returned -16 20:54:15 executing program 3 (fault-call:6 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") personality(0xd00001e) r1 = socket(0x10, 0x80002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a00090000000000000000000a0000000000000000320000"], 0x1}, 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:54:15 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000040)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000400)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ftruncate(r0, 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000900)=ANY=[@ANYRES64]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000940)={0x0, 0x1, &(0x7f0000000680)=""/55, &(0x7f0000000800)=""/71, &(0x7f0000000880)=""/103}) [ 182.405065] kvm: pic: single mode not supported [ 182.407858] kvm: pic: level sensitive irq not supported [ 182.430695] binder: 12653:12678 transaction failed 29201/-22, size 32-8 line 3090 [ 182.454748] kvm: pic: level sensitive irq not supported [ 182.455196] kvm: pic: single mode not supported [ 182.460983] kvm: pic: level sensitive irq not supported [ 182.469090] FAULT_INJECTION: forcing a failure. [ 182.469090] name failslab, interval 1, probability 0, space 0, times 0 [ 182.485856] CPU: 1 PID: 12689 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #141 [ 182.486722] kvm: pic: level sensitive irq not supported [ 182.493233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.493241] Call Trace: [ 182.493268] dump_stack+0x1c9/0x2b4 [ 182.493287] ? dump_stack_print_info.cold.2+0x52/0x52 [ 182.493305] ? print_usage_bug+0xc0/0xc0 [ 182.493324] ? mutex_trylock+0x2b0/0x2b0 [ 182.493348] should_fail.cold.4+0xa/0x1a [ 182.493367] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 182.493390] ? graph_lock+0x170/0x170 [ 182.493411] ? find_held_lock+0x36/0x1c0 [ 182.493445] ? check_same_owner+0x340/0x340 [ 182.493463] ? rcu_note_context_switch+0x730/0x730 [ 182.493484] __should_failslab+0x124/0x180 [ 182.493503] should_failslab+0x9/0x14 [ 182.493519] kmem_cache_alloc_trace+0x2cb/0x780 [ 182.493531] ? do_raw_spin_lock+0xc1/0x200 [ 182.493547] ? _raw_spin_unlock+0x22/0x30 [ 182.493568] binder_transaction+0x13ca/0x7930 [ 182.500264] kvm: pic: level sensitive irq not supported [ 182.508315] ? print_usage_bug+0xc0/0xc0 [ 182.508338] ? __lock_acquire+0x7fc/0x5020 [ 182.508367] ? binder_transaction_buffer_release+0x9d0/0x9d0 [ 182.508383] ? print_usage_bug+0xc0/0xc0 [ 182.508409] ? __lock_acquire+0x7fc/0x5020 [ 182.508428] ? __lock_acquire+0x7fc/0x5020 [ 182.508447] ? __lock_acquire+0x7fc/0x5020 [ 182.508475] ? trace_hardirqs_on+0x10/0x10 [ 182.508497] ? trace_hardirqs_on+0x10/0x10 [ 182.508515] ? print_usage_bug+0xc0/0xc0 [ 182.508530] ? d_alloc+0x96/0x380 [ 182.508544] ? d_alloc_parallel+0x15a/0x1ea0 [ 182.508566] ? print_usage_bug+0xc0/0xc0 [ 182.508583] ? graph_lock+0x170/0x170 [ 182.508599] ? __lock_acquire+0x7fc/0x5020 [ 182.508618] ? __lock_acquire+0x7fc/0x5020 [ 182.508629] ? lock_acquire+0x1e4/0x540 [ 182.508648] ? check_noncircular+0x20/0x20 [ 182.508662] ? graph_lock+0x170/0x170 [ 182.508677] ? retint_kernel+0x10/0x10 [ 182.508692] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 182.508708] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 182.508726] ? find_held_lock+0x36/0x1c0 [ 182.508748] ? lock_downgrade+0x8f0/0x8f0 [ 182.517443] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.520167] ? lock_release+0xa30/0xa30 [ 182.520186] ? check_same_owner+0x340/0x340 [ 182.520206] ? lock_release+0xa30/0xa30 [ 182.520238] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 182.520258] binder_thread_write+0x858/0x2c30 [ 182.547923] binder: undelivered TRANSACTION_ERROR: 29201 [ 182.549756] ? binder_transaction+0x7930/0x7930 [ 182.549777] ? __lock_acquire+0x7fc/0x5020 [ 182.549804] ? kasan_check_read+0x11/0x20 [ 182.549818] ? rcu_is_watching+0x8c/0x150 [ 182.549841] ? trace_hardirqs_on+0x10/0x10 [ 182.549859] ? is_bpf_text_address+0xd7/0x170 [ 182.746541] ? kernel_text_address+0x79/0xf0 [ 182.750941] ? __kernel_text_address+0xd/0x40 [ 182.755429] ? graph_lock+0x170/0x170 [ 182.760040] ? __save_stack_trace+0x8d/0xf0 [ 182.764363] ? find_held_lock+0x36/0x1c0 [ 182.768424] ? lock_downgrade+0x8f0/0x8f0 [ 182.772568] ? lock_release+0xa30/0xa30 [ 182.776531] ? check_same_owner+0x340/0x340 [ 182.780878] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 182.786407] ? _copy_from_user+0xdf/0x150 [ 182.790554] binder_ioctl_write_read.isra.41+0x2e7/0xb10 [ 182.796000] ? binder_thread_write+0x2c30/0x2c30 [ 182.800756] ? _raw_spin_unlock+0x22/0x30 [ 182.804903] ? _binder_inner_proc_unlock+0x43/0x50 [ 182.809862] ? binder_get_thread+0x1b6/0x880 [ 182.814260] ? binder_open+0x920/0x920 [ 182.818143] ? check_same_owner+0x340/0x340 [ 182.822466] ? rcu_note_context_switch+0x730/0x730 [ 182.827413] binder_ioctl+0xd2f/0x141e [ 182.831307] ? binder_ioctl_write_read.isra.41+0xb10/0xb10 [ 182.836946] ? lock_downgrade+0x8f0/0x8f0 [ 182.841109] ? kasan_check_read+0x11/0x20 [ 182.845262] ? rcu_is_watching+0x8c/0x150 [ 182.849433] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 182.853922] ? __fget+0x414/0x670 [ 182.857374] ? match_held_lock+0x821/0x8d0 [ 182.861611] ? expand_files.part.8+0x9c0/0x9c0 [ 182.866187] ? kasan_check_write+0x14/0x20 [ 182.870421] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 182.875347] ? binder_ioctl_write_read.isra.41+0xb10/0xb10 [ 182.880963] do_vfs_ioctl+0x1de/0x1720 [ 182.885558] ? __lock_is_held+0xb5/0x140 [ 182.889611] ? ioctl_preallocate+0x300/0x300 [ 182.894099] ? __fget_light+0x2f7/0x440 [ 182.898063] ? fget_raw+0x20/0x20 [ 182.901505] ? __sb_end_write+0xac/0xe0 [ 182.905471] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 182.911088] ? fput+0x130/0x1a0 [ 182.914367] ? ksys_write+0x1ae/0x260 [ 182.918174] ? security_file_ioctl+0x94/0xc0 [ 182.922582] ksys_ioctl+0xa9/0xd0 [ 182.926034] __x64_sys_ioctl+0x73/0xb0 [ 182.929914] do_syscall_64+0x1b9/0x820 [ 182.933806] ? finish_task_switch+0x1d3/0x870 [ 182.938292] ? syscall_return_slowpath+0x5e0/0x5e0 [ 182.943234] ? syscall_return_slowpath+0x31d/0x5e0 [ 182.948167] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 182.953520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.958357] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.963624] RIP: 0033:0x455e29 [ 182.966804] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 182.986052] RSP: 002b:00007f7bcd678c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.993774] RAX: ffffffffffffffda RBX: 00007f7bcd6796d4 RCX: 0000000000455e29 [ 183.001037] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000014 [ 183.008295] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 183.015551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 183.022828] R13: 00000000004bca1c R14: 00000000004caeb0 R15: 0000000000000001 20:54:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x88000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) getgroups(0x1, &(0x7f0000000240)=[0xffffffffffffffff]) fchown(r0, r2, r3) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f00000000c0)={{0x400, 0x7}, 'port0\x00', 0x1, 0x10000, 0x8, 0x3, 0x9, 0x8, 0x10000, 0x0, 0x1, 0x1400000000}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000002c0)=""/250) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000180)={'erspan0\x00', {0x2, 0x4e21}}) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x0, {0x2, 0x0, @multicast2=0xe0000002}, 'lo\x00'}) 20:54:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fstatfs(r1, &(0x7f0000000000)=""/255) [ 183.030429] binder: 12687:12689 transaction failed 29201/-12, size 0-1025 line 2908 [ 183.048245] kvm: pic: level sensitive irq not supported [ 183.055067] kvm: pic: level sensitive irq not supported [ 183.075131] kvm: pic: single mode not supported [ 183.080802] kvm: pic: level sensitive irq not supported [ 183.086683] kvm: pic: level sensitive irq not supported 20:54:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:16 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18) getsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000400)=""/153) socket$vsock_dgram(0x28, 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1ac9, 0x200000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000180)=[{{0x0, 0x2710}, 0x2, 0x5, 0x3fc}, {{r3, r4/1000+30000}, 0x2ab, 0x1}, {{0x77359400}, 0x6, 0x6, 0x6}, {{0x77359400}, 0x7, 0x8, 0x8}], 0x96db38fa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x1, 0xb7, "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", 0xda, 0x4, 0x2, 0x80000000, 0x7f, 0x8, 0x1}, r5}}, 0x120) [ 183.096922] kvm: pic: single mode not supported [ 183.106178] kvm: pic: single mode not supported [ 183.112570] kvm: pic: single mode not supported 20:54:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='bbr\x00', 0x4) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3, 0x404002) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000400)={r2, 0x6, 0x7}, 0x8) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)=""/248, &(0x7f0000000140)=0xf8) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x0, 0x0, 0x35) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)='Y', 0x1}], 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/218, &(0x7f0000000180)=0xda) [ 183.121700] kvm: pic: single mode not supported [ 183.216766] kvm: pic: single mode not supported [ 183.282456] kvm: pic: single mode not supported [ 183.365230] binder: undelivered TRANSACTION_ERROR: 29201 20:54:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000080)=""/210, &(0x7f0000000000)=0xd2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00\x00d\x00', 0x20, 0x1, 0x3b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001200], 0x0, &(0x7f0000000040), &(0x7f0000001200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x755f4899, [{{{0x3, 0x0, 0x0, 'syz_tun\x00', 'bj\x00G\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0x2d8, 0x2d8, 0x328, [@bpf0={"6270660000000000000000000000000000000000000000000000000000000001", 0x210}, @cgroup0={'cgroup\x00', 0x8}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x430) 20:54:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}, 0x1}, 0x0) 20:54:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000300)=0x200110, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000e00)=[@textreal={0x8, &(0x7f0000000100)="66b8000000800f23d80f21f86635400000d00f23f80f20d86635080000000f22d83e0f01c8d20d66b9910900000f320f35baf80c66b82a5d888766efbafc0cb816afef0fae830d5c0f060fc71e643d", 0x4f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000180)={{{@in=@rand_addr, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) 20:54:16 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x200000, 0x80) lseek(r1, 0x0, 0x3) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) 20:54:16 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = getpid() prlimit64(r1, 0xf, &(0x7f0000000000)={0x80000000, 0x48e6}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)) 20:54:16 executing program 3 (fault-call:6 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:16 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x8000000000006, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2081, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000002c0)=""/69) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") recvfrom$packet(r1, &(0x7f0000002280)=""/4096, 0x1000, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000180)=""/135) poll(&(0x7f0000000080)=[{r1}], 0xb, 0x0) 20:54:17 executing program 5: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040), 0x10) 20:54:17 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond_slave_1\x00', 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8001, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f00000001c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x701, 0x0, 0x0, {0x0, r1}}, 0x24}, 0x1}, 0x0) 20:54:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 183.622753] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 20:54:17 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/91, 0x5b) r2 = socket(0x11, 0x801, 0x10000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x2d, &(0x7f0000000040)=""/87, &(0x7f0000000140)=0x57) 20:54:17 executing program 7: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000340)="c8867ba086b47b77a6ad9d2024373a1d6f9619bfd7d33aec31871d5625d17efd5294dc8a76aa3437935877d0ecf7880c44afeff86dc141a56377c8c957c0eaa08e9c1d8546cd8ebe331b22fc5dbe1e0c87a1cb7268c5c66e31299c1e4bae120e69de0143accf138e4e99100ab18339301e28601d9028b6ae594e7ce5950ba9567fd73c6a44528d819d59e9dc4c54731c1088a1bfa99b9dce9830716773a204596619352bdc38084f819f865e664df684ddffbd0b34f6b296f52d8bcc4b37a05e20a26f2f114bbbd9932152b2c7da20ff85909fd3c44c59f76fbd24254e350c0b00e491906a28939fb419fdfa") socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040), 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001980)=""/150, 0x96}], 0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)={0x3, r1}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) 20:54:17 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x84000) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="f20f2d7e00c4e3bd40ce630f07f7cd0c000000660f01c90ff8cd0fc7588ab8ad6e00000f23d80f21f835000000c00f23f8c4e3cd6971f500f20f08", 0x3b}], 0x1, 0x0, &(0x7f0000000100), 0x0) 20:54:17 executing program 1: socket$vsock_dgram(0x28, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000280)='#em1#+\x00', 0x0) write(r0, &(0x7f00000002c0)="0601b466b0af72831d756ee9e1", 0xd) sendfile(r0, r0, &(0x7f0000001000), 0x10002) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200), 0x0) 20:54:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4}, 0xc, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2"]}]}, 0x1c}, 0x1}, 0x0) [ 183.854801] FAULT_INJECTION: forcing a failure. [ 183.854801] name failslab, interval 1, probability 0, space 0, times 0 [ 183.866367] CPU: 1 PID: 12757 Comm: syz-executor3 Not tainted 4.18.0-rc4+ #141 [ 183.873744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.883115] Call Trace: [ 183.885737] dump_stack+0x1c9/0x2b4 [ 183.889516] ? dump_stack_print_info.cold.2+0x52/0x52 [ 183.894808] ? __save_stack_trace+0x8d/0xf0 [ 183.899175] should_fail.cold.4+0xa/0x1a [ 183.903277] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 183.908406] ? save_stack+0x43/0xd0 [ 183.912065] ? kasan_kmalloc+0xc4/0xe0 [ 183.915972] ? kmem_cache_alloc_trace+0x152/0x780 [ 183.920853] ? binder_transaction+0x13ca/0x7930 [ 183.925546] ? binder_thread_write+0x858/0x2c30 [ 183.930240] ? binder_ioctl_write_read.isra.41+0x2e7/0xb10 [ 183.935887] ? do_vfs_ioctl+0x1de/0x1720 [ 183.941017] ? ksys_ioctl+0xa9/0xd0 [ 183.944668] ? __x64_sys_ioctl+0x73/0xb0 [ 183.948759] ? do_syscall_64+0x1b9/0x820 [ 183.952935] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.958330] ? find_held_lock+0x36/0x1c0 [ 183.962521] ? check_same_owner+0x340/0x340 [ 183.966867] ? rcu_note_context_switch+0x730/0x730 [ 183.971848] __should_failslab+0x124/0x180 [ 183.976109] should_failslab+0x9/0x14 [ 183.979960] kmem_cache_alloc_trace+0x2cb/0x780 [ 183.984707] ? do_raw_spin_lock+0xc1/0x200 [ 183.988966] ? __lockdep_init_map+0x105/0x590 [ 183.993494] binder_transaction+0x144d/0x7930 [ 183.998108] ? print_usage_bug+0xc0/0xc0 [ 184.002199] ? __lock_acquire+0x7fc/0x5020 [ 184.006471] ? binder_transaction_buffer_release+0x9d0/0x9d0 [ 184.012297] ? print_usage_bug+0xc0/0xc0 [ 184.016772] ? __lock_acquire+0x7fc/0x5020 [ 184.021057] ? __lock_acquire+0x7fc/0x5020 [ 184.025320] ? __lock_acquire+0x7fc/0x5020 [ 184.029604] ? trace_hardirqs_on+0x10/0x10 [ 184.033869] ? trace_hardirqs_on+0x10/0x10 [ 184.038133] ? print_usage_bug+0xc0/0xc0 [ 184.042389] ? d_alloc+0x96/0x380 [ 184.045868] ? print_usage_bug+0xc0/0xc0 [ 184.049961] ? print_usage_bug+0xc0/0xc0 [ 184.054032] ? graph_lock+0x170/0x170 [ 184.057829] ? __lock_acquire+0x7fc/0x5020 [ 184.062078] ? __lock_acquire+0x7fc/0x5020 [ 184.066305] ? lock_acquire+0x1e4/0x540 [ 184.070284] ? check_noncircular+0x20/0x20 [ 184.074506] ? graph_lock+0x170/0x170 [ 184.078302] ? graph_lock+0x170/0x170 [ 184.082091] ? trace_hardirqs_on+0x10/0x10 [ 184.086335] ? find_held_lock+0x36/0x1c0 [ 184.090390] ? lock_downgrade+0x8f0/0x8f0 [ 184.094528] ? lock_release+0xa30/0xa30 [ 184.098491] ? check_same_owner+0x340/0x340 [ 184.102804] ? lock_release+0xa30/0xa30 [ 184.106787] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.112405] binder_thread_write+0x858/0x2c30 [ 184.116984] ? binder_transaction+0x7930/0x7930 [ 184.121666] ? __lock_acquire+0x7fc/0x5020 [ 184.126156] ? kasan_check_read+0x11/0x20 [ 184.130300] ? rcu_is_watching+0x8c/0x150 [ 184.134444] ? trace_hardirqs_on+0x10/0x10 [ 184.138674] ? is_bpf_text_address+0xd7/0x170 [ 184.143168] ? kernel_text_address+0x79/0xf0 [ 184.147563] ? __kernel_text_address+0xd/0x40 [ 184.152066] ? graph_lock+0x170/0x170 [ 184.155864] ? __save_stack_trace+0x8d/0xf0 [ 184.160186] ? find_held_lock+0x36/0x1c0 [ 184.164244] ? lock_downgrade+0x8f0/0x8f0 [ 184.168391] ? lock_release+0xa30/0xa30 [ 184.172362] ? check_same_owner+0x340/0x340 [ 184.176692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.182219] ? _copy_from_user+0xdf/0x150 [ 184.186811] binder_ioctl_write_read.isra.41+0x2e7/0xb10 [ 184.192266] ? binder_thread_write+0x2c30/0x2c30 [ 184.197020] ? _raw_spin_unlock+0x22/0x30 [ 184.201170] ? _binder_inner_proc_unlock+0x43/0x50 [ 184.206090] ? binder_get_thread+0x1b6/0x880 [ 184.210489] ? binder_open+0x920/0x920 [ 184.214369] ? check_same_owner+0x340/0x340 [ 184.218681] ? rcu_note_context_switch+0x730/0x730 [ 184.223620] binder_ioctl+0xd2f/0x141e [ 184.227501] ? binder_ioctl_write_read.isra.41+0xb10/0xb10 [ 184.233137] ? lock_downgrade+0x8f0/0x8f0 [ 184.237281] ? kasan_check_read+0x11/0x20 [ 184.241415] ? rcu_is_watching+0x8c/0x150 [ 184.245551] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 184.249952] ? __fget+0x414/0x670 [ 184.253410] ? match_held_lock+0x821/0x8d0 [ 184.257632] ? expand_files.part.8+0x9c0/0x9c0 [ 184.262215] ? kasan_check_write+0x14/0x20 [ 184.266456] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 184.271563] ? binder_ioctl_write_read.isra.41+0xb10/0xb10 [ 184.277178] do_vfs_ioctl+0x1de/0x1720 [ 184.281066] ? __lock_is_held+0xb5/0x140 [ 184.285125] ? ioctl_preallocate+0x300/0x300 [ 184.289606] ? __fget_light+0x2f7/0x440 [ 184.293565] ? fget_raw+0x20/0x20 [ 184.297012] ? __sb_end_write+0xac/0xe0 [ 184.300990] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 184.306525] ? fput+0x130/0x1a0 [ 184.309816] ? ksys_write+0x1ae/0x260 [ 184.313616] ? security_file_ioctl+0x94/0xc0 [ 184.318030] ksys_ioctl+0xa9/0xd0 [ 184.321475] __x64_sys_ioctl+0x73/0xb0 [ 184.325352] do_syscall_64+0x1b9/0x820 [ 184.329226] ? finish_task_switch+0x1d3/0x870 [ 184.333723] ? syscall_return_slowpath+0x5e0/0x5e0 [ 184.338650] ? syscall_return_slowpath+0x31d/0x5e0 [ 184.343570] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 184.348926] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.353781] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.358965] RIP: 0033:0x455e29 [ 184.362138] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.381380] RSP: 002b:00007f7bcd678c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.389079] RAX: ffffffffffffffda RBX: 00007f7bcd6796d4 RCX: 0000000000455e29 [ 184.396346] RDX: 0000000020000040 RSI: 00000000c0306201 RDI: 0000000000000014 20:54:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:17 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4}, 0x2c) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/10, 0xa) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x240) write$P9_RSTATFS(r0, &(0x7f0000000080)={0x43, 0x9, 0x1, {0x3, 0xffff, 0x4, 0x6, 0x40, 0x1, 0x101, 0x7fffffff}}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180ef98b00000020000000000080b7398ab85ffef866000000000061"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) [ 184.403602] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 184.410863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 184.418118] R13: 00000000004bca1c R14: 00000000004caeb0 R15: 0000000000000002 [ 184.425623] binder: 12755:12757 transaction failed 29201/-12, size 0-1025 line 2918 20:54:17 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x6, 0x1000006, 0x3) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="8b", 0x1}]) 20:54:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x277, 0x0, 0x80ffff}]}) 20:54:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:18 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x4000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x17e8, [0x0, 0x200005c0, 0x200010d0, 0x20001100], 0x0, &(0x7f0000000140), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0xb, 0x18, 0xd, 'tunl0\x00', 'bond_slave_1\x00', 'erspan0\x00', 'vlan0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1b}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0x160, 0x198, [@cluster={'cluster\x00', 0x10, {{0x1, 0x8ff, 0x2b}}}, @cluster={'cluster\x00', 0x10, {{0x10001, 0x100000001, 0xfffffffffffffeff}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}, @common=@log={'log\x00', 0x28, {{0x8, "e422f6673cef0b6513f500a025e20ecd83b8571be2e8eb30e63755e843f5"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}}, {{{0x9, 0xc, 0x6000, 'rose0\x00', 'veth1_to_team\x00', 'veth1\x00', 'veth1_to_bond\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @random="73884251772d", [0xff, 0x0, 0xff, 0x0, 0x9ae96f43a8a0704, 0xff], 0x918, 0x918, 0x948, [@among={'among\x00', 0x880, {{0xffff, 0x0, 0x3, {[0x53, 0x2, 0x6a6, 0x7, 0x800, 0x5, 0x10000, 0x9, 0x1, 0x3f, 0x0, 0x7, 0x2000000000000000, 0xffff, 0x7, 0x101, 0x2, 0x2, 0x1, 0x793, 0x6, 0x2, 0x81, 0x31, 0x4, 0x3, 0x62, 0x5, 0x2, 0x9, 0x4, 0x1, 0x5d, 0xdb, 0x7, 0x5, 0x2, 0x4, 0xfffffffffffffbff, 0x3, 0x2, 0x0, 0x2800000000, 0x6, 0x401, 0xffffffff, 0x8, 0x6, 0x7ff, 0x5, 0x400, 0x10000, 0x8, 0x9def, 0x4, 0x1, 0x0, 0x8, 0x1f, 0xff, 0x200, 0xfffffffffffff000, 0x1, 0xbd, 0x401, 0x9, 0x4, 0xef, 0xb11, 0x7, 0x1000, 0x2, 0x6, 0xefa, 0x1, 0x1, 0x3, 0x5, 0x1, 0x7, 0x10000, 0x7, 0x7, 0xa0fc, 0x4, 0x6, 0x5, 0xffffffffffffff80, 0x1, 0x7, 0x2, 0x2, 0x6, 0xffffffffffff124e, 0x7fff, 0x5, 0x400, 0xfffffffffffffff9, 0x5, 0x1f, 0x7, 0x3, 0x8, 0x4, 0xae, 0x0, 0x27, 0x4, 0x2, 0x9, 0x0, 0x2, 0x3ff, 0x5, 0x3, 0xffff, 0x100, 0x1, 0x89ac, 0xb1c0000000000000, 0x5, 0xe2ab, 0xa4fd, 0x10001, 0x4, 0x100000001, 0xf9, 0x5, 0x1000, 0xa771, 0xff, 0x8, 0x6, 0x8, 0x6, 0x1, 0x7, 0x10000, 0xfffffffffffffffc, 0x7f, 0x9, 0x9, 0x3, 0x401, 0xe1, 0xa20e, 0x4, 0x1200000000, 0x101, 0xb41, 0x9, 0x4, 0x100000001, 0x1, 0x4, 0x7, 0x21, 0x248, 0x0, 0x80000000, 0x8, 0x34a4, 0xfffffffffffffffc, 0x0, 0xfff, 0x400, 0x8, 0xff, 0xc09, 0x7f, 0x20, 0x5, 0x5, 0x5, 0x9, 0x6, 0x81bb, 0x74fe, 0x8, 0x3f, 0x1f, 0x6, 0x2, 0x1, 0x4, 0x0, 0x1, 0x7ff, 0x7, 0x4, 0xffffffff, 0x1, 0x7fffffff, 0x0, 0x100000001, 0x3, 0x6, 0x8, 0x1, 0x7fff, 0x7, 0x200, 0x5, 0x4, 0x2e, 0x3ff, 0x9, 0xfff, 0xfffffffffffffffb, 0x3, 0x1, 0x7, 0x5, 0x80000001, 0x0, 0x6, 0xd7c, 0x7, 0x4, 0x200, 0x7, 0x8001, 0x5c03, 0x8, 0x5, 0x8000, 0x0, 0x1, 0xda, 0x101, 0x5, 0x7ff, 0xffffffffffffff01, 0x3, 0x10000, 0x1, 0xfff, 0x3, 0xffffffff, 0x2, 0x9, 0xfffffffffffff912, 0xc17f, 0x8, 0x8ac0000000000000, 0x9, 0x1, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1, 0x4, 0x401, 0x0, 0x7], 0x2, [{[0x0, 0x4], @loopback=0x7f000001}, {[0x8, 0x8000], @multicast2=0xe0000002}]}, {[0x7, 0x1000, 0x9c6, 0x9, 0x1000, 0x1, 0x1, 0x8001, 0x3ff, 0xffffffff80000001, 0x400, 0x40, 0x7f, 0x5, 0x0, 0x1, 0x2, 0x8, 0x80000000, 0xa18, 0xffffffffffffffc0, 0x2, 0xe05, 0x5c, 0x6ed, 0x3, 0x6, 0x800, 0x200, 0x40000000000, 0x9, 0x1, 0xcf5, 0x20, 0x4, 0x200, 0x20, 0x9dd, 0xe3b, 0x5, 0x10000, 0x8, 0x1, 0x5, 0x1, 0x0, 0x5d, 0x4, 0x6, 0x1, 0x7ff, 0x6, 0xb13, 0x4, 0x7, 0x100000000, 0x7ff, 0xd, 0x91, 0x3, 0xfff, 0x10000, 0x7, 0x50a02901, 0xf71, 0x3, 0x3, 0x6, 0x3, 0x9, 0x80000001, 0x7, 0x40000, 0x7, 0x100, 0x7f, 0x10000, 0x4, 0xf3, 0x9, 0x10001, 0x5, 0x3, 0x401, 0x7, 0x4, 0x200, 0x3f, 0x371f, 0x3f, 0x6, 0x652, 0x4, 0x7, 0x36, 0x1000, 0x3, 0x1000, 0x81, 0x5, 0x8, 0x68000, 0x101, 0x62a4, 0xff, 0x1, 0x2, 0x1f, 0x100000001, 0x0, 0x1, 0x0, 0x7, 0x924, 0xb5, 0x8001, 0x3, 0x5, 0x3, 0x3, 0x6, 0x1f, 0x3, 0x8, 0x3, 0x0, 0x1, 0x9, 0xffffffff, 0x3, 0x5, 0x6, 0xbf, 0x80000000, 0x80000000, 0x3ff, 0x0, 0x3f, 0x5e, 0x7, 0x0, 0xb3d, 0x180000, 0x7fff, 0xc7f, 0x7, 0x1, 0xc684, 0x4, 0x7ff, 0x6f, 0x1, 0xca71, 0x3f, 0x81, 0x7, 0x80000001, 0x0, 0x9, 0xd52, 0xe366, 0x2, 0x7f, 0x3, 0x0, 0x407, 0x7000000, 0xcf4, 0x7, 0x9, 0x1, 0x2, 0x2, 0x9, 0xfffffffffffffffb, 0x5, 0x0, 0x400, 0x0, 0x5, 0xfb2e, 0x0, 0x8001, 0x7, 0x6, 0x7, 0x3f, 0x1f, 0xe2, 0x3, 0x4, 0xc1e, 0x20, 0x4, 0x6, 0x1, 0x1000, 0x9, 0x5, 0xcb1, 0x7, 0x6, 0x0, 0x7fff, 0x5, 0x3f, 0x1000, 0x4, 0xfff, 0xffffffffffffa646, 0x2, 0x2, 0x0, 0xfffffffffffffffb, 0x2, 0x100, 0xff, 0xfc, 0x2, 0x3, 0x0, 0x7, 0x411a, 0x6, 0x6, 0x5, 0x40, 0x7fffffff, 0xffffffff8c145b7c, 0x6, 0x6, 0xf022, 0x1, 0x8001, 0x3, 0x7fffffff, 0x7f, 0x6, 0x0, 0x0, 0xfffffffffffffff8, 0x3, 0xfffffffffffffffc, 0x256d, 0xfffffffffffffffc, 0x3, 0x7, 0x4, 0xbb24, 0x1, 0x8, 0x8001, 0x8, 0xc8d2, 0x5fe, 0xffffffff, 0x800], 0x6, [{[0x40, 0x790], @multicast2=0xe0000002}, {[0x8, 0x8001], @rand_addr=0x7f}, {[0x4, 0x8000], @rand_addr=0x101}, {[0x8000, 0x2], @loopback=0x7f000001}, {[0x7f, 0xffffffffffffffff], @multicast1=0xe0000001}, {[0x6, 0x7fff], @remote={0xac, 0x14, 0x14, 0xbb}}]}}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x3cb550bd}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xb43da4d98731cd8f}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{{{0x15, 0x40, 0x6007, 'rose0\x00', 'bcsf0\x00', 'yam0\x00', 'veth1\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0xe8, 0x118, 0x150, [@realm={'realm\x00', 0x10, {{0x6, 0x3, 0x1}}}, @devgroup={'devgroup\x00', 0x18, {{0x6, 0x3, 0x1d, 0x4, 0x1}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}}, {{{0x5, 0x42, 0x88ff, 'ip6tnl0\x00', 'bridge_slave_0\x00', 'veth0_to_bridge\x00', 'gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x920, 0xac8, 0xaf8, [@among={'among\x00', 0x888, {{0x5747, 0x20881be7, 0x2, {[0x3, 0x0, 0x8, 0x80000001, 0x6, 0x7, 0x1, 0x2, 0x5, 0x7, 0x0, 0x0, 0x9, 0xfff, 0x5, 0x9, 0x10001, 0x3, 0x2, 0x5, 0xffffffffffffffb3, 0x2, 0x4, 0x7fffffff, 0x5, 0x1, 0x401, 0x9, 0x7, 0x4914, 0x8, 0xc2, 0x9, 0xff, 0x1, 0xffffffffffffffff, 0x7, 0x2, 0x0, 0xffffffffffff8001, 0xff, 0x5, 0xfa, 0x10001, 0x100000001, 0x3, 0x6, 0x7, 0x0, 0x400, 0x1, 0x7b83, 0x0, 0x5a494c29, 0x1, 0x5, 0x1, 0x9, 0x0, 0xc419, 0x6, 0x7, 0x8, 0x800, 0x7, 0x9, 0x6, 0x3f, 0xffff, 0x3, 0x6, 0x1000000, 0x0, 0x1, 0x4, 0x3, 0x0, 0x9, 0x20, 0xfffffffffffffff9, 0x1, 0x4, 0x6, 0x7ff, 0x9, 0x6, 0x7fffffff, 0x400, 0x2, 0x439, 0x1, 0x800, 0xfc5, 0x4, 0x1000, 0x1fcd, 0x7a, 0x6, 0x3, 0x80000000, 0x0, 0x7, 0x5, 0x5, 0xc9c, 0x6, 0x0, 0x5, 0x5, 0x0, 0x595b, 0x6, 0x2, 0xc6, 0x310a, 0x8001, 0x2, 0x3, 0xffffffffffffff01, 0xfffffffffffffff9, 0x4, 0x8, 0x100, 0x80000000, 0x8, 0x8, 0x0, 0x0, 0x5, 0xffffffffffffff28, 0x20, 0x8001, 0x10000, 0x800, 0x0, 0x5, 0x10000, 0x504a, 0x5, 0x10001, 0x6, 0x1, 0x8, 0x80000000, 0x5, 0x3, 0x2, 0x1, 0x3, 0x1, 0x401, 0x2, 0x3, 0x8, 0x101, 0x80000001, 0x7dc, 0x2ea4, 0x4, 0xe0000000000000, 0x800, 0x0, 0x0, 0xaf7, 0x2, 0x5, 0x2, 0x4, 0x3, 0x8, 0x36aa, 0x0, 0x2, 0x1, 0xfffffffffffffffe, 0x26, 0x9, 0x3, 0x7, 0x2, 0x0, 0x8, 0x2000000000000000, 0x401, 0x100000000, 0x6, 0x81, 0x80000000, 0x1ff, 0x9, 0x3ff, 0xab22, 0x9, 0x3, 0x6757, 0x8, 0x0, 0x10000, 0x0, 0x3, 0xd2, 0x7, 0x1f, 0x7, 0x400, 0x80, 0x40, 0xfff, 0x10000, 0x5, 0x1ff, 0x20, 0x4, 0x0, 0x7, 0x9, 0x3f, 0x4, 0xff, 0x800, 0x9, 0x4, 0x3f, 0x5, 0x100, 0x0, 0x8000, 0xffff, 0xb22d, 0x4, 0x3ff, 0x2, 0x7fff, 0xfffffffffffffff8, 0xfffffffffffffffb, 0x2, 0x3ff, 0x3, 0xfffffffffffffc01, 0xbce3, 0x200, 0x0, 0x10001, 0x8, 0x1, 0x7ff, 0x3f, 0x9, 0xf1, 0x4, 0x1, 0x71, 0x5, 0xfff, 0x81, 0x5, 0x1], 0x6, [{[0xfa2, 0x10001], @loopback=0x7f000001}, {[0x7], @remote={0xac, 0x14, 0x14, 0xbb}}, {[0x6, 0x2], @broadcast=0xffffffff}, {[0x7fff, 0x9], @multicast2=0xe0000002}, {[0x7fff, 0x8], @broadcast=0xffffffff}, {[0xffff, 0xdd9]}]}, {[0x3f, 0x2, 0x6, 0x2, 0x7, 0x9, 0x4, 0x3, 0x0, 0xffffffffffffffe0, 0x8, 0x5733, 0x9, 0x47ff, 0x2, 0x8, 0x81, 0xf61, 0x5, 0xff, 0x5, 0x7fff, 0x4, 0xae40, 0x8, 0x3, 0x4000000000, 0xfff, 0x4, 0x0, 0x7, 0x2, 0x14, 0x40, 0x4, 0x9, 0x1000, 0xff, 0x1f, 0x7ff, 0x1, 0x10001, 0xf0, 0x8, 0x2, 0x2, 0xffffffffffffffff, 0x1000, 0xff, 0x4, 0x1, 0x0, 0x1, 0x1000, 0x6, 0x7f, 0xd88, 0x3, 0xfffffffffffffff8, 0x7, 0x1, 0x400, 0xa00000, 0x0, 0x1f, 0x8, 0x1, 0x4, 0x800, 0x2, 0x3000, 0x3, 0x8e, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0xf800000000000000, 0x7, 0x0, 0x3, 0x4, 0x2, 0x9, 0x3, 0x9, 0x5, 0xe8, 0xc9fa, 0x1, 0x0, 0x6, 0x100, 0x81, 0x9, 0x9, 0x1, 0x1, 0x100000001, 0x1, 0x3f, 0x5, 0x0, 0x5, 0x0, 0x2, 0x3, 0x8, 0x80, 0x7fffffff, 0x81, 0x0, 0x6, 0x2, 0x9, 0x1, 0x6, 0x3, 0x800, 0x46, 0x3ff, 0x8, 0x7, 0x2, 0x46ed, 0x80, 0xffffffffffffe21e, 0x4, 0x7fff, 0x100, 0x36a, 0x7fffffff, 0x83e, 0x7fff, 0xff, 0x2, 0x6, 0x20, 0x100, 0x3, 0x2, 0x2, 0x75cb, 0x5ed3, 0x1720000000000, 0x2, 0x2, 0xffffffffffffff7f, 0x0, 0x5, 0x4, 0x3, 0x6, 0x1, 0x2, 0x1, 0x9, 0x9, 0x7, 0x5, 0x8, 0x8000, 0xfe, 0x4, 0x8000, 0x1, 0x25b, 0x8000, 0x90, 0x0, 0x2f, 0x2, 0x3, 0x3f, 0x0, 0x800, 0xa00000000000000, 0x6, 0x5, 0x41, 0x6, 0x6, 0x7, 0x2, 0x8001, 0x3, 0x7, 0x20, 0xfffffffffffffffa, 0x80, 0x2, 0x6, 0x1, 0x2, 0xf0b, 0x7, 0x78f9, 0x400, 0x1, 0xd3, 0x5a, 0x4, 0x0, 0x9, 0x8, 0xfffffffffffffffe, 0x1, 0x1, 0x10001, 0x8b, 0x7f, 0x1, 0x7f, 0x2, 0x5, 0x2a4, 0x0, 0x6, 0x1, 0x9, 0x9, 0xff, 0x80, 0x2, 0x3, 0x8, 0xc688, 0x1, 0xf838, 0x4, 0x0, 0xfffffffffffffffb, 0x5, 0x80000001, 0x4, 0x9, 0x800, 0x3f, 0x4, 0x7fffffff, 0x1, 0x80, 0x1ff, 0x2, 0xffffffff, 0x10001, 0x8, 0x81, 0x4, 0x3, 0x4, 0x1, 0x8001, 0x8, 0x535, 0x9, 0x1], 0x3, [{[0x1, 0x7000000000000000], @loopback=0x7f000001}, {[0x7], @rand_addr=0x684b}, {[0x1, 0x9f56], @loopback=0x7f000001}]}}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x101, 'system_u:object_r:pam_var_run_t:s0\x00'}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x5bb, 0xfe0, 0x8, 0x0, "c9916760aaa04845ce41471e0a3fd5e39391111cb5537c15f5947d6112f84789028f431dbae7f78e09e7e5886a342b646854b493f4abeb920e1a51601a7f4a6a"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}]}, 0x1860) r3 = accept$alg(r0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000000)=""/111, 0x6f, 0x0, &(0x7f0000000540)=@abs, 0x709000) 20:54:18 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4200, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000200)={{0x3ff, 0x2}, 'port0\x00', 0x8, 0x110000, 0x7, 0x1, 0xabc7, 0xfb, 0x5, 0x0, 0x0, 0x9e}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(morus1280-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="ab553fecd4248c2d8990a69fceb70b7e", 0x17c) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@assoc={0x0, 0x117, 0x4, 0x5}], 0xfffffffffffffcdc}, 0x80000000000) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/123, 0x7b}, 0x0) 20:54:18 executing program 5: r0 = socket$inet6(0xa, 0x1003, 0xfffffffffffffbff) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={{0x10000, 0x2, 0xffffffffffffffff, 0x9, 0x10001, 0x7}, 0x8, 0xad25, 0x9, 0x5, 0x5, "2291a9be62bd2538fee9471a0b5af3e68813295ac00d4908477941c2b274168e2680ee4d288458dab4b63199513f8613833886c1f81aeb709ed013bbfa3bb6a765c28ecf60356622c25de88f402f7f4d67b6caa0e4a1061742c56f4cef09b635f0770151f747c252ade9cf69bb998eb111647a38b4089faf4e2f65e6b3d76486"}) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x10}, 0x94, &(0x7f00000000c0)={&(0x7f0000000180)=@getroute={0x14, 0x1a, 0x230, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) [ 184.673855] binder: undelivered TRANSACTION_ERROR: 29201 20:54:18 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x44, 0x146) openat$cgroup_type(r0, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) prctl$intptr(0x26, 0x1) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x202) accept4$alg(r0, 0x0, 0x0, 0x80000) execve(&(0x7f0000001340)='./bus\x00', &(0x7f0000000100), &(0x7f0000001300)) 20:54:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x1, 0x105001) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000400)) read(r0, &(0x7f0000000040)=""/28, 0xfffffd80) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000340)={0x8, 0x2, 0x0, {r2, r3+30000000}, 0x400, 0xd1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x2}}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000500)={0x2080000000000000, 0x2, 0x1, 0x6, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000080)={0x3, 0x1, 0x8f, 0x8001, 0x0, 0x20, 0x8}, &(0x7f00000000c0)={0x3, 0x80000001, 0x57, 0x52, 0x1, 0x636, 0x2, 0x8}, &(0x7f0000000100)={0x1, 0x80000000, 0x6, 0x8, 0x0, 0x2, 0x6, 0x3ff}, &(0x7f0000000180)={r4, r5/1000+30000}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) [ 184.872808] binder: 12824:12825 got transaction with invalid offsets ptr [ 184.889233] binder: 12824:12825 transaction failed 29201/-14, size 0-1025 line 2995 [ 184.907501] binder: undelivered TRANSACTION_ERROR: 29201 20:54:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x3) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#! '}], 0xa}, 0xf) close(r1) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f0000000140)) 20:54:18 executing program 6: execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)="aa2d73656c662a2565746830757365722b29656d3000", &(0x7f00000000c0)='em0*.vmnet1\x00', &(0x7f0000000100)='+vboxnet0*)vboxnet0\x00', &(0x7f0000000140)='%\x00'], &(0x7f0000000380)=[&(0x7f00000001c0)='securityproc%\x00', &(0x7f0000000200)=')\x00', &(0x7f0000000240)='&:vboxnet0\x00', &(0x7f0000000280)='*ppp1eth0eth1#\x00', &(0x7f00000002c0)='ppp1\x00', &(0x7f0000000300)='vboxnet0\x00', &(0x7f0000000340)='[securitymime_type{posix_acl_accesssecurity\x00']) r0 = socket(0x40000000015, 0x5, 0xfffffffffffffffc) setsockopt(r0, 0x114, 0x400000005, &(0x7f0000000040), 0x0) 20:54:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000000002, 0x0) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x10100) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0xff81, &(0x7f0000001600), 0x0, &(0x7f0000001640)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffff009d0c002900002f562ded0cb44488b5dad4a560c3358109a1fb0e4e0c399cb2e24c5b0f3c4a41162c7bd243eaeb2e"], 0x10}}], 0x40000000000012a, 0x0) 20:54:18 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x44, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf) 20:54:18 executing program 6: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000680)="6e00742f69705f6d725f6361ff01658f") r3 = socket$inet6(0xa, 0x3, 0x3a) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000700)={0x0, 0x17, &(0x7f0000000000)="5240e437d0613ac30b25e562f868cf69da4ddab893fb18"}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000200)=0x6) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f00000004c0)=0x4) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000440)={{0xa, 0x4e21, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0xed6}, {0xa, 0x4e21, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0x40aa, [0x6, 0x4, 0x401, 0x7fffffff, 0x10000, 0x6, 0x81, 0x6]}, 0x5c) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000800), &(0x7f0000000840)=0xc) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000b80)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000c8000000fa414e5c5e6f47b130f916bce8cd4c12635dd60e81d483e584f640d3eb652d46adef1924f3932ee9665e24c621596dff01fdcf6b349d155e2496cb598e14af3cd42f83d92c4231e399b409b1535e2c7a69f46313bd8dff4e43d17999e51314b6d6b9930d4e2d572aa710ce0a8697bd2e705ca01575e75f7fb786b88748da14efd3b97f620000a79ee43aa2a88820cd27de2e7ecfc45f47b25437eff6e82c23d197ee44a77665182883237a8ab1c501c0380c61204d0672caecee95a5927a57670068f3e8f28007b9628031abc19aeff3f2212f6efecfea83fb4345922e99ced7b134709e5d837e778e0517347433f2b5136f792a34cc957dc5d53528a5c11558572b162c606dcc0c084a20953149b167550ea63f16b0eaf968a4bb96c5229d28625b444d9ebf4380111d5c4a52ee0de8e41387e4ca8285ad0a1f9ecc6806129ff8d9079b96be514480e1f0610026d27ecbc27779cfb11026fe9d9cdafed9f2ddaabe4effa511930a4716cfd649b9913555a08d9cf4fce39329e82fe6890a41451ab184855ee9f84420dbc1b3bbe5e43a2c89eb4d90bc3396246525f73269136200f5f06f962fbbba9610b5bb259ebd6997eebc71352421a2c8c68dbcd3ef04cd06caac13f771217e96641549b3b2feb177f994dc05975b437db231bff06f038a0e70febb0922415c6b1a94f6995637672c4eaebbc11e7cf0c4d61fd53bc758bf310168830ca3c186ad6156d571a273de9dc91c66b99d5664932107d4a18a214b014784c7cf47aa0720c0fa7302e041866374b14eb401a33ba4129738e8a2c446f90d313302abe01f27ee1f14fe2cf16d9995393b18bb96f3eb87dbf5cc864aef92b52a486d881493f56f05c306f972be149dffbf0329ddc16299acb21664d1d21ebacbb59144f68534f25de643d8173485d4db0e99d96294536e6e21b767b5f32e76e363081c72ff0343651a9de30158ac98d50aaef479ba1234fcabf4f568c0bd6d0855cd0b4eae577c54f625cbf4545c67000446f7a23ebae0f8e8ceeeef172510f2d919df1431ba8b43ec8c0f1fe2189b489503a3faa51640dd24084a992fcd20f8a31906cdbbb01b280ccc360697d9ecf5d68467d8fd14a623691a90fcef05a6b09cb21b175ed287120968949372527992850dff08e3e12dac6fd30000000000000000"], &(0x7f0000000500)=0x1) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000006c0)={0x0, 0x0, 0xffffffff, 0x68ca, 0x1}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r5, 0x0, 0x0, &(0x7f0000000080)={@dev, @rand_addr, 0x0}, &(0x7f00000000c0)=0xff09) unshare(0x2000400) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r7, 0x50, &(0x7f00000002c0)}, 0x10) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@empty, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, 0x200, 0x80000000081, 0x987, 0x400, 0x4, 0x1260312, r6}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000540)={0x3, 0x820d, 0x7fc0000000, 0x8001, 0x0}, &(0x7f0000000580)=0x10) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000780)=""/81) sync_file_range(r3, 0x9, 0x1eef721d, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000005c0)={0x5, 0x4, 0x8, 0x8, 0x2, 0xfffffffffffffffa, 0x0, 0x7, r8}, &(0x7f0000000600)=0x20) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x8}, {0xa, 0x4e24, 0xfff, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x6, [0x4, 0x3, 0x9, 0x9, 0x0, 0x3f4b06b5, 0x1, 0x7]}, 0x5c) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x486) connect(r9, &(0x7f00000000c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0xf8}}}, &(0x7f0000000740)=0x84) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000280), 0x1f4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000240)={0x2, 0x1, 0x6, 0x40, 0x7f}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x0, [0x0, 0x0, 0x69c, 0x0, 0x4]}, 0x5c) 20:54:18 executing program 0: r0 = memfd_create(&(0x7f0000403000)='\x00', 0x80000000000006) fcntl$addseals(r0, 0x409, 0x4) r1 = getpgid(0x0) fcntl$setown(r0, 0x8, r1) ftruncate(r0, 0x800000) 20:54:18 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\x00', 0xffffffffffffff9c}, 0x10) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000000c0)=0xc000000) r4 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000080)={0x4, r4}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x3, 0x1, 0x8, 0x4, 0x100000000}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={r5, 0x86, 0x8, 0x1, 0x0, 0x80000001}, &(0x7f0000000280)=0x14) 20:54:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) write(r0, &(0x7f00000000c0), 0xfec9) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x202, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000240)=""/220) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @rand_addr=0x7ff}}, 0x80000000, 0xfff}, 0x90) 20:54:18 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) timer_create(0x7, &(0x7f0000000080)={0x0, 0x27, 0x1, @thr={&(0x7f0000000000)="8a7be599a3618f4f05c90731f65663dc6e819d81ad462f5422df46f0152883c9844d7f4753182ecd6a8b3e180e0231521b", &(0x7f0000000040)="9a278a9f1bda3875aaba672706e6e2ad089ceb60af69498624187586ff35fae5ba0d441a7373abb2c930ccd268b4b1cb130e1ab408"}}, &(0x7f00000000c0)=0x0) timer_getoverrun(r2) r3 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) recvfrom$packet(r3, &(0x7f0000000440)=""/23, 0x17, 0x0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="7a30f9515d33"}, 0x14) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 20:54:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:18 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1=0xe0000001, @multicast2=0xe0000002, 0x1, 0x2, [@rand_addr=0x8, @rand_addr=0x8001]}, 0x18) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 20:54:18 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000004c0)={{0x1, 0x0, 0x7ff, 0x8, 'syz1\x00', 0x1}, 0x1, [0x3, 0x9, 0x4, 0x0, 0x5, 0xc03, 0x3, 0x200, 0x7, 0x100, 0x10000000000, 0x2, 0x5, 0x2, 0x80000001, 0x1, 0x1, 0x3, 0x0, 0x1ff, 0xfff, 0x1, 0x6a0, 0x2, 0x2, 0x4, 0x100, 0xe722, 0x5, 0xffff, 0x3, 0xe2, 0x7342, 0x4, 0x400, 0x4, 0xffffffff, 0x3ff, 0x6, 0xffff, 0x9, 0x10001, 0x3, 0x100000001, 0x1, 0x8, 0x7b44, 0x8, 0x0, 0x1f, 0xe9, 0x0, 0xc08, 0xa4c, 0x91, 0xf8f3, 0x0, 0x5, 0xd42b, 0x3, 0x3, 0x400, 0x3, 0x5, 0x4, 0x40, 0x9, 0xffffffffffffffe0, 0x45, 0x80000000, 0x800, 0x7ff, 0x80000001, 0x1, 0x0, 0x1, 0x1, 0x6, 0x0, 0x10000, 0x800, 0x8, 0xd8, 0x3ff, 0x100000001, 0x4, 0x6, 0x1, 0xb8b, 0x40, 0x1, 0x4, 0x8, 0x4f, 0x9, 0x2, 0x3, 0x7, 0x404000000000, 0x9, 0x7, 0x27ff, 0x4, 0x4, 0x7f, 0x2, 0xfffffffffffffff7, 0x2, 0x3, 0x200, 0x5, 0x6, 0x2, 0x6, 0x4e, 0x3, 0x7, 0x3f, 0x2, 0x6a, 0x1, 0x80, 0x4, 0xffff, 0x1, 0x100000001, 0x0, 0x9]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000013000)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udp\x00') r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000240)={r3}) ioctl$EVIOCGMTSLOTS(r1, 0x80084504, &(0x7f00000001c0)=""/101) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x426000, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000380)={{0x100001, 0x2000, 0xa, 0x100000001, 0x3, 0x4, 0x848, 0x8000, 0x3f, 0x1, 0x4acd, 0x2}, {0x6000, 0x0, 0xd, 0x7fff, 0x3, 0x0, 0x2, 0x0, 0x1, 0x100, 0x0, 0x8000}, {0x1, 0x4, 0xf, 0xffff, 0xdc, 0x0, 0x9, 0x4, 0x1, 0x4, 0x7, 0x6}, {0x11f004, 0x10d000, 0xa, 0x1, 0x9, 0x9, 0x3, 0x7fff, 0xfff, 0xa9, 0x8}, {0x4, 0x104001, 0x0, 0x8000, 0x2a62c175, 0x20, 0x3ff, 0x1, 0x1000, 0x80000000, 0x7, 0x3ff}, {0x2000, 0x10000, 0xb, 0xd2, 0x2db661f4, 0x40, 0x2, 0x1, 0x6, 0x81, 0x2, 0x43}, {0x0, 0xd000, 0x9, 0xffffffff, 0x4, 0x1000, 0x3f, 0x0, 0x9, 0x6, 0x8, 0x1ff}, {0x100000, 0x100000, 0xd, 0x200000000000, 0xd55, 0x1, 0x81, 0x0, 0xb5, 0x1ff, 0x2, 0x100}, {0xf000, 0x5000}, {0xf000, 0x4}, 0x40000000, 0x0, 0x6000, 0x22044, 0x8, 0x8000, 0xf000, [0x1, 0x8001, 0xfff, 0x80000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f00000000c0)={0x3, 0x8, 0x1}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) close(r0) ioctl$RTC_WIE_OFF(r6, 0x7010) 20:54:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x0) setns(r0, 0x30000000) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20, 0x0, 0x0, 0xf2cd}, {0x6}]}) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x300000, &(0x7f0000000100)="444efb4765f87ebb589195d68c40cfe10956b87f0dc42a8aa9d7b7ee1929946010319f93d7449466f0a5d87b318da00320aa8860cc9786d0897991d0d8305b1cca58b1363df66f1e8343a6efc491796613785e333603322142bd23e2bd15b2a4f378199e75d10a5f2c56b7beae945d9d1da0efb884e583a5a7442f339ed3ce457c0b85096cdbbab2dc29b2207085037de39ca969") [ 185.713183] binder_alloc: binder_alloc_mmap_handler: 12869 20001000-20004000 already mapped failed -16 [ 185.737262] binder: BINDER_SET_CONTEXT_MGR already set [ 185.743841] binder: 12869:12877 ioctl 40046207 0 returned -16 20:54:19 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x82000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4bfb3325, @loopback={0x0, 0x1}, 0x1000}], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000ebbd2e2ab955010000632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1) 20:54:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) munmap(&(0x7f00001be000/0x3000)=nil, 0x3000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in6, 0x4e24, 0x400, 0x4e20, 0x200, 0xa, 0x80, 0xa0, 0x5e, r2, r3}, {0x7f, 0x13, 0x6, 0x100000000, 0x7, 0x101, 0x5, 0x8}, {0x0, 0xa, 0x78, 0xfff}, 0x8, 0x6e6bb6, 0x3, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x21}, 0x4d5, 0xff}, 0xa, @in6, 0x3503, 0x3, 0x3, 0x3, 0x8, 0x3, 0x3}}, 0xe8) 20:54:19 executing program 2: r0 = getpgrp(0x0) ptrace$poke(0x4, r0, &(0x7f0000000040), 0x6) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="3cbf2dc67c63c1445b4165580ba89e3d5dc13aaddc0d0ed59db4c2b023416979bdba0e245bd143c57ebf1d65514f4aa3ea98b59acc63b2056b4c331d06cdac1e825a8ac16bacac618b4fbbd6efa68795d046e45b9df7f2cce2cc13bc11d032c702bce67276c4e6cf0eb5218912be174d87ecced6a3a394060c795a19d595c487b0e088f7c66e9957db4231036e1a5ad6e9ab", 0x92, r1) keyctl$unlink(0x9, r1, r2) 20:54:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:19 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000240)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getstats={0x1c, 0x5e, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3}}, 0x1c}, 0x1}, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') 20:54:19 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8, 0x42) ioctl$RTC_VL_CLR(r0, 0x7014) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffdfff, @host=0x2}, 0x10) 20:54:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:19 executing program 5: mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='mode=000000000010\t\x00\x00\x00\x00\x00\x00\x0000']) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f00000001c0)) 20:54:19 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00', 0x0}) sendmsg$xdp(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2c, 0x7, r1, 0x2b}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000040)="c7b53e1ea968f82260729fee02caee8152", 0x11}, {&(0x7f0000000080)="d30b42e27e7ff3b4b1ef65dac034e5c007f51b592a132b30e80c97256037a4e0ffc0ba6acbb2aa2b1d17df1f89e4a6fb58", 0x31}, {&(0x7f00000000c0)="a8a312534f73ee04ea6b4ca9347790b09916d9be4c5dd65aa03d311efe8c3a930916809268386ac64939dd5b5f76e9eb725fc6bf665ce749fd2814db7da39b380903c8a66335b020782f660133f73c6be8ead71780d6fd96592df382476ba656e3661ad42c239def6c667559110c7dd7b3168cf9a019e4e773af28213be8b46d0896748b0529e42a1bfbaa2fba859c817df7", 0x92}, {&(0x7f0000000180)="c70b9e27820589e917aa2fb70605137b3d5707e3eb29f09dbd71e497e4c0a51b57", 0x21}, {&(0x7f0000000240)="65a44bd7e862e70ce8e69c7571975840f44c66a84e86c8983a38d053bb8e6a46b3012b78c1dbb516b232a60ff959c8294d9810c4660703c419fe1640c5cf246125359b3242040d5578781860104748bd0798a36e684ba2", 0x57}, {&(0x7f00000002c0)="c64676e098cc7f740e5747075c11a142d00a9bdc3b30fa7fc4f230d1d2c20d89d345fc8a990c237f9c43efb8e02fd1cd3055", 0x32}, {&(0x7f0000000300)="b6a004b9dc39e841a2fa075d7c65442dff6fde4e5dd5f0a0ae0f044a41859f99c8a318660f", 0x25}, {&(0x7f0000000340)="02a7a33ce91b612638397d72e79256fe2bf3dd7030dc1f63c017a6e79105f50ab3e3a69560ce94e62f62f4cf6bbfec418e8a587d8e4d60c3adddd9dcd1ef85c16f5c8d6f158715bb35054f161e317215bf736114799df03900352cf71bed542b60df2955a53fc2dea67405739acb361271f2bffdc9be0f041b0bbaa5e6446c87c95ffee48f85dd025daa843345790b448c74e6f96b94840e92eb9635d4b9899729a81378c16049ad98a5b33457186058ad87f40a955526b816cf9a976df5601478da675383c14ffd508e2a95d440f8d8f1d8c8de66b4e6702d73a5a349dfd4e7d0b7a0ea3c98e2", 0xe7}, {&(0x7f0000000440)="42cd802342c1dfe39aa48db0008fb894a0ed74c8baa97f25183fc09e611a44ecf69efeb9a34135e68fe23646ff9cf38e70a443bc216fb25ea2dcc9e28fa2deca1dfef0e4b91ad187567fdf9e64963b4a641214479a26ed7585c7c4657925774384da7035fee30709db02e3527ca2e9e758a23e8285a7cb27cbf138c8902aeada191a146acb1676674994965e3cb34ee3cf59308f967565cdf78e417ac15830cb27aae227ebcd569f748fb6eb9599593fb5b1681f6e69a801fd587dde2b3aa065f442fbd91f9171fa11b5fb5e5dd5ba44f1e5a881", 0xd4}], 0x9, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000a00)={'filter\x00', 0x7, 0x4, 0x480, 0x118, 0x258, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f00000009c0), {[{{@uncond, 0xf0, 0x118}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x100000000, 0x800}}}, {{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001, 0xffffffff, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}, 0x5, 0x3, 0x3, 0x9a5c, 0x1, 0x400, 'bridge0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x140}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=0xffffffff, @dev={0xac, 0x14, 0x14, 0x1c}, 0x9, 0xffffffff}}}, {{@arp={@loopback=0x7f000001, @broadcast=0xffffffff, 0xffffffff, 0xff, @empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}, @mac=@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x12}, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x2, 0x8, 0x0, 0x1ff, 0x100000, 0x2, 'vcan0\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, @loopback=0x7f000001, 0x4}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000740)='/dev/snd/pcmC#D#c\x00', 0xe7d, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000780)={0x80, 0x4, 0x3, 'queue0\x00', 0x2}) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000f00)={0x514, 0xffffffff7fffffff}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={r1, @empty, @rand_addr}, 0xc) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x200000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000680)={0xffffffffffffffff}, 0x2, 0x7}}, 0x20) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000900)={'broute\x00', 0x0, 0x4, 0x73, [], 0x2, &(0x7f0000000840)=[{}, {}], &(0x7f0000000880)=""/115}, &(0x7f0000000980)=0x78) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000700)={0x4, 0x8, 0xfa00, {r4, 0x1}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)=ANY=[@ANYBLOB="ffe0687914a315c9d2fb000008004500001c0000000000119078ac14ffbbe000000100004e2100089078"], 0x0) 20:54:19 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5220, 0x10202) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x1) 20:54:19 executing program 6: r0 = socket(0x1000007, 0x2000000000001, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x3, 0xd10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000980], 0x0, &(0x7f00000000c0), &(0x7f0000000980)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x40, 0x0, 'gre0\x00', 'veth1_to_bridge\x00', 'ip6tnl0\x00', "7430000001000000000400000000fdff", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x980, 0x9b0, 0xae0, [@among={'among\x00', 0x898, {{0x20, 0x40, 0x0, {[], 0x8, [{[], @local={0xac, 0x14, 0x14, 0xaa}}, {[], @multicast2=0xe0000002}, {}, {[], @broadcast=0xffffffff}, {[], @loopback=0x7f000001}, {[], @remote={0xac, 0x14, 0x14, 0xbb}}, {[], @multicast1=0xe0000001}, {[], @multicast1=0xe0000001}]}, {[], 0x2, [{[], @rand_addr}, {[], @broadcast=0xffffffff}]}}}}, @helper={'helper\x00', 0x28, {{0x0, 'tftp-20000\x00'}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:checkpolicy_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{{{0x11, 0x0, 0x0, 'bpq0\x00', 'syzkaller0\x00', 'bpq0\x00', 'rose0\x00', @empty, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}, {{{0x5, 0x0, 0x0, 'ifb0\x00', 'ip6gretap0\x00', 'ip_vti0\x00', "7223cba52d00000000003cb24000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @random="a6b9d71bd364", [], 0x70, 0x70, 0xe8}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "5f12004b5516d02d9e6801a665bc8bb34889817c92389665d6ac6730fe84e3f6960739220662a40ecab939a223d2e701c246b36432d6162b1e44892d8584b4d4"}}}}]}]}, 0xd88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'bridge_slave_1\x00'}, 0x18) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x2000, 0x0) ioctl$BLKRAGET(r1, 0x8000552c, &(0x7f0000000100)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x0, 0x0) ioctl(r0, 0x8001, &(0x7f0000000100)="9427e2c7a2a422499bbb4a5878cc24a5acf28804f61221b3aea25ebb4851b2d5ec1501a7e38a1f1b81f3bd59c964f8bb5ee364f474f5a20d23342ed398f26782db0b8ffc3f427abd708e7698fd35c0a52b5a9409485054c7c3a4aae47bf8ce6b66b5af4ee135efd37e2b3b1892f10dc4c6512462f50150ad29e86a542bdb429f34bee736b992338aef0e7e46ef5969dcf713f6c127dccc254802b17f2d9091a1fb284b47901cc0be23a3863ac416c35fbe2b31e0da12e2b737b75c73cb3420a138a96eae4681") fcntl$setlease(r1, 0x400, 0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x6}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000400)=r2, 0x4) setsockopt$inet_dccp_int(r0, 0x21, 0x15, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x8000, {0x2, 0x4e23, @broadcast=0xffffffff}, {0x2, 0x4e21, @multicast2=0xe0000002}, {0x2, 0x4e23, @rand_addr=0x2}, 0x146, 0x0, 0x1, 0x3, 0x800, &(0x7f0000000040)="626f6e64300000000100", 0x9, 0x40, 0x1}) [ 186.145459] binder_alloc: binder_alloc_mmap_handler: 12934 20001000-20004000 already mapped failed -16 20:54:19 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x1, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000002c0)={0x7b, 0x0, [0x5, 0x10000, 0xc7f, 0x1f]}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x301000, 0x0) fstatfs(r1, &(0x7f0000000180)=""/206) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000000c0)) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000005000/0x2000)=nil) pkey_mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x3}) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000003000/0x3000)=nil) pipe2(&(0x7f0000000140), 0x4000) 20:54:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:19 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl(r1, 0x8914, &(0x7f0000000140)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x800000807, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close(r3) r4 = fcntl$dupfd(r2, 0x406, r3) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@empty, 0x1, r5}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x44, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) 20:54:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f00000001c0)=0xe8) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6, 0x4e24, 0x801, 0x4e23, 0x3f, 0x2, 0x20, 0x80, 0x32, r2, r3}, {0x3f, 0x2, 0x2, 0x8, 0x748, 0x1, 0x89c, 0x7}, {0x80000001, 0x2, 0x3f, 0x1}, 0x4, 0x6e6bbf, 0x1, 0x1, 0x3, 0x1}, {{@in, 0x4d2, 0x32}, 0xa, @in=@multicast2=0xe0000002, 0x34ff, 0x3, 0x0, 0x4, 0x10001, 0xf7f0, 0x3ff}}, 0xe8) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r1, 0x1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000240000000000009078ac1414bbac1414bb000000000401907800a6def3009475f4"], &(0x7f0000000280)) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) [ 186.202169] binder: BINDER_SET_CONTEXT_MGR already set 20:54:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000080), 0x0) flistxattr(r1, &(0x7f0000000080)=""/29, 0x1d) setsockopt$inet6_udp_encap(r0, 0x11, 0x66, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}, 0x7f, r2}) 20:54:19 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000223fd4)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f00000000c0)=0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000300)={0x7, 0x1000, "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"}) 20:54:19 executing program 0: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000100)=0xfe, 0x4) eventfd2(0x70, 0x80001) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x2) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000640)={{0x5, 0x5, 0x100000000, 0x1000, 'syz0\x00', 0x16}, 0x0, [0x0, 0xffffffffffff1ed3, 0x9, 0x21414cbc, 0x3, 0xfffffffffffffffd, 0x3, 0x9, 0x80000000, 0x9, 0xffffffffffff8001, 0xfffffffffffffffe, 0x8, 0x2, 0x8001, 0x3f, 0x294, 0x4, 0x88, 0x6, 0x3ff, 0x2, 0x8, 0x7f, 0x6, 0x3, 0x40, 0x5, 0x3, 0x2c, 0x1, 0x9, 0x3, 0xffff, 0xe757, 0x5, 0x5, 0x5, 0xfff, 0x4, 0x567, 0x5, 0x4, 0x401, 0x800, 0xff, 0x16, 0x1f, 0x4, 0x7, 0x5, 0x5d1, 0x8, 0x91a, 0xf8a4, 0xffffffffffffffff, 0x8, 0x3, 0x7, 0x12, 0x0, 0x2, 0x7fffffff, 0x8, 0x9, 0x8000, 0x0, 0x6, 0x2, 0x0, 0x8, 0xffffffffffffff3a, 0x5, 0x39, 0x8, 0x276, 0x5, 0x479, 0x9, 0x3, 0xffff, 0xd66, 0x6, 0x4, 0x1, 0x8, 0x80, 0x2, 0x1000, 0x8e, 0x80000000000000, 0x2, 0xa3d7, 0x1, 0x3, 0x4, 0x872, 0x6, 0x100, 0x7fff, 0x4, 0x7, 0x3, 0x5, 0x1f, 0x9, 0x9, 0x81, 0x7, 0x2, 0xffff, 0x1, 0x86d, 0x2, 0x4, 0x1f, 0x10001, 0x7, 0x80000001, 0x10001, 0x6, 0x5, 0x7, 0x0, 0x20, 0x4, 0x20, 0x6], {r1, r2+10000000}}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x400, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000000c0)=0x1) sendto$inet(r4, &(0x7f0000000500)="128e41ca42139c38d242cdd904d30965ac57912b9af7d1df4c477c4b3af4fe5af50fb467764a259fe51c914e0516abbd59c7fd0717b68c155ad604deae18842f34c00747768bcc9b921d1e3015e538c2428bc114751fcbe2ac272f49b6909c38ba0148b193b50ab5", 0x68, 0x4, &(0x7f0000000580)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000070c0)=[{{&(0x7f0000006fc0)=@l2, 0x80, &(0x7f0000007080)}}], 0x1, 0x0, &(0x7f00000072c0)) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="18030000300000002dbd7000ffdbdf25001f0002b8000100b4001400000008000100627066008c000200080003000100000034000400018018df0000008007000605ff030000070006000180000005003f01020000070003000906000000010002fe0000000008000500", @ANYRES32=r3, @ANYBLOB="180002000700000000000100000000000700000009000000240004001f00000807000000ffff00ff0300000000040503010000000002069a63d70000080003000200000018000600da56752d2ce773604a7bfc4b72bd100c3264427a00008c0001008800100000000c00010073696d706c65000044000200180002007f00000000000000050000102000000009000000180002000100010000f0ffff080000000300000000000000100003002f6465762f6375736500000030000600e58f85c9eb61632d071b4ddad0f54102b0c178ef0b3fbdea63613416c68ec33de5204dee2a018d580c7200000000480001004400090000000c000100766c616e00000000200002001c000200ff0000006b06000000000000008000000900000003000000100006007b5750fa1790b4e40ce1c1000000e0000100dc000c0000000c0001006373756d00000000200002001c000100ff07000004000000ffffffff07000000080000002a000000a8000600d7c4d305e6c6b90802b5442a20c36ced363a3912ec8b91293eaf28b24b44904932a99d2a46c462a04122367c14e23a4f787cccd5689a0100e5c026fbf609a19ce1e7612ca01c35ef1ab46605f88f19280c2a50be1acc13b5d864e15d01f48a10fde9c04b6b977d3ab56ccbea6bebfc014fef81414ae9dd4f25fbbe28901d6510896ca5d85438db3a76193a851cad7f8855f712ee983d6f355e5d791dd04cc762f000000000009800010094000c0000000c0001006373756d00000000200002001c00010006000000000000000700000007000000f700000057000000600006003ecc04407a24c7919647ee89bbfdaddc9c26004e9c90d623134e70f11756f2e27d0c3e0074429b5befb06f06edff5fbd4ff2a89f7fccc7cd7e20eed29af7810bf6a8c97cb60206321d82612b794449e2867949ccec7060ce5155ed550000"], 0x318}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) [ 186.253817] binder: 12934:12936 ioctl 40046207 0 returned -16 20:54:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') 20:54:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:19 executing program 6: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x140) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x0, 0x1, 0x7f, 0x1}) setsockopt(r0, 0x555b, 0x5, &(0x7f0000001000), 0x0) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), 0x4) 20:54:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr}, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000040)=0x80000000001, 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20004000, 0x0, 0x0) [ 186.455537] binder_alloc: binder_alloc_mmap_handler: 12983 20001000-20004000 already mapped failed -16 20:54:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x80000000000009ae, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffffffffe01}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x2201, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)='tunl0\x00') ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000000c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) [ 186.519552] binder: BINDER_SET_CONTEXT_MGR already set 20:54:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000080), 0x0) flistxattr(r1, &(0x7f0000000080)=""/29, 0x1d) setsockopt$inet6_udp_encap(r0, 0x11, 0x66, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@remote={0xfe, 0x80, [], 0xbb}, 0x7f, r2}) 20:54:19 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) read(r0, &(0x7f00000002c0)=""/233, 0xe9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x6, 0x1f, 0xc5, 0x7bc6, 0x3}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r1, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x20000, 0x0) recvfrom$unix(r2, &(0x7f00000003c0)=""/4096, 0x1000, 0x22, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) read(r0, &(0x7f00000013c0)=""/94, 0x5e) r3 = shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000005200030f07fffd946fa283bc04eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) [ 186.540737] binder: 12983:12985 ioctl 40046207 0 returned -16 20:54:19 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x18, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0xfffffffffffffff9, 0xe6b, 0x1, 0xfffffffffffffffe, 0x7fff, 0x80000001, 0x7}, 0x1c) 20:54:19 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000080)=""/250, 0xfffffffffffffe9f) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000180)={0x7f, 0x1000, 0x5, 0x7ff, 0xa, [{0x7f1, 0x6, 0x4000000000000, 0x0, 0x0, 0x880}, {0x5, 0x8, 0x0, 0x0, 0x0, 0x8}, {0x3ff, 0x5, 0x4, 0x0, 0x0, 0x2008}, {0x6, 0x1, 0x400, 0x0, 0x0, 0x1001}, {0xeeb, 0x7, 0x0, 0x0, 0x0, 0x1902}, {0x2, 0xe41, 0x200, 0x0, 0x0, 0xa}, {0x0, 0x3, 0x2, 0x0, 0x0, 0x300}, {0x1, 0x7fffffff, 0x7fffffff, 0x0, 0x0, 0x2}, {0x81, 0x1, 0x0, 0x0, 0x0, 0x2100}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x2}]}) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) 20:54:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 186.750108] binder_alloc: binder_alloc_mmap_handler: 13018 20001000-20004000 already mapped failed -16 [ 186.791501] binder: BINDER_SET_CONTEXT_MGR already set [ 186.802992] binder: 13018:13020 ioctl 40046207 0 returned -16 20:54:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f00000001c0)=0xe8) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000003c0)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6, 0x4e24, 0x801, 0x4e23, 0x3f, 0x2, 0x20, 0x80, 0x32, r2, r3}, {0x3f, 0x2, 0x2, 0x8, 0x748, 0x1, 0x89c, 0x7}, {0x80000001, 0x2, 0x3f, 0x1}, 0x4, 0x6e6bbf, 0x1, 0x1, 0x3, 0x1}, {{@in, 0x4d2, 0x32}, 0xa, @in=@multicast2=0xe0000002, 0x34ff, 0x3, 0x0, 0x4, 0x10001, 0xf7f0, 0x3ff}}, 0xe8) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r1, 0x1) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000240000000000009078ac1414bbac1414bb000000000401907800a6def3009475f4"], &(0x7f0000000280)) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) 20:54:20 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40000040101) write$sndseq(r0, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x5}, @time=@time}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000000c0)={{0x0, 0x2}, {0x8, 0x2}, 0x5, 0x2, 0x5}) r1 = epoll_create(0x10000000000007e) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 20:54:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0x7, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r3 = getpgrp(0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r3, r4, 0x3, r0, r1) 20:54:20 executing program 0: rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x402db0, {0x3f7c6bbd}}, &(0x7f0000000140), 0x8, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) 20:54:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d34") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 187.140446] binder_alloc: binder_alloc_mmap_handler: 13032 20001000-20004000 already mapped failed -16 [ 187.169172] binder: BINDER_SET_CONTEXT_MGR already set 20:54:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") accept$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000040)="1f00000002031900000007000000068100023b01de6ca30b7e41fd5b3ffe58", 0x1f}], 0xa96ecafa79b70da5) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) ptrace$setopts(0x4206, r4, 0x4, 0x25) [ 187.189574] binder: 13032:13033 ioctl 40046207 0 returned -16 20:54:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045877, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:20 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xff, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000280)={0x7, 0x0, 0x4}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xe1e0, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r3, 0x3}, 0x8) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x19, &(0x7f0000000080), &(0x7f0000000100)=0x68) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x1000, 0x7fffffff, "4f73051654620d6f9291964a227048b21b13204bfad242e51a7367812f391ad5a5fab271c9a62e1faf4944554c50a0440502c27a5c1f943bd636857e379ad2d9169df4805a25fe050f7368b87b5952711a191096a92d4ed85d2e57f8fbcc1ef30c6f7078f0615d5ffcb6a0f2d4325d79ebae25834d725fb6b9da930689789d19e8df1265e2203a3557e67e007363c364b43afcbb611fe0743d26126f917a3fc11b3afde25e890280aca113ad44da7a8fae6dc7447645dcb69451506193b98b3a1f7d22e4caa7f15a7d2171f5e28f02f0265c6538141a6cbd36ff1bf40bb29f1004f48879d61004cb7b603328f5f10149b9d7492214ded5fd6edb0a0e882683b7", 0xf6, 0x3ff, 0xdef, 0x80000000, 0x2, 0x7, 0x5, 0x1}, r4}}, 0x128) 20:54:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="3d22e0ab63609b636330a01963ba88b16480149d3d7a6efd17c116cbd3c0ec4b9b053bce802b0a37030babb8290c2ff06205555a0d9d8489b02b1ccd79e6985dd6d17017af21a5fca701b8d58a7511fdedebe7c234cddfea8887bd681d6fe945c757eb7f5b2928b83f030792a5de7eb6498102bf69268a235f03eadd06d315caeec6ae7292b09e26d9141bb0302fafc1562fbac055", @ANYRES32=0x0], &(0x7f0000003a40)=0x8) unshare(0x24020401) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa}}}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000040)=0x100) [ 187.368121] binder_alloc: binder_alloc_mmap_handler: 13056 20001000-20004000 already mapped failed -16 [ 187.396318] binder: BINDER_SET_CONTEXT_MGR already set [ 187.408118] binder: 13056:13057 ioctl 40046207 0 returned -16 20:54:20 executing program 1: r0 = socket(0x11, 0x80011, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000180), &(0x7f00000001c0)) 20:54:20 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x15, 0x8000, 0x6, 0x3b, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_x_nat_t_type={0x1, 0x14, 0x7f}, @sadb_address={0x3, 0x17, 0x7e, 0x20, 0x0, @in={0x2, 0x4e20, @multicast1=0xe0000001}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_key={0x11, 0x9, 0x3c8, 0x0, "bf163c939b26c1fa841b079251fb26567ba56b702130f691f9dd1ee8aac752b633971bd83774307244afeca89fad2b73759f93481a4f1106f6944d418e1c56ff851a4aab0c137da56a504e6d5686d0c25f0def21e9f8e627e1ad8650bc672eeda2abd5848b5891b72c723063c81ef296addd297c8ad483107b"}, @sadb_x_sec_ctx={0x1f, 0x18, 0x7, 0x120000000, 0xef, "5ea90c9b1d8b05430f9eac7f4e8912cba3c30901cb5c36ac2aa198fa18186044c6e871059e65120737625a568fb204fe3001cd668888c9c8b4ea382bb8a92d0076d67b555a9098c857b0e55e084e37ba4ca48fe2e5e85a9d14cf098e75924fc8ff1d8c14c9ceb51ea0206dcb062d97852b69cc849caa98a4f57f0b8544d7d11ee296670328042d2b938a568383b54a572190d0d06858f0fe41b640af4343ca4e54a8ca5eb6748e729140792ee44331e46ffa14df47510130dbf9cced53c76cc02a26361a472f4dab500fed54c5d35249c985f09cdf192d13f8c0380cc526938ab3d5a6da6ff1ea4a387e6e077fa931"}, @sadb_x_sa2={0x2, 0x13, 0x45, 0x0, 0x0, 0x70bd25}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}]}, 0x1d8}, 0x1}, 0x4) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020d00001100000000000000000000000800120000000300007f00000000000000000000000000000000c39d00000000f00000010000060000000000000000000000000000000000000000000000000003000604bb0008000000000000030005000000000002000000ac14ffbb0000004e823ba2fb40606a00000000"], 0x88}, 0x1}, 0x0) 20:54:21 executing program 5: stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r0, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') sendfile(r2, r2, 0x0, 0x8) 20:54:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:21 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0}, &(0x7f0000001000)=0xfea6) r3 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0xec35) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000100)={0x9}) clock_gettime(0x7, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000200)={0x8ade, 0x8, 0x200, 'queue1\x00', 0x2}) acct(&(0x7f0000000400)='./file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000500), &(0x7f0000000540)=0x4) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000340), &(0x7f00000003c0)=0x60) ppoll(&(0x7f0000000040)=[{r3, 0x104}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x110}, {r1, 0x940a}, {r1, 0x4}, {0xffffffffffffffff, 0x80}, {r3, 0x1}, {r1, 0x4044}], 0x8, &(0x7f0000000140)={r5, r6+10000000}, &(0x7f0000000180)={0x2}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000300)={0x8, 0x5}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000580)={r2, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}}, 0x84) openat$cgroup_subtree(r3, &(0x7f0000000640)='cgroup.subtree_control\x00', 0x2, 0x0) stat(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={0x0, r4, 0x0, 0x3}, 0x14) 20:54:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000040)=0x5) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d65345f8f760070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}, 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x3ffd, 0xc6) r3 = getpgrp(0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)={0x1e, 0x37, 0x1, {0x1, 0x10001, 0x5, r3}}, 0x1e) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 20:54:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306263, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/self/net/pfkey\x00', 0x100, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000001a40)="917b5d678e0f378d020cfca7d67a26cc1dea0691f0fc6ed32ace184be1978988d1177690fc68cc3533844fbd9f8a57b1e0464dfe5fc377c6a023bf4c64243751af87827b250d025b5dff616863aaf4103f76adf0ab2d6f50faff00663a060519468761d484d3b6b05ddb7633498a38c1b3a519c29d733f01f14ba3807739c90f2a545ff2250b9c7a93e0a8137026fd0105aba0606641b9eaff59ffc44eb365622a2d1ba14f2433141230e04f02f20f77eb9780d97521c78ca806a6aac7779db46052a848e3e2c266f53a9fe78bdace43785b22b05dbe51fe3b385aa9d90274af488f100af8420834dc7a", 0xea) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x80247008, &(0x7f00000002c0)) 20:54:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") rt_sigprocmask(0x0, &(0x7f000021f000)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) unshare(0x8020000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS0(r5, 0x401845c0, &(0x7f0000000200)={0x9, 0x2, 0x7fffffff, 0x0, 0x7, 0x4}) clone(0x1f000000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000580)) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2}) exit(0x581) recvmsg(r2, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={r6, 0x8}, &(0x7f0000000300)=0x8) r7 = accept4(r0, &(0x7f0000000100)=@can, &(0x7f0000000080)=0x80, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000180)=0x2ceacff2, 0x8) dup2(r1, r2) tkill(0x0, 0x15) 20:54:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:21 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x280400, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) getpeername(r0, &(0x7f00000000c0)=@can={0x0, 0x0}, &(0x7f0000000140)=0x80) sendto$packet(r0, &(0x7f0000000080)="98a184465904eebd12223dd6849103163c6941610bce2881d3fc31ce1ee08987b6401b1136e8055fc97fd2e0ab748f5b93b4", 0x32, 0x400c800, &(0x7f0000000180)={0x11, 0xf5, r1, 0x1, 0x3, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x14) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x9, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x7200000000000000, 0x8, {0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x247, 0x100000001, 0x50c8, 0x1}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x7}, &(0x7f0000000300)=0x8) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000340)=0x4, 0x2) perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x70, 0x3, 0x321, 0x8, 0x3, 0x0, 0x5, 0x801, 0x2, 0x38ec74bc, 0x1, 0x4, 0x3f, 0x2, 0x99, 0x15e, 0x0, 0x9, 0x9, 0x21a7, 0x48d, 0xc00000, 0x4, 0x2, 0x10000, 0x8, 0x10001, 0xffff, 0x6, 0x200, 0x4, 0x4a, 0x3, 0x6, 0x9, 0xd5, 0x7fff, 0x0, 0x1000, 0x0, @perf_config_ext={0x100000001, 0x1}, 0x400, 0x8, 0x1b6f, 0x0, 0x0, 0xffffffffffff7fff, 0x9}, r0, 0xc, r0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={r3, 0xac, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0xbf60, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, @in6={0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x200}, @in6={0xa, 0x4e20, 0x1, @empty, 0x7}, @in6={0xa, 0x4e22, 0xfffffffffffff972, @empty, 0xd}, @in={0x2, 0x4e24}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e23, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x8}]}, &(0x7f0000000500)=0x10) r4 = msgget(0x3, 0x20) getresuid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)=0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800)={0x0}, &(0x7f0000000840)=0xc) r10 = gettid() msgctl$IPC_SET(r4, 0x1, &(0x7f0000000880)={{0x800, r5, r6, r7, r8, 0x0, 0x2}, 0x9, 0x10001, 0x1800, 0x200, 0x2274, 0xfffffffffffffc01, r9, r10}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000900)={0x0, 0x1a, 0x9, 0x6, "6ca4a7afccf6682deb2c71d3237ad0ac4ace2f78fa516801636bc7597625e733"}) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000940)) r11 = creat(&(0x7f00000009c0)='./file0\x00', 0x100) bind$can_raw(r11, &(0x7f0000000a00)={0x1d}, 0x10) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/dsp\x00', 0x311001, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000a80)=0x7, 0x2) sendto$inet(r0, &(0x7f0000000ac0)="f06d88ee4dd942b5615f2d42a95d27e01f119c6c3bf0f1064c01f72def49c0a07a7322b254399127f36563afa8610a5f579d1a5090d0e805b5ae5f97fe910a", 0x3f, 0x10, &(0x7f0000000b00)={0x2, 0x4e22}, 0x10) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000b40)='syz_tun\x00', 0x10) ioctl$KDGKBMODE(r11, 0x4b44, &(0x7f0000000b80)) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000bc0)={@empty, 0x5b, r1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/net/tun\x00', 0xc0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000c40)) fdatasync(r11) 20:54:21 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x7fff, 0x3, 0x2, 0x87, &(0x7f0000000080)=[{}, {}, {}]}) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0xffffffffffffff7f, 0x0, 0x1, 0x46c, 0x8, 0xe776, 0x5, 0x9, 0x4, 0x3bb}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f0000000000)) timer_gettime(0x0, &(0x7f0000000040)) [ 188.035115] binder: 13097:13104 ioctl c0306263 20000040 returned -22 [ 188.066460] binder_alloc: binder_alloc_mmap_handler: 13097 20001000-20004000 already mapped failed -16 20:54:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2b, &(0x7f00000001c0)="df5cc156f9c2b037eab870b5782b82c281cf3103c8aa239a928421a0484f8dbae5010f777d7942b334f888221af1d02016d3ef448d51d03afeaa5cdb762f4f923063dce8cba5a05ba7c48b8be12dbdf8be68b6afe5814d84d7f1dd493c577a4ba298a8acdad820c8e563f0640d3ae61b4ae119447878243c050c0f0fcba0ae810ac2f8b9bbd1b35946afa1c1af7441dc538880414512a5964906df5854d437738bdd1661ab016337b9a8a0a1d3d98bdaaf366931d0b05807d297a103319d9c73a52e9886603d5359a8c868234f8c937e633a807aab15676f3999c0ba739bd73ffca50c8628a0") r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000540)=0x4, 0xfdd5) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="240000002e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 20:54:21 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$void(0x1f) open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x4) r0 = memfd_create(&(0x7f00000000c0)='memory.swap.current\x00', 0x3) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x80000001, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="16001900020004000000fdffa82e8de85e28fb6dca0334d25b559be314a9e0f82a618170fed686fabe64d7ddd4ffb7a9c2ed9d5b02c93b4d70b0a4a9888a4d596a5adad0"], &(0x7f0000000280)=0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x0, 0x3, 0x20, 0x0, 0x8, 0xffffffffffffffdd}) socketpair(0x13, 0x80007, 0xffffffff7fffffff, &(0x7f00000001c0)) 20:54:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 188.100574] binder: BINDER_SET_CONTEXT_MGR already set [ 188.110569] binder: 13097:13104 ioctl 40046207 0 returned -16 [ 188.117949] binder: 13097:13111 ioctl c0306263 20000040 returned -22 [ 188.259096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 20:54:21 executing program 2: unlink(&(0x7f0000000000)='./file0\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001c80)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000001c40)={&(0x7f0000000580)=@getae={0x4c, 0x1f, 0x27947ae51d8afc3, 0x0, 0x0, {{@in=@loopback=0x7f000001}, @in6=@local={0xfe, 0x80, [], 0xaa}}, [@mark={0xc, 0x15}]}, 0x4c}, 0x1}, 0x0) 20:54:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:21 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x8, 0x1, 0x0, 0xc4, 0x3, 0x3b, 0x3, {0x0, @in6={{0xa, 0x4e23, 0xac, @loopback={0x0, 0x1}, 0x4}}, 0x74508d74, 0x3, 0x7fffffff, 0x100000000, 0x41c}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0xfffffffffffffffe}, 0x8) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x54d, 0x951d2c7) sendto$unix(r0, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) 20:54:21 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCCONS(r0, 0x541d) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) poll(&(0x7f0000000040)=[{r0, 0x20a8}, {r0, 0x1}, {r0}, {r0, 0x2}, {r0, 0xc001}, {r0, 0x2100}, {r1, 0x4}, {r0, 0x100a}], 0x8, 0xffffffff) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000d00)={0x14, 0x3, 0x2, 0x3}, 0x14}, 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4ee, 0x5, 0x9, 0x5, 0x81, 0x60e, 0x2, {0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x0, 0x1000, 0x9, 0x7e78, 0x7ff}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r3, 0xaf, 0x30, 0x5}, &(0x7f0000000280)=0x18) 20:54:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 188.398395] binder_alloc: binder_alloc_mmap_handler: 13138 20001000-20004000 already mapped failed -16 [ 188.433250] binder: BINDER_SET_CONTEXT_MGR already set [ 188.447605] binder: 13138:13140 ioctl 40046207 0 returned -16 20:54:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/xfrm_stat\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80000, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000380)=""/242, 0xffffffffffffffc6}], 0x10000000000001f0, 0x0) 20:54:22 executing program 7: getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x73}, &(0x7f000000affc)=0x20) r0 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000080)) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x20010, r0, 0x0) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000ff8)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) rt_sigsuspend(&(0x7f0000000180)={0x3}, 0x8) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000)) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r2) sigaltstack(&(0x7f0000001000/0x4000)=nil, &(0x7f0000000040)) 20:54:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x20400) r3 = socket(0x1001000000010, 0x802, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xda76b36b65dcf5df, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, [@IFLA_INFO_KIND={0x14, 0x1, "697036677265000000000000000600"}]}, @IFLA_NET_NS_FD={0x8, 0xc001}]}, 0x40}, 0x1}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2, 0x11, 0x80000000, 0x8, 0x6, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_sa={0x2, 0x1, 0x4d2, 0x401, 0x3f, 0xce, 0x4, 0x1}]}, 0x30}, 0x1}, 0x10) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x400, 0x8, [0x76, 0xffffffffffffe1bb, 0x6, 0x9, 0x10001, 0x10, 0xfff, 0x40]}, &(0x7f0000000280)=0x18) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000340)=0x8) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={r6, 0x8dfc}, &(0x7f0000000300)=0x8) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000003c0)=[0x1000, 0x5]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000101e00fb034d564b0000000001"]) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 20:54:22 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0xffffffffffffff7f) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0xe15, &(0x7f0000000080)=0x4) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) 20:54:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) r4 = dup2(r3, r2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000140)={0x7, 0x40, 0x8e0, {r5, r6/1000+10000}, {0x0, 0x2710}, {0x2, 0x7, 0x7f, 0x1}, 0x1, @can={{0x2, 0x1, 0x9, 0x4}, 0x7, 0x3, 0x0, 0x0, "7eb41b0d80aef39f"}}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x0, 0x6, 0x268]}) 20:54:22 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) recvmsg(r0, &(0x7f0000004640)={0x0, 0x291, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/200}, {&(0x7f0000000140)=""/117}], 0x0, 0x0, 0x3da, 0x3ae}, 0x0) 20:54:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = msgget(0x2, 0x209) msgrcv(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009a86a448cfa70000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000b39c187b756bfbb0db00454bf0491e0599f58980c39f11fa4981187f54264479d82b2765abf464b785c10feb71097370880fb74b"], 0xb5, 0x2, 0x3000) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f00000000c0)="4ac5baac0a11763a9bcbcc4a0c20ca8300e578bb887ce18d999b521a39a38680b1d4ed82bf56e0c35b726d23103b3dd0e3b24e665dfae55bd9140e2f7e7aa13f555725eb8fb0e74d38cc92f5d2886c041c723065aad2098be3d75efa92ed9a9727c960a79c980d42abcf0cee2186b1c323131fd755252eb33749f950c8fd119c11593b7bf27045cdf6a87aaa935468e03796fb40d2383e48db43f56f192101da1f4d27c37093e792bc5329873215d92409e895c8215ffba6cd9b4cee7cd10a8574c7e970af75f43c6922bbbe36898ca1342637a8c7d204ad40801463a78848") ioprio_get$pid(0x2, r2) getsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:54:22 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x3e5, 0x0, 0x0, 0x6d92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x1f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0x400000) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) rt_sigsuspend(&(0x7f0000000040)={0x5}, 0x8) getpeername$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c) socket$l2tp(0x18, 0x1, 0x1) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="6f8920388ad98a022cc073322e2a23766d6e657431706f7369785f61636c5f61636377737359696d650700000065f39a5c3065"]) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) 20:54:22 executing program 2: r0 = getpid() openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='maps\x00') sendfile(r1, r1, &(0x7f0000000000)=0xffffffd, 0x7fffffff) 20:54:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 189.221507] binder_alloc: binder_alloc_mmap_handler: 13187 20001000-20004000 already mapped failed -16 20:54:22 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) sendmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c25a4919"}, {&(0x7f0000000140)="3ff010ad25a6d5cd6c3d7fc62c91a222f1337a726ec5c4e4bfcd00f547cf2c72fc46a6cce6e23d5f73713e08898f3a688ff81735d9524ca30542d3975edf0f8e8f9a419196ada8ffa585aeef0812b0e5630caf9d"}], 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="00000000000000000100000008000000a93cd83cb6d30f989364ee77608432865ae574351ff4647eff6d754c03f1b444aa44edfe95d23fb175f8957ecdc801f53a4f9ab5763d49fad437fc1896f3fb8e2617cb115cc2a0837f46a4ef0000000000000000000000001f01000003000000d79ad18c84a7293effbc82a52197f5d018f2d0f6ff4dd31491cdebb36812e0d93327a2ceaf3b8be3e69cbc57931677ee604aa891d88ea0f51b93a467f07436b6cb2d48cd294571bcfc9821f0a2d6f3de8e92ee2ae0a7876ac200a838c69f0444ecec9f360f116282cb2ccfa0ad0b70958e1f130b84e936c570a051cc253f3f95134e27f5232d5674fee4a03943be73321ac129cccca93845be1d3d7db4dcb51c1807f674efb7409480ca7e98de44d561be2ccbf81e40c4cb0acacbce65e561bb6e0a34f0198e1f440d4661cf1af725406b79f0252710198daabaa29e87022d1a7dc4f200285c9e136b65c2d1021e72326c09b7a1776f65330168af00"]}, 0x1}, {{&(0x7f0000000380)=@in={0x2, 0x4e22, @multicast2=0xe0000002}, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="be63465c5d5d46a8126886ad762aae8b4fba4eabe14e21d01cc26aefbb00caeb37817f569c0beea1e5be23ecc37dea72f792e443d4733af7e2bcafee6bee36cf452c0ea8e8bd66f5c0177897f5a332a62d77f172679589fc8d9c7d5c4e841bed7c35f801cc418d890d9790f21eb213b2f5c3bcd6ab475b48ea0496694583c56a2eccfc78880dbda251a7fea5fc9e088cb56f0119dc7acfdf1a8b8a7afc7b0847bf3af92aee61250558648a4b99d38ba48d3129119fea27a608693d3d0d6d6ff1f6d6992c084f687191b14ba4a2b1550550f9088b66b9a6c635a960274d"}, {&(0x7f0000000400)="40cb6228feb0c5d7944c"}], 0x0, 0x0, 0x0, 0x80}, 0x5}, {{&(0x7f0000000740)=@xdp={0x2c, 0x2, r1, 0x28}, 0x0, &(0x7f0000000800)=[{&(0x7f00000007c0)="68a8335af330855a88601c2b44f3b081890ae861578c6bcaf0f9670751f4c6795e98"}], 0x0, 0x0, 0x0, 0x10}, 0x4}, {{&(0x7f0000000840)=@generic={0x1, "e8e52250c2d81ca0eac6c7a1a2986c24e643ba49eb9ce95677537848543d22480a65378b894960b00e2a393884005c0e2c286f0f3dc4997a778fdb09a6c96cb11d2153d933d68afab1fdeaeab5de6583c7a5d0dae7e7c363fb3d1d8fab62a899e1c164e591dfc3c4511a01bff5335f71083c51e4f0322705375609691ac4"}, 0x0, &(0x7f0000000d00)=[{&(0x7f00000008c0)="fbd6b097475a36627c4d03833f1ecbbc595ec3665531eb8e6315e470c779c5d5359ffe64e47327140402942347c2d618b5f059585fca23ea6dc9081214490e64d0a2f94d3f9763328318c3535e742b7ca925972991b4c03059883c9bac138dcf447381da40fc27e81e595e707573893344ff6af7d08cc2fc85798361cf31ff10bbcd2ccff7d3a5ab27fe70fcdc6a1e930fccf6426ac432982945a46006dfc882438a635b532396cca20203970f"}, {&(0x7f0000000980)="29598708a84bb34f6c0ff52570057fb3ab381710f5fbe7863ef4794e0138adb086905c4bbbf0867965a034ba30e2ed0e6c840cc59bff605a599e70c4bc22541b01764b61722e5d2013d636ef3b2b2c603e49c9daf287c21923e96abc5edd8077e8f5571e9a9cddc47ce541b7324f3b9653c91701150e54d6e72d6ba199dfc893a250057e18f06eee238f0d4a535e40ecc579daf6b1bde916bdbef96e95433d5bad4ef74802b77cd471a0f209b929f8a034cb119728dadc5863e1ae8d8d94b59ff488ea3ab684a1237460299929d2"}, {&(0x7f0000000a80)="3af81c94b781dcb5b6a4d861027615c1dd3ffe42f864c4715cb30c52b036408525e62b174934802695945977c7c8ae132275730fbde4b43fc21095b3842119742f81e5f2d299451a57bd03bb9ece9ecb1aa406a6355bffae61f510d8124f989595a8e11e23d89070402d42d7529c07d35127"}, {&(0x7f0000000b00)="628555d7aed2e7c401df6a5f803902d4aad2df6b4b4d0ebbef98395889ad59069f8c0239a9fef31185cb8f9d983cce8af425978fc166d0f79697d3023b24a4ffe8d8724f1405bc16044179aa540735975edcb4bf08254f027db2cf4829175ecb28d9c2216dc72713333781eb5684fe8f8f5ceddf50bea37548d8f5b5fa938f77ed5ac56bbc78c51f54065a8ad593874f1e2aabb52776f44ce1eba9b5272a5175f382a5c72280aceb754b85799180394b8190c7f6f475775fb12462bc2e4b7e55a9fdf5b17f1dd1f423db567d5796f64e50b90b9c5d1c6f0528f8ab4db92fecdcc35f5b42a0d141648bcfcdae86e8d0d59e0900abd65f65"}, {&(0x7f0000000c00)="7c6e2ca4619f2489e70b299985d2a2dd32658916db8a294a851b2279b0d57ed38dad94b80741aa205e224b7a40727ec06f4ce490a0be4e028612402e224cf54a337b152ef5878a7b7a9efd2ff62101da83a63f8747e93ffe4932cbee84c97939595c7a21a068a7c5bbfcc7953f148a2ea9130e92f2f25153ebf3e50bd88386f1b3ae6ae0ada2982c6d2069c59276d5c5846e497f1294a5864230ad99271a5efe1d9afcdada11a03f8c18cf4535c048aa21d86e2f"}, {&(0x7f0000000cc0)="0332dd9862851bef422fb3a632c788c93b02fe643897e67e3189a9c5968840e3a6"}], 0x14f, &(0x7f0000000d80)=ANY=[@ANYBLOB="000000000000000002010000080000004b0642d0add3f1dd7ffc86b699d8c66ae545d6c3a45e9f1411e6793244dba091abee842ac939627a5d5fe3b21543f4029313d078e8590a0da0bdf3fd996b8b4588ff89eb470efec4de320f645aa0ed02dd169dfa1343657979097efc114c5f3a66899647f4aa023574323ffb5e44e3c810be1013ab620cebdf2a000000000000000000000000000000000000020000003e4cc45420e19dd549ca58a4b8ddb32375137aa4274715a4fa042367029cbcebf991dd55259ce4fee90951815147a6ae3897bec3fde2d0958a0c6d9986a96d2300000000000080013e1fa078c7ee0410716f7cf44c000000"], 0x0, 0x800}, 0x3b7}], 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4000000000004}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 189.277692] binder: BINDER_SET_CONTEXT_MGR already set [ 189.301740] binder: 13187:13190 ioctl 40046207 0 returned -16 20:54:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)}]) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0xfffffffffffffffa) [ 189.410298] binder_alloc: binder_alloc_mmap_handler: 13205 20001000-20004000 already mapped failed -16 [ 189.447643] binder: BINDER_SET_CONTEXT_MGR already set 20:54:22 executing program 0: mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x400000000000000, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) [ 189.460453] binder: 13205:13207 ioctl 40046207 0 returned -16 20:54:23 executing program 7: r0 = socket$inet6(0xa, 0x80000, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005640)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005680)={'erspan0\x00', r1}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR64], 0xffffffffffffff64, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x54, 0x0, &(0x7f0000000380)=[@clear_death={0x400c630f, 0x0, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}}], 0x0, 0x0, &(0x7f0000000480)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x8000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r3, 0x3, 0x1, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', r1}) r4 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x7, 0x4fdee946f25b9ec9) ioctl$sock_SIOCGIFCONF(r4, 0x8910, &(0x7f0000000400)=@req={0x28, &(0x7f0000000340)={'ip6gre0\x00', @ifru_mtu=0x9}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x0, 0x2}, &(0x7f0000000180)=0x8) dup(r2) 20:54:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x1d}, 0xfff}, {0xa, 0x4e20, 0x3, @empty, 0x6}, r1, 0x5}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x16, 0x60, 0xfa00, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, {0xa, 0x4e23, 0xdffffffffffffffd, @ipv4={[], [0xff, 0xff], @rand_addr}}}}, 0x48) 20:54:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x30000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)=ANY=[@ANYBLOB="520009000209050000000000000001000010c6b0c480c97bcf00"]) openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x800, 0x20, 0xffffffff, 0xfffffffffffffffe}) ioctl$TIOCSWINSZ(r0, 0x5423, &(0x7f0000000080)={0x1b}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8) [ 189.771392] binder_alloc: binder_alloc_mmap_handler: 13228 20001000-20004000 already mapped failed -16 [ 189.795225] binder: BINDER_SET_CONTEXT_MGR already set [ 189.801871] binder: 13228:13229 ioctl 40046207 0 returned -16 [ 189.809818] binder: BINDER_SET_CONTEXT_MGR already set [ 189.815270] binder: 13232:13233 ioctl 40046207 0 returned -16 [ 189.821500] binder: 13232:13233 unknown command 0 [ 189.826438] binder: 13232:13233 ioctl c0306201 20000000 returned -22 [ 189.833277] binder: 13232:13233 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 189.840315] binder: 13232:13233 transaction failed 29189/-22, size 0-0 line 2852 [ 189.870919] binder: 13232:13244 unknown command 0 [ 189.876789] binder: 13232:13244 ioctl c0306201 20000000 returned -22 [ 189.887585] binder: 13232:13233 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 189.905271] binder: 13232:13233 got transaction to context manager from process owning it [ 189.913788] binder: 13232:13233 transaction failed 29201/-22, size 0-0 line 2843 [ 189.925786] binder: undelivered TRANSACTION_ERROR: 29189 [ 189.942151] binder: undelivered TRANSACTION_ERROR: 29201 20:54:23 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x10001) getpeername$inet(r1, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) r2 = getpgid(0x0) r3 = getpid() tgkill(r2, r3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KDSKBLED(r4, 0x4b65, 0x5) 20:54:23 executing program 2: mkdir(&(0x7f0000578000)='./file0\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x28200, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/126, &(0x7f00000001c0)=0x7e) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='system.posix_acl_default\x00', &(0x7f000054afec)="0200000001000000000000000200000000000000", 0x14, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000240)={0x2, 0x5, 0x0, 0xff, 0x5}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f00000000c0)={0x4, 0x52b3c0f7}) socket$bt_bnep(0x1f, 0x3, 0x4) 20:54:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 190.022754] binder_alloc: binder_alloc_mmap_handler: 13254 20001000-20004000 already mapped failed -16 [ 190.039399] binder: BINDER_SET_CONTEXT_MGR already set [ 190.048375] binder: 13254:13255 ioctl 40046207 0 returned -16 20:54:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="fdab57398372a2c986ac891b049136a802a7fb2fbb4f78c0e405e29d88ad09724597a258f07209af1fa79be9768b6af9b97232174e37a2ecc21e207bd37b9d00e953c0b00310c2e22f7db8cbdeb01e9c0e1b8c458b368daf86cd39f13eba2ebea0b05c001b344e9bfb48253c4d117cb9836f85740d0cc7404ab1304de5e0d2647fcba431") r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x2000000003, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x800, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000200)={0x0, 0x3, 0x3ff, 0x100, 0x20, 0x81, 0x20, 0x54, 0x3, 0x80000001, 0x2, 0x1}) socket$inet6(0xa, 0x1, 0x7fff) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001580)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x1008) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r3, 0x1, 0x8f57, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r3}, 0x8) setsockopt(r1, 0x107, 0x9, &(0x7f0000000340)="6bbf62e3", 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@empty=[0x2b], @link_local={0x1, 0x80, 0xc2}, [{[], {0x8100, 0x72d8, 0x44, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)={0x1, 0x0, [0x0, 0x0, 0x0, 0xc49]}) 20:54:23 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000000)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)) unshare(0x800) 20:54:23 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000040)=0x1) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000023000)={&(0x7f0000000080)={0x10}, 0x139, &(0x7f0000023ff0)={&(0x7f0000000240)={0x18, 0x27, 0xaff, 0x0, 0x0, {0x15}, [@typed={0x4, 0x1, @binary}]}, 0x18}, 0x1}, 0x0) 20:54:23 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x6a280, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000400)) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="26a635f4a222", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xb, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x12}}}}}, &(0x7f0000000300)={0x0, 0x4, [0x564, 0xf51, 0x3dd, 0x4be]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40090) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000200)=""/189) 20:54:23 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 20:54:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:23 executing program 1: socket$bt_bnep(0x1f, 0x3, 0x4) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000040)) [ 190.278751] binder_alloc: binder_alloc_mmap_handler: 13270 20001000-20004000 already mapped failed -16 [ 190.294982] Unknown ioctl 21590 20:54:23 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0xfc, 0x0) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x1, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000371705de559150d99bc0fd001300000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003007369743000000000000000000000000024000e000000000000000000000000000000000000000000000000000000000000000000"], 0x58}, 0x1}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 190.336912] Unknown ioctl 21590 20:54:23 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x70, &(0x7f0000000580)="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") prctl$seccomp(0x16, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x100000000, 0x2, 0xba, 0x400}, {0xffffffffffffffc0, 0x1d1, 0x4, 0x10001}, {0x5, 0x8, 0xb5, 0x80000001}, {0xffff, 0x6f6, 0xffffffff, 0x3}, {0x7, 0x40, 0x8, 0x40000000}, {0x2, 0xfffffffffffff9c3, 0x0, 0x6}, {0x5, 0x2, 0x3, 0x6}]}) unshare(0x2000400) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0x8004587d, &(0x7f0000000040)) unshare(0x2000000) 20:54:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = syz_open_dev$mouse(&(0x7f0000001640)='/dev/input/mouse#\x00', 0x0, 0x8400) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000001680)={0x679, 0x4, 0x9, 0x7fffffff, 0x1, 0x2}) r2 = socket$inet(0x15, 0x400000080005, 0x0) r3 = request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)='queue0\x00', 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000640)="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", 0x1000, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r3, &(0x7f00000002c0)=[{&(0x7f0000000240)="ac6467f83a7af878aa2d5a975ee5035737454ee44c", 0x15}, {&(0x7f0000000400)="ab4e6dca2e594cbf41f121f088865cf013ba680692b04ce8e06a837af0cebb72d90dcc7f1d7abccff4ece724b4e29b6f2b66ad6bb623139b27ce7fb877af06fb7699d2daca47e6ae38754a744b819b49b3261c51907b6e47f59e5e081739ac0b93180ef9d7cc021cd8d3cd9383c5d4c2070d215fabafd6c3209c0aaba4bc23ff9a2538fc3fb66ff410fcc6bc04b8", 0x8e}, {&(0x7f00000004c0)="9726da689d7245a02c73a05ef8afb7e1d7b77d56e9cfdc70bd2e6ba22404dc32f64334c1b77d1d4852e9cd3bd8f3ed617b91ee49ba38025fdb3f3a26e9651bdc03ddd766a151a3bf84df51786f48a0baf37e6741fd68b7a95eac5abe27125121fb0643e55f0cb331a0a613cca2871e0e43df59c7bbb6a136e85067d12be35212024e0a2e8c25c59d930566b53609d94ac611c4e1bacf9d237b92b83b41d64d0d24b031281d2172684d508f58e107ed4974ef84f62084cc5fa9e504666c97bb5921dbf054118cfae9ba1b1750bd7c333fb960a0decd", 0xd5}, {&(0x7f0000000280)="f2c9250200e3f155a4131e60dfe18694a48a3a01c175f99c8d9faf55f9", 0x1d}], 0x4, r4) connect$inet(r2, &(0x7f000001a000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000300)=""/220, &(0x7f0000000140)=0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) ioctl$TIOCNOTTY(r5, 0x5422) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f0000000080)={0x2, 0x6, 0xffffffffffffff0a, 'queue0\x00', 0x42}) 20:54:23 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x35, 0x4, 0xa, 0x1f, 0x2, 0xfffffffffffffffc, 0x6, 0x72, 0xffffffffffffffff}) [ 190.375241] binder: BINDER_SET_CONTEXT_MGR already set [ 190.388481] binder: 13270:13272 ioctl 40046207 0 returned -16 20:54:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x200000) sendmsg$unix(r3, &(0x7f0000000540)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)="b27ed2acf28e6b132bd977658a3328ea7600839152c7297ae7b094954108e95b6e6409fe16c6fd87d774ae160549fb7551490576a92e1c028b52f1697bc4cf1a79f1b398cef4f1f81745311e6f292883f098611714f554ef8ce4bba766b5046b7dacb00aca4c75da4339b7799a884e581c7dee7ff0f27899582df21ff255bad7126da0d2b79b072379a2884d6bbb8b", 0x8f}, {&(0x7f0000000140)="8ef1aeac2a62bf04976ef43dfd9c536964d85ade13fd016a1b1a3f5b1aac0ca437e501e11fa7abd772e209eb2f88818082079c506367fadd22", 0x39}, {&(0x7f0000000380)="4b1ad1cdb074c446944e3ba186431826af3cfc66942125a7fbab7b7d7886c1b70b35369c8864af5809b1d6ca939f877af65c7de05755dc221cf46eeb48be882afe5b0353a65ed7b7f6eaa17e8cdedea05191ebccbd0710ae82a022cc1ead89e47e156131300b128039a359754ef93d33236f0eddc09ab791ed4b7e561590f06baed8ac7fbc56244c42d67f505e0d37aca4d91defe9d742cd69133fe367acb4ded2ee1494b2", 0xa5}, {&(0x7f0000000440)="618d1d84dcb83d954de0c19ded48d0d965b9d1baf7772d5ecaf8ee1f3cb55f1db162cced9d7c789109afedc5894490c874204ff3e96b8eb2738574a59ffb64dc983ee3f59b8a18258c85f2bd05fd1640952189ba902162dcdbc35e619fd0b825f45e6e83e3cd59c0198e9fdb81d0c037a775110707803661b434cbc842f1cbafd42dc8e46dbc33b57f57bb9136b8", 0x8e}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000000200000003c91309df300000100000000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1], 0x30, 0xc884}, 0x880) sendmmsg$alg(r2, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="502da457d6d9e3097bdc90ddf3247273e876b18d6f21768bfc170b27166eaf3f0bc8fdd0cacef007a17678c0143294b50c7bfa14b51945b044dd9fbd00f3d4e31c5146268b602264e7cd4ee09ad42026bf3c24b06cc8f986", 0x58}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) recvmsg(r2, &(0x7f00000007c0)={&(0x7f00000005c0)=@ipx, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/137, 0x89}], 0x1}, 0x0) 20:54:23 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc030624c, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:23 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x2) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3d, 0x400000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x1, @mcast1={0xff, 0x1, [], 0x1}}}}, &(0x7f0000000240)=0x84) 20:54:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_0\x00'}, 0xfffffffffffffdd3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/65) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 20:54:23 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000022]}) 20:54:23 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4000) ioctl$KDSKBLED(r0, 0x4b65, 0xfffffffffffffff9) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x7, &(0x7f00000000c0)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x1d}, @empty, @multicast1=0xe0000001}, 0xc) sendto$inet6(r2, &(0x7f0000000300), 0xf49b, 0x400806e, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000100)=""/98, 0x1000000, 0x800, 0x1fc}, 0x18) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000180)='+', 0x1) [ 190.536819] binder: 13314:13315 ioctl c030624c 20000040 returned -22 20:54:23 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) restart_syscall() syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 190.612330] binder_alloc: binder_alloc_mmap_handler: 13314 20001000-20004000 already mapped failed -16 20:54:24 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001c00ec0400000000000000000a000000", @ANYRES32=r1, @ANYBLOB="000000001400010000000000000000000000000000000000"], 0xff3b}, 0x1}, 0x0) 20:54:24 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0xb}}) close(r2) close(r1) [ 190.667206] kvm [13329]: vcpu0, guest rIP: 0xfff0 Hyper-V uhandled wrmsr: 0x40000022 data 0x0 [ 190.690354] binder: BINDER_SET_CONTEXT_MGR already set [ 190.699389] binder: 13314:13327 ioctl c030624c 20000040 returned -22 20:54:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000140)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=""/222, 0xde}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x3, &(0x7f0000000280)="005cbb8db099240970caed6b1e012f398e527b4129969e61151c2c076f6dff63f0603f7fa6dca0c98d98b33402") clock_gettime(0x0, &(0x7f0000007140)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000071c0)={{{@in=@rand_addr, @in6=@remote}}, {{@in=@broadcast}}}, &(0x7f00000072c0)=0xe8) sendmsg$netlink(r1, &(0x7f000000ca40)={&(0x7f00000026c0)=@proc={0x10}, 0xc, &(0x7f000000c980)=[{&(0x7f000000b640)=ANY=[@ANYBLOB="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"], 0xc64}, {&(0x7f000000c940)={0x10, 0x42, 0x200, 0x70bd29, 0x25dfdbfc}, 0x10}], 0x2, &(0x7f000000ca00), 0x0, 0x48000}, 0x40) recvmmsg(r1, &(0x7f0000006ec0)=[{{&(0x7f00000008c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d80)=""/26, 0x1a}, {&(0x7f0000000dc0)=""/209, 0xd1}], 0x2, &(0x7f0000000f40)=""/255, 0xff}}, {{&(0x7f0000005b00)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x80, &(0x7f0000006e40)=[{&(0x7f0000006c80)=""/207, 0xcf}, {&(0x7f0000006d80)=""/180, 0xb4}], 0x2, &(0x7f0000006e80)=""/26, 0x1a}}], 0x2, 0x0, &(0x7f0000007180)={0x0, r3+30000000}) [ 190.723613] binder: 13314:13315 ioctl 40046207 0 returned -16 20:54:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000040)="865e00", 0x2) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x5, "f50f02"}], 0x18}}], 0x2, 0x0) fdatasync(r0) 20:54:24 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x1, 0x20000, 0x1}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x90000) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000080)={0x8001, 0x0, 0x401, 0x2edf, 0x40, 0x10000}) dup3(r0, r1, 0x0) 20:54:24 executing program 6: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='\x00'}, 0x10) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) sendto(r0, &(0x7f0000000080)="11bd35b0c1faf53baf7d75769fbe2d066b614289f0cd4fd4b456c3b8bb6f5cab4a472a54ee473c1491a84c1afc65d34ca7ea484b16beb0b678d073c4", 0x3c, 0x10, &(0x7f0000000200)=@ll={0x11, 0x3, r1, 0x1, 0xc4, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000280), 0x2) r3 = getpgrp(0xffffffffffffffff) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={r3, r2, r5}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth0_to_team\x00', r1}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000400)=0x6) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000440)=0x9) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000480)=""/79, 0x4f, &(0x7f0000000500)=""/59, 0x3, 0x3}}, 0x68) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000005c0)) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000006c0)={@pppoe={0x18, 0x0, {0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip_vti0\x00'}}, {&(0x7f0000000600)=""/111, 0x6f}, &(0x7f0000000680), 0x14}, 0xa0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000780), 0x4) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000800)={0xaa, 0x69}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000840)={0x0, 0x9}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000008c0)={r6, @in6={{0xa, 0x3ff, 0x1f, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x6}}, 0x8}, &(0x7f0000000980)=0x90) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000009c0)=0x9, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000a00)=0x519, 0x4) quotactl(0x6, &(0x7f0000000a40)='./file0/file0\x00', r4, &(0x7f0000000a80)="e847762778a16aefdcb5406a7086b976e62d097d32000fe349b894323eeb45ebba382344677e42902457b578573b7022bda3a9064c08e4156d9af772d008b44f1223f9acf8ba640cad0659cdfc4e43788957cb065417267fd30c0ae9e207b24018ebd450ce912ced6322417062ec8eb53d71") execveat(r0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000d80)=[&(0x7f0000000b40)='\x00', &(0x7f0000000b80)='\x00', &(0x7f0000000bc0)='keyring\\.vmnet0@&#self#vmnet0)+\x00', &(0x7f0000000c00)='veth0_to_team\x00', &(0x7f0000000c40)='\x00', &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)='\x00', &(0x7f0000000d00)='veth0_to_team\x00', &(0x7f0000000d40)='keyring]\x00'], &(0x7f0000000f00)=[&(0x7f0000000e00)='\x00', &(0x7f0000000e40)='::/+eth1\x00', &(0x7f0000000e80)='wlan1cgroupGPL%)ppp0nodev[\x00', &(0x7f0000000ec0)=']self\x00'], 0x800) rt_sigprocmask(0x2, &(0x7f0000000f40), &(0x7f0000000f80), 0x8) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000fc0)=""/4096) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000003000)={'filter\x00', 0x0, 0x3, 0x1000, [], 0x4, &(0x7f0000001fc0)=[{}, {}, {}, {}], &(0x7f0000002000)=""/4096}, &(0x7f0000003080)=0x78) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000030c0), &(0x7f0000003100)=0x10) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000003140)=0x1000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000003180)={@remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x4, [@loopback=0x7f000001, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x2, @rand_addr=0x3f]}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000031c0)=0x6, 0x4) 20:54:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_0\x00'}, 0xfffffffffffffdd3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/65) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 20:54:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306257, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x2, [0x0, 0x0]}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f00000000c0)="10bebb2c664ad0d34a710b610f73467c5ea464d82eb002d7a7c579e0f16bd17016de7020ab224098b49d8b676e775d9994bf0f0006ee25d8fccb08c127e0c0cd15f8353104", &(0x7f0000000140)=""/208}, 0x18) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000280)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000002c0)={{0x4, 0x2}, {0x2, 0x1}, 0x5, 0x4, 0x7}) sendto$packet(r0, &(0x7f0000000340)="8d3a7063f7a5059a5f6ffe67ceed26b870030f1106ae0a4c868810150ce11ca10828de0f15f02a99ef6057d4667383cdc9d0306f54431bd2bb491b44954ac465de613560db5e48179d7613dbf89afe3c1279c571d2dc7b8072d8a4fb74d87513a2c48416944b69bea9797a6633be8f60ed540dac6c205ad5e1cd25be62aab638b0e3caa2f3e819f1c55b7615134cc4646bef57e5fc9eb6a717b0c23dc0cceaaa3480d953454749003e6d49a259f3711606bf86ec2fb7581abe2eb61233ef8ef6708edfb88094cd1437230e8d8e408b5a63371a4a8a25150cad830974160325fe8b86b8ebf72f28b0e86aade05f7ba75dc2a3f8c50a", 0xf5, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, 0x22, 0x300, 0x70bd25, 0x25dfdbfd, {0x12}, [@nested={0x4, 0x28}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x40) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000680)={'team0\x00', r2}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000006c0)={0x0, @local, @multicast1}, &(0x7f0000000700)=0xc) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000740)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000780)={{0x3, 0x2, 0x5, 0x1, 0x3}, 0x80000000, 0x100}) ioctl$KIOCSOUND(r0, 0x4b2f, 0x64) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000800)="a846e951903b0e1340d3e1ee6f714eb96e3ed03903987217f3a7881484e2ec5b8819df873fa1f40d6036adc6e5ea32b95a63e13c25a073022e0ac0b66280acb051bd42c5a07c4df6d1d5f7c44c07a36f2d460e12b98d2caa356a6971a6fced42578d53999cd4daa2dbee434600bf5eceb9251608af7342f48ca0c7970377e072a5dedefd18a5272841813b34a4f24b677bde98d9749191d880ee9a1097481a186102ecae8cf6a353801c4650d06cd9a62bb3b16d97dc6d707754615ce3c0e097d3d6d396e9edeadbd2a181bebb11e2e8b8983de8b8") write$P9_RATTACH(r0, &(0x7f0000000900)={0x14, 0x69, 0x2, {0x10, 0x4, 0x200}}, 0x14) truncate(&(0x7f0000000940)='./file0\x00', 0x80) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r3 = semget(0x0, 0x3, 0x10) semctl$GETNCNT(r3, 0x1, 0xe, &(0x7f0000000980)=""/147) pread64(r0, &(0x7f0000000a40)=""/205, 0xcd, 0x0) write$P9_RATTACH(r0, &(0x7f0000000b40)={0x14, 0x69, 0x1, {0xc, 0x3, 0x6}}, 0x14) uselib(&(0x7f0000000b80)='./file0\x00') getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000bc0)=0x2, &(0x7f0000000c00)=0x1) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000c40)="892bca4b31baa7c4daced395f2c8b3a5493bcda62ca6eb52bc18838ef6af52f5003ea3b2aef96d3364cda334d129bff7541cef547b78b3a493082f918d8a7e1466ee39def93bb59737418c6afd24621ec16690116c0696b25c9597a97d9bbe73414190d9d708c446511f441dd03fe0cd9e97748c0502deb25558886f92785da685491262a9aa") ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000d00)={'ip6gretap0\x00', {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}) r4 = openat(r0, &(0x7f0000000d40)='./file0\x00', 0x10201, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000dc0)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e23, 0x200, @dev={0xfe, 0x80, [], 0x1a}, 0x1}, @in={0x2, 0x4e20, @multicast2=0xe0000002}]}, &(0x7f0000000e00)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000e40)=@assoc_value={r5, 0x5}, 0x8) [ 191.196328] binder: 13365:13370 ioctl c0306257 20000040 returned -22 [ 191.222584] binder_alloc: binder_alloc_mmap_handler: 13365 20001000-20004000 already mapped failed -16 20:54:24 executing program 1: r0 = socket$inet6(0xa, 0x401000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x3, 0x84) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=""/120, &(0x7f0000000100)=0x78) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x800, 0x141080) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x20}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={r3, 0xd7a8}, &(0x7f00000002c0)=0x8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000140)}, 0xc100) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000000)="ea54426349b0a8abea4ee3cb0250617b", 0x10}], 0x1, &(0x7f00000001c0)}, 0x0) 20:54:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_0\x00'}, 0xfffffffffffffdd3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/65) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 20:54:24 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000140)=0x4) 20:54:24 executing program 6: socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x400000, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000380)={0x0, 0xf6, &(0x7f0000000280)="4c8abe70c533ef1ee0f742076ea0aeaf9a3a2b32b569507a6370839f95ea40b752aaddc4ff6223eb61a27da75a41d4616393d876f86a2dda8f88b106314e70391d841cf19727a3b79cc23ea240293dcda2f3979f542491cdb14d5fd4961e6d4e3f6c3ce107cf6665877fdb399e350ed9b5143ddde5b1471c2ab76725cc5033139d4a184a3654e42d5682d8dbc22f702b9786ff11ec76e920eb3e41bd0c64dbdaf0687dfe1e649f8a8edd50c45a82ada98015890db91a531727eac109f0395891374d5dbbcb5f564491a2e05f2da5ceda482dfcc4576d7965b513fcceb9301d0c9813233c7202608b5a844c2eca1a806bae2a6f499d57"}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x5}, 0x8) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000200)=0x7fff) 20:54:24 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x804e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000240), 0x4) [ 191.258950] binder: BINDER_SET_CONTEXT_MGR already set [ 191.259534] binder: 13365:13382 ioctl c0306257 20000040 returned -22 [ 191.313749] binder: 13365:13370 ioctl 40046207 0 returned -16 20:54:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") uname(&(0x7f0000000080)=""/39) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0xffffff86, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) 20:54:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306203, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 191.436676] binder: 13401:13402 ioctl c0306203 20000040 returned -22 [ 191.479693] binder_alloc: binder_alloc_mmap_handler: 13401 20001000-20004000 already mapped failed -16 [ 191.510787] binder: BINDER_SET_CONTEXT_MGR already set [ 191.526178] binder: 13401:13402 ioctl 40046207 0 returned -16 [ 191.531146] binder: 13401:13409 ioctl c0306203 20000040 returned -22 20:54:24 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x18, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xfffffffffffffff9) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xa4, r4, 0x900, 0x70bd2b, 0x25dfdbfc, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1f1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bpq0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0x0, 0x1}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000107]}) 20:54:24 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x100000, 0x0) r1 = msgget(0x2, 0x80) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/251) msgrcv(r1, &(0x7f00000008c0)={0x0, ""/4096}, 0x1008, 0x3, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105511, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) 20:54:25 executing program 6: syz_emit_ethernet(0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffff3f000000f300000800470000300000000000009078ac1414aa80aee0a0550000004408050100000000", @ANYRES32=0x41424344, @ANYRES64, @ANYBLOB="50000080027800ffd8d0d04b700186f1ce8500"], &(0x7f0000000080)={0x0, 0x2, [0x0, 0x0, 0x0, 0x3]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000400)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0xffffffffffffff68}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000004c0)={r1, @in6={{0xa, 0x4e23, 0x157, @remote={0xfe, 0x80, [], 0xbb}, 0xd5be}}, 0x10000, 0xc0000000000000, 0x6, 0x2, 0x2}, &(0x7f0000000580)=0x98) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400000, 0x0) r4 = accept$packet(0xffffffffffffffff, &(0x7f00000009c0), &(0x7f0000000a00)=0x14) r5 = socket$pppoe(0x18, 0x1, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000008140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg(r3, &(0x7f000000cd00)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @loopback=0x7f000001}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="ec9cfd631d0dc4a6c45c8baa1df3cc525fa3845428ccc6d87e3dd3c88470a464be3d97f767d57171", 0x28}, {&(0x7f00000001c0)="d4ec78a3c4fd9de9f7b50ace526b9e8d0af40f9baeb581e2e375b804e44522bad220d51acc9aa6796c00", 0x2a}, {&(0x7f0000000200)="7896f641e82f09a62703042e759055b89431402ec487b9473c4f18e07ed699988dfb6985a882570562f59b4cb5ea02501c0da28558b4f0380f79e6d0d181197fd305e908f2dbe7a4c54079914a30e03f70b796b30452ec7cc90c7fb86d167e8e96b8c813c3091cf6a168c060cd7c870b7d6283c32d5c79289e2080c4bc7611867bd80010ce23313c894122c63ac35449b40726e1ed164fb08516d1625a8985b46024e630ad0ff669a1c6caff106fb5f0288eb5fc9c1534035ed395297e043283734b269f962ae02bcc81679c816a0670e9f090e6629f18b78341aed787cd4c4c03c7f37505971be9cf", 0xe9}, {&(0x7f0000000300)="9dfbe42bf4ef3da9e04a1758eb759e1efee102da578f7222737e2da383c34caf3087261b9901a081b74ad96961385f5061ea41f0abfc25d4218ef22c8721857d15a4d64412fe430f665461b37412fa09be8928ed63db7691eeb422ce71a3bea456196ed91acb327cb3c512b57f53ea2bc27c93833e306b3bdac0b2b7718574e8254bb4", 0x83}], 0x4, &(0x7f000000cf80)=ANY=[@ANYBLOB="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"], 0x5f0, 0x4000000}, 0x9}, {{&(0x7f0000000a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x1, 0x4, {0xa, 0x4e22, 0x10000, @loopback={0x0, 0x1}, 0x401}}}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000ac0)="b249e55f9c045818a66e34b85b36cf2c04fcb0d1d6ac1479f17825d3066014a7cd8fba167c2387cfcebd7c2cad2c8cc62121ea01af4aac11c26e6696985ef1ce5ca2325159dbd25100f86f96c93ac991a7324d65d088a1872b08fa59c6a2a752edb1e2ba6e82", 0x66}, {&(0x7f0000000b40)="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", 0x1000}], 0x2, &(0x7f0000001b80)=[{0x70, 0x101, 0xe2ae382, "83b8e227a4dd9be2f9c76484576c36e5200ba8c429838251b88929f4294a39068db509a2fb545dd545548962ac5969ad22266168af277eb10f584941e2161a2d83cd7902ffdbf62f7aba14c58b43e5738e0365fdaeaf86f44da227"}, {0x70, 0x197, 0xff, "17b0e06b26aa72563ada4bc3ef6cd022b3cb9a31459f671e97d65b00d1237887312357505c2a54e8109e7e47dcbb4b0285069ee990646383bb3099fa0741d81636fa677e4af3854956772ff1470a2755cd94deb0f8564f4a1ba103174091"}, {0x1010, 0x109, 0x3, "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"}], 0x10f0, 0x40000}, 0x3}, {{&(0x7f0000002c80)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x2, 0x4, {0xa, 0x4e22, 0x79ac, @mcast1={0xff, 0x1, [], 0x1}, 0x3}}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002d00)="2ff6d05e60b6c5b7ad271831a1a470e36be2c300739178cddb285aecce7c88d17c73e8e77e78d7e893866f672fe8f959d09faff8e46b63975b27408d8f2b4e2b754168612829699f4ad4dd81840d86b36e39f9a5a4a989d2f55dc150452053dacf3d39197324747688a72003dbad1f809b031703b62eddfaeab1a6955e311240da23f7d91a756e4aae6c403a8868448aa2410e214474406fd9610f4f175de5010343feee427ce9b858f5aea39abdb9c7a60567fcf462eec50c9dc3aca5a1c33f7f1ba6ea5fbc2db833e0852f725e63feaa920ef94279", 0xd6}, {&(0x7f0000002e00)="ddaf3c12cb0eb074b28d5f1570962380d215131321abb956c8d50e546b9bdc8a5b46826e50c9da142a12382fcf8e96066f7a3bad6ed81a9595c0d043795c304470a2356006dc9da177e1d741", 0x4c}], 0x2, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0x1300, 0x8000}, 0x8}, {{&(0x7f0000004200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x2, {0xa, 0x4e23, 0x1, @loopback={0x0, 0x1}, 0x9}}}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004280)="9595dc3cea110d34b5461abe573d5ac3addbd409449a811a7ee91ea88e546ea5104c9bfa7fc06333bbb1262f05404b13bcfbafa11e3b5d29467b9ac92e17ca38a56a27db348c6e198f63d1a84e272bfe1c8bfe27a3ea177acac7ede9d2f053ef203fc45db5b0366268d8548e71244d6475927e585d9b50", 0x77}, {&(0x7f0000004300)="709de1b709f165e927cc7fe31fa62fc3c9756c66ec06ade429e72734c920094e0d002b560ed8285a445243e608770ae7a7f7ec87250f694a232f45dc26ac233937a22702cf29c884cfa1f5bed6777470f43add53774a3bebaf8b6632cca3f42a95c8bf2b53cfee450d5d7c27011d37c5077f4af98ce47506e86413f795c3b0e4ebd097c5249e73d7f0cabcb4301540cbc5e578427383417046ad9c67ca56c2bc8914b95291c295346bf9cc49595fdafcf78289c36969443c5d0123717621a8184e35e35b6ae18fa49eda87d38ac824b03ca9bfaff49c2cc1cd89a9656406762bfc165817a0c4a26803dbea3b", 0xec}], 0x2, &(0x7f0000004440)=[{0x1010, 0x110, 0x6, "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"}, {0x40, 0x11b, 0x8001, "a49480c5e8e92a58863d49eb6a6f4220da24fb720a646fe982d8839791c34f8b3954bc4fee055a5b3a76102e"}, {0x18, 0x10a, 0x361b, "1a6435c75e83"}, {0x48, 0x13f, 0xf3, "6bcbb70d2d0f3e6d15f03ed6a833372d866073934dfb2d4ff13c6335c7261629aa9622ad7526f2f679b9c7bc1bbd3a9388d5c3f4"}, {0x68, 0x10f, 0x8bfb, "fa6634d547df87f2fe45beffe4c038a1efdc0528a65c42b86907740c77e52485ca4f9a16a90829ba9535d08fa1cb95afc4c932060d6ad7f59d8cee0caa7889740c37a71ee9570011f487c046785108932e6ad72acfb80a"}, {0x78, 0x13f, 0xd71, "8515cde2261923271dbe5c54c4fac9c279d4a7fee5debe92bc73d4cec0da3fc7d6acb9eee2d94fd4f14d01d1871d742608cb1f8b70488583d49ae7e0e524ce056836fecf2b980cc0a38a3c7f3e46b7676c3b4e27de62628d6f276ca34c30e501dccdff8c1e925d"}, {0xf0, 0x0, 0x896d, "1368e8ad3fdb76d655c14d1df18ea9a442154ca3d90a05794283c73893f1b60fd3fde8070d307e82d31ccd7c69095dbb7b18dffa46ffa4a19e656085801d6fa4c5d4eb01d5aa3ddc97708400a1c6a71f68f43e10ceb31556d11d7aae11dc7c0a16b6a23da0711ad97932f584e102ad9a3c54e578c69de9b1fd39b417e7eeb3835282d852f082d3d69e9924a866a2a96b396e1a3bd06acfdfb9bef0ad8be64bcac98ec598ef4125044f28e0062355cd25476e25f4b87e3b9704fd0cf186329ce35e66c5c1a734fa3a097f276f64df35e48f9f2d951e881a3207549e"}, {0xe8, 0x103, 0x80000001, "38799bc9f0e1c1c6f6bb5482f6e253581197fbd26e2fed473d41adf9b7595007b5a8653cc9942d8a13e3664dbca4fc2ee1d0318f375d4c9449d738b25296b3cc290860499e2c6d5b4f39515bee117b9b9997863df67062f83dc88732250d0a856cba91dc3c08b8b74bf604386838fc02f92f19faa54c26b8f051b68aa1b437c1a98f0f98da966b4b7005dfd9ab8a90e5acfe0162aeddd21cda28f5169f3d722dd2bff9ddc1a6162dacb36812bb7a41cd88fb7cfbdcdc116d17b6e21e939f051f05e688c1e8aa43c1b6db6b9523755db8732b11b9ffd5a3"}, {0x70, 0x0, 0x1f, "815bfe1ee60df2e35caf6f58f0110b250ac18a33d1dcf08a982762b7ac4b1be264e8bb23fbeee9d5e02b1b073d982cfc73658c6ab668c4dc9a1215b2562727d1713b9a44dba635201bfccea8a751d83cc5da62d15f4c15832c"}, {0x88, 0x11b, 0x8, "6f4572f621f04b684f17b00a68bb832e9bb3e95e39e73fe6c86c3fd33e61855c5be510225e440026aba27235584d935f5eede6a71473d94ef0671896dbcf5c3266022d7bbe3d3bec13d7d06d88225b4402c8e1b8bb0f68801acede17e730d85540d510e53c17ce7025596241c485d1728754149024"}], 0x1460, 0x4004851}, 0x1e}, {{&(0x7f00000058c0)=@ax25={0x3, {"c4e77892ed5d07"}}, 0x80, &(0x7f0000006a40)=[{&(0x7f0000005940)="b537bf37eaa124933573e50c9a91456634015fdbc3e8aabf2e6af0d57b4729f9b26333227c2bd4a15496470947b8b2", 0x2f}, {&(0x7f0000005980)="c40a48629c7c25546bb0bf838e0b4bbf07cd3091bf2bcf7e2c2077788a9386e0be75dda18ce1bced49c7b19531a5225981ef1a5a16161b93e6b5a642116b685ac3adce596ae73140f972d15f77d7b092963cb64a7f3ab8369b2c1a7ba33356133f602913ec66627536a0bf6b30f9ac1b92e2d6f5440bdd28c5642a24a795e5b999e147e8459b35b1033dc9d75baca0f1d95c5454a6eebe103f411024f8608866e21b6aa8d160", 0xa6}, {&(0x7f0000005a40)="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", 0x1000}], 0x3, &(0x7f0000006a80)=[{0x80, 0x1ff, 0x8, "78437432a383c74019047a5e4294f9fe7782824a18fe8799ae047870a5b2437f18972aa88d87d05f8153552dfcc7cf06bc8e3db84a6f18eb1fe2a2cc15a23ac06cc8a69e8c83b24ea8b5571ff99051d03d93176e17f523bb08270971a2018a690da950a8c4e0492bf7db26554bff1541"}], 0x80, 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000006bc0)=[{&(0x7f0000006b00)="b4e8e9247e944fe880f36d6097db9b90cf9eeb0952d12fd6b4f31f083274446ae2e5b96af39390ce2454bc8391443fddb7f0a1d9f0f6166b1ee4c7900a7ad4d100e5fa42b2450836f3454dea73c0a850a1f29725c4f26264caf113ab23f21829c5cf17112a1ece82384d213d645305267ad5e1cffe6fad5490dc59b8a81dcbd33041da65f4e04a0438156fb1", 0x8c}], 0x1, &(0x7f0000006c00)=[{0x68, 0x119, 0x20, "9028ea2e478bf135e3af53f2dd5aff4f9d2f668ac6d4727cbdbfa2427427a71267967d08d5c6f0eb0d259980be273b0f2703f68200de8c11239f18a8d80c0cba3293030855923d4be6ea7fdcfc6e359a92"}, {0x70, 0x11f, 0x0, "00033cdc9a084587343ca040200020f9a587d6db6e0d166544aa29083d7780207162492e43906ab990d9f21c0a05a05e113e3200f38c5da9e053b66b934a00cd1dd9d05b1eb970569d7f1007a83a4c2dd0e5c38e6a1ce2a2ffca"}, {0x1010, 0x11d, 0x4, "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"}, {0x80, 0x108, 0x3ff, "571dc93409144049b4082440edc7e1b676e2ed4acabdc4f8f2563e7a55227e3057392cd8d41dc57d3eb78af6b0f1307487811ec25e7bfb01232f2e87ac3a932cb29dad23713915037146be8db95550acec7fe943f3857bfef898af025c24586b940d44c02354f782de"}, {0x38, 0x112, 0x6, "5c68603574bc4c810d8f0f18c45ab04b8cc672ca66dc64c13d36cf18967ac3eb35"}, {0x60, 0x10f, 0x761b, "632ea4110fe0d6b6e29585d56362259cbf99a73605329b58427294fdb564fca26c6ec9ab6baeca906c091a9d62effcf87c3d6465fe001ef84df9b198a6563e632f1b37f418875a17617d31"}], 0x1200, 0x4}, 0x7ff}, {{0x0, 0x0, &(0x7f0000007f00)=[{&(0x7f0000007e00)="a221d87953a92287986021e320fa", 0xe}, {&(0x7f0000007e40)="c0c9f0cf4fc2b5a3b6d8b13de7fd8d154d7fcbfc1b192a25bf08355b71eccce10b54d36857ee94ebec997faee8ea16cdd580437f173225a2eb884b21bf2d85a97d64bc7edb70a7", 0x47}, {&(0x7f0000007ec0)="bb896f58ce957192687a1345372cd15541efa152c5d057406aded0a5", 0x1c}], 0x3, &(0x7f0000007f40)=[{0xb0, 0x11f, 0x7b63, "f33bf892fda0a7a83834460c854eb76f3ece6c545976445ef8628d5e3a8bc9be0902c545e00d7e535048eb108a8ff7832bd4cb47f48aaa470c653214d1e679348dcbcb13481069ce5c87cae70fa9d7a9f6e312856e9fe597127b77e841ac96837ec55e2151e7adc3bdd2ec64f61448ddacd68b5dfc3fa40807e8c814ebc581fbf75f13044f954d3470c34758d3f9662761b6b3eb8e4f88139e05f02e"}, {0x30, 0x109, 0x1, "cda0aed7b9f6b34875f09988c40c41fc7e64fbb1aa04d00e0b554e18"}, {0x18, 0x119, 0x0, 'B.'}, {0xd0, 0x113, 0x0, "47709e5332ff0e87cc24dcec1c83945032c11d4afb9e7110e9d3b9aa5caf8f406b35c6b0768d24b07f141c63062434366a3cb4d563a9d2fb1ef2069ab6980d65fea5f918831459aeb2c5ca5171d9cc46e4a93a9254a783406055394ace9c04e710a5bf2562e68d297b35a579c904d04417691c38e6c2bb3ec2d1fa6558627957dbaa7ee2669b1540210d879d711542efdc352dcdfb382322ee8ca151b4e9dd9fabaa709ae45e1cfbd29ef7cb52660b1b8aca68f61b8b5e58205a"}], 0x1c8, 0x880}}, {{&(0x7f0000008180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x0, 0x3, 0x2, 0x3, {0xa, 0x4e24, 0x5, @loopback={0x0, 0x1}, 0xffffffffffffffff}}}, 0x80, &(0x7f000000a600)=[{&(0x7f0000008200)="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", 0x1000}, {&(0x7f0000009200)="1d04205ad5af89eaf8d6714436093bcd622aeff51ee9ec3bfd64f4ad76651f238690d5f2aa6762b277ed8ab0393ae5d5dd183ca9c7a4e32ff7c20a4081f5dfe96fe20861cc3571c2ff98a3d180b918aa82a9d0558fd076c8aa3683d443f442d02e7e2b7308f485fa69b462efa1ee5e56db58470a6182ce1a8a9ff4eab4d38a69129f54fbbea4545ef3bbfefdf429ec39c75a1c5753b90e6403940f67f980b7f507757f25fc2df2cbfd1b4a81680b07c3793675409b0b61aad51abf3ce00f3eb225816ce50dab45a553804db7301eb20124494c6fe3f037a6", 0xd8}, {&(0x7f0000009300)="629ea09929687fd95a07c3a0505526a6844dc61b9eebe72ab79947502ad24d8599b2820167541d45a70860b54b3e0f9148ff48f583bedf2a47d2b9e2d0a814dbb5932cf15a801b987d8b8592f3ba4be23b83be378e8fe7617195ecad296c6816e472741f39df2b87c509fa8ad254b55060ac4d4f0203649f27b539fddbb9f95ccfe3d1d23ca6b12a8ed89bcd7d8afbb86a6ae3136efd2f0675223fa87f9c6f02e32eb57ac5e7e9c0998535b4f71bc92533343a4ca561d185d086376e17b2be81a186a20b84d78391a7ce", 0xca}, {&(0x7f0000009400)="a1b9df508fc097d9306fda5c58dc79d6edc0154af43758ccd892dc4d72b55b3f4eb141ab68a72b55997632296c5be4d054222f5ee978a19c82ce86a51086ee5ab11415422260d7bd496a05307c0253448ebd500dde1ba6862d47d6ec70321edb14644a367abf3515c4e475aea89fdac008be2bb6331a76133239207c8bc689b15fdf7b8a499bfa6a095fc428650440a59e0fa1a7dbd6261075730a8079b48aed58d21737536c928c2ce4676df6e98e2b58510463ea1faaab28200784f9fd65c2e8d38f6ba006ed0ca09fd1a11facc187097aeef066e1d00237f58d04f92089a25af6", 0xe2}, {&(0x7f0000009500)="b21d699b4fa2ff2569612a18e4efddd365b42a19351444d9e79dbca830174b6253223fbab6068154e7379ebbab4bf06325d2b4daaa5eed06d060d0fed1577478399625b623b3ea2357d338295ad95136951d7ab5beab1687242bff382f48de2d5bdda18ed54a29a2fc643ffdbeb4a924aa1ce08fb250df8456783046108cd99a8f4726ae4aa77e4b2c0b3d7f85ea7e0a735acf73c8ea66e193b64b1f655b3e796e6438291556836dec6fb7c15866a9de29ea3523d288391f2f28a591fbc4b625f5a1f1c4fb5d9ec219c005b5bfa658b0e9d56efae04a2a0e76569fd96968e24d6333152e69074a4f56b2e0356afcae45ffccf7488dbc374f2c", 0xf9}, {&(0x7f0000009600)="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", 0x1000}], 0x6, &(0x7f000000a680)=[{0xb8, 0x10a, 0x3ff, "ae2f20978942856d6801534e7e16f916b338c4ec7343ac1c9e243ff3f4bc1c4ae54c4cc16565f950a0929915996d73e6fa99c73898f4adfca8e48af586d6d8430887536b33fc138f1412d150b54157d1f9916ae35cbe542c0407121e62f29443c320ee4b2cb860a98dd3020e2e4d331f847c9001d4f5a2d97bd7ba035ca4b870673e834427bf4aa09514dce5179d7da9235df61daa37dbc51ecd955d5d8b2eeb998e08"}, {0x40, 0x10d, 0x0, "892883d99cdc5f2360e33f61aca36c33eb68eca49ac06f506ff29f129365505b199942e5c3a646d9ca85"}, {0xe8, 0x1ff, 0x9, "e45ee42282340f7fc4af6b5f96277f6a00fc02f9068b33f7d6dd1414679b4479da6e93aca7446e11757f02ce9f21c941c9d1715b8fea60bdcbc68d4e321e98d45dffb267cb43834995c326ac529d73c733347cb654060f5c8142b5926f852aa436bc1b110a34ddcd9e75624a275070701d83e80d38f3cb1ae501b4180c32b8e8c4c777f7e23d66c67a5fe279624c916a47767d7e0b213464011b22a4a4873f89548ad570f409091cbd79020ec43bbee57efb4df4cab1dfe814fffd5d4ec1db865acb54f33b75d5e14121a79ec6d32f720bacb131"}, {0xb8, 0x117, 0x3, "f95885a7ffeca87cdeb86b667475945c32eecdd10d8b7f99e337decb3b4a1e1ca954dbaa9b8ba2caf832fef17230b79e0d09d2f7a9606e998a7f89ad1a75cdf934427ba6b78aa3cfc02f1220a74989619c05a7a8e7513549b9f5100bb6b6761c9ec8abb7c36be5a555293854766e372f2e3f33a92e5d86885562f13ab6d1e0d79894bc17e7f658fda824c716840723c7e7555c80da6b4b32a1bd1f520bdd639d75cf8669"}], 0x298, 0x48000}, 0x8}, {{&(0x7f000000a940)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f000000aa40)=[{&(0x7f000000a9c0)="a3a3cbc0cb00741277e6ffdd2d70174643b92912fdc4072e990e156197925dc45f3d06304d8d14df15f0ff3c50f5df5ead0e9e3d400405706d24cd1b9d8e75e186a28e", 0x43}], 0x1, &(0x7f000000aa80)=[{0x88, 0x1ff, 0x20, "1d41b062a755fd3e18662a2cc10577b6060a8a70424a8c4b7a31e975b78d6eba915a17b37a06df0995351aaaa7d1a0760908a9c36f592ff814c6ad48c413a80d87b7522d1d9425ba07642e0f02ac98ffc5420af8b20bf847bb7bb686a5d28f53f07a5dbdf5694dee0bb1331ca79a92b6502907fc"}, {0x1010, 0x10f, 0x2, "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"}], 0x1098, 0x40000}, 0x5}, {{&(0x7f000000bb40)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x3, 0x3, 0x3, 0x4}}, 0x80, &(0x7f000000bc40)=[{&(0x7f000000bbc0)="a3545b9ddfb76e5726be7698277d8f488015a9407e38da1504178e35028a91697846c1edd897700c5a597b0b47f6b7e454f2b6b94ba7724583b7c06b4d4449f22e40d7b539ee25032fa46da838314efde93a82fa87951e406044aabad55bce8e136497449c33", 0x66}], 0x1, &(0x7f000000bc80)=[{0x30, 0x0, 0xffffffff, "4c68b9179fbef8ad65842a79d47c57f975d336e719d775fb59fc7a"}, {0x20, 0x11f, 0xff, "0c4fe908d7cda3dc4f"}, {0x1010, 0x10a, 0x1, "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"}], 0x1060, 0x10}, 0x4}], 0xa, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000005c0)={0x2, 0x5, 0x2, 0x8959, 0x9, 0x6, 0xae92, 0x1, r2}, 0x20) 20:54:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)) 20:54:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306204, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bond_slave_0\x00'}, 0xfffffffffffffdd3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/65) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) 20:54:25 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000000c0)=""/246) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)) ioctl$EVIOCGREP(r0, 0x4004743c, &(0x7f0000000000)=""/174) 20:54:25 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x38, 0x40000000003a, 0x0, @dev={0xfe, 0x80}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@param_prob={0x3, 0x8, 0x0, 0x0, {0x0, 0x6, "b79208", 0x0, 0x2f, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xffffffffffffffff}, [], "1d3053a06de46b1c"}}}}}}}, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x7ff, 0x1ffe) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) 20:54:25 executing program 4 (fault-call:8 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:25 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0x14) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x200, 0x3b) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8910, &(0x7f0000000200)="0047fc2f07d82c99240970") r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3f, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x7f, 0x3, 0x4, 0xfffffffffffffc00, 0xd3}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0xf18}}, [0x7, 0x81, 0x80000001, 0x1, 0x5, 0x2, 0x77cd, 0x2, 0x400, 0x3, 0x4, 0x7ff, 0x7ff, 0x100000000, 0x2]}, &(0x7f00000003c0)=0x100) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000400)={r4, 0xffffffffffffff00, 0x8, 0x26fd, 0x3, 0x7fffffff, 0x0, 0x8, {r5, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x7, 0x4ce, 0x0, 0xdf4f, 0x7cc40833}}, &(0x7f00000004c0)=0xb0) r6 = open(&(0x7f000000fffa)='./bus\x00', 0x100, 0xe0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x1012, r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000001f64)) 20:54:25 executing program 1: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xfc, r1, 0x12, 0x70bd2c, 0x25dfdbfe, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xd}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c}) [ 192.071663] binder: 13431:13435 ioctl c0306204 20000040 returned -22 [ 192.084690] syz-executor7 (13437) used obsolete PPPIOCDETACH ioctl [ 192.125858] binder_alloc: binder_alloc_mmap_handler: 13431 20001000-20004000 already mapped failed -16 [ 192.204413] binder: 13431:13443 ioctl c0306204 20000040 returned -22 [ 192.209259] FAULT_INJECTION: forcing a failure. [ 192.209259] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 192.223007] CPU: 1 PID: 13441 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #141 [ 192.224274] binder: BINDER_SET_CONTEXT_MGR already set [ 192.230377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.230384] Call Trace: [ 192.230410] dump_stack+0x1c9/0x2b4 [ 192.230429] ? dump_stack_print_info.cold.2+0x52/0x52 [ 192.230444] ? unlock_page_memcg+0x2c/0x40 [ 192.230462] ? page_add_file_rmap+0x781/0xe40 [ 192.230483] should_fail.cold.4+0xa/0x1a [ 192.230500] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 192.230543] ? print_usage_bug+0xc0/0xc0 [ 192.236800] binder: 13431:13435 ioctl 40046207 0 returned -16 [ 192.245190] ? lock_acquire+0x1e4/0x540 [ 192.245208] ? alloc_set_pte+0x1027/0x1620 [ 192.245228] ? print_usage_bug+0xc0/0xc0 [ 192.245249] ? reacquire_held_locks+0xbc/0x3e0 [ 192.245266] ? alloc_set_pte+0x1027/0x1620 [ 192.245284] ? find_held_lock+0x13f/0x1c0 [ 192.245307] __alloc_pages_nodemask+0x36e/0xdb0 [ 192.245323] ? unlock_page+0x1d1/0x2c0 [ 192.245340] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 192.245362] ? trace_hardirqs_on+0x10/0x10 [ 192.327666] ? trace_hardirqs_on+0x10/0x10 [ 192.331932] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 192.337517] alloc_pages_current+0x10c/0x210 [ 192.341956] skb_page_frag_refill+0x45f/0x6a0 [ 192.346497] ? graph_lock+0x170/0x170 [ 192.350322] ? sock_kzfree_s+0x60/0x60 [ 192.354238] ? trace_hardirqs_on+0x10/0x10 [ 192.358495] ? print_usage_bug+0xc0/0xc0 [ 192.362578] ? find_held_lock+0x36/0x1c0 [ 192.366666] sk_page_frag_refill+0x55/0x1f0 [ 192.371004] sk_alloc_sg+0x1e7/0x9d0 [ 192.374754] ? sk_page_frag_refill+0x1f0/0x1f0 [ 192.379358] ? __local_bh_enable_ip+0x161/0x230 [ 192.384053] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 192.389099] ? lock_sock_nested+0x9f/0x120 [ 192.393353] ? trace_hardirqs_on+0xd/0x10 [ 192.397536] ? __local_bh_enable_ip+0x161/0x230 [ 192.402231] tls_sw_sendmsg+0x57d/0x12c0 [ 192.406298] ? expand_files.part.8+0x9c0/0x9c0 [ 192.410913] ? tls_sw_push_pending_record+0x30/0x30 [ 192.415942] ? lock_downgrade+0x8f0/0x8f0 [ 192.420115] ? lock_release+0xa30/0xa30 [ 192.424111] ? __check_object_size+0x9d/0x5f2 [ 192.428615] inet_sendmsg+0x1a1/0x690 [ 192.432429] ? ipip_gro_receive+0x100/0x100 [ 192.436755] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 192.442289] ? security_socket_sendmsg+0x94/0xc0 [ 192.447045] ? ipip_gro_receive+0x100/0x100 [ 192.451389] sock_sendmsg+0xd5/0x120 [ 192.455127] __sys_sendto+0x3d7/0x670 [ 192.459130] ? __ia32_sys_getpeername+0xb0/0xb0 [ 192.463819] ? wait_for_completion+0x8d0/0x8d0 [ 192.468427] ? __lock_is_held+0xb5/0x140 [ 192.472527] ? __sb_end_write+0xac/0xe0 [ 192.476527] ? fput+0x130/0x1a0 [ 192.479870] ? ksys_write+0x1ae/0x260 [ 192.483792] ? __ia32_sys_read+0xb0/0xb0 [ 192.487874] ? syscall_slow_exit_work+0x500/0x500 [ 192.492744] __x64_sys_sendto+0xe1/0x1a0 [ 192.496830] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 192.501872] do_syscall_64+0x1b9/0x820 [ 192.505775] ? finish_task_switch+0x1d3/0x870 [ 192.510311] ? syscall_return_slowpath+0x5e0/0x5e0 [ 192.515266] ? syscall_return_slowpath+0x31d/0x5e0 [ 192.520223] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 192.525630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 192.530504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 192.535835] RIP: 0033:0x455e29 20:54:25 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) r1 = dup(r0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) recvfrom$packet(r0, &(0x7f0000000080)=""/187, 0xfffffd2b, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0xb, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) dup3(r0, r2, 0x0) 20:54:25 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x1d}, 0x10, &(0x7f0000000680)={&(0x7f0000000600)={0x5, 0x490, 0x1, {0x77359400}, {0x0, 0x7530}, {0x0, 0x0, 0x9}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "cb6bd4a3151a0a87"}}, 0x48}, 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 20:54:25 executing program 0: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000007ffff0000"], 0x7) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x4, 0x20000) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000180)=""/38) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="01000e00000000", @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,\x00']) 20:54:25 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x701100, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '('}], 0xa, "e5e4f1004dc6ba00b953150930c0384355af431fdcc8f5829cf994ee5e52b5342bc176ea084bb90c4598c6ff19caa1bd4ad869cca3ab7a61da5b77e335ad18c9204587d851c7a0b5d296d3f26b03da347dda5a6293d3a70979b286c7e1b77162b154ce9f3d960162429a0035bfbf94fa94"}, 0x7e) recvmmsg(r0, &(0x7f0000005e80)=[{{&(0x7f00000000c0)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/122, 0x7a}, {&(0x7f00000001c0)=""/200, 0xc8}], 0x2, &(0x7f0000000300)=""/16, 0x10, 0x1}, 0x7ff}, {{&(0x7f0000000340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/35, 0x23}, {&(0x7f0000000540)=""/130, 0x82}], 0x4, &(0x7f0000000640)=""/156, 0x9c, 0x101}, 0x7}, {{&(0x7f0000000700)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/31, 0x1f}, {&(0x7f00000017c0)=""/33, 0x21}, {&(0x7f0000001800)=""/124, 0x7c}, {&(0x7f0000001880)=""/48, 0x30}, {&(0x7f00000018c0)=""/202, 0xca}], 0x6, &(0x7f0000001a40)=""/34, 0x22, 0x4}, 0x5}, {{&(0x7f0000001a80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001b00)=""/37, 0x25}, {&(0x7f0000001b40)=""/113, 0x71}, {&(0x7f0000001bc0)=""/174, 0xae}, {&(0x7f0000001c80)=""/111, 0x6f}], 0x4, &(0x7f0000001d40)=""/116, 0x74, 0xff}, 0x1}, {{&(0x7f0000001dc0)=@ethernet, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001e40)=""/14, 0xe}, {&(0x7f0000001e80)=""/134, 0x86}, {&(0x7f0000001f40)=""/230, 0xe6}, {&(0x7f0000002040)=""/231, 0xe7}, {&(0x7f0000002140)=""/18, 0x12}, {&(0x7f0000002180)=""/9, 0x9}], 0x6, &(0x7f0000002240)=""/4096, 0x1000, 0x80000001}, 0x8001}, {{&(0x7f0000003240)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/107, 0x6b}], 0x1, &(0x7f0000003380)=""/94, 0x5e, 0x9}, 0x7}, {{&(0x7f0000003400)=@in={0x0, 0x0, @loopback}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003480)=""/80, 0x50}, {&(0x7f0000003500)=""/53, 0x35}, {&(0x7f0000003540)=""/103, 0x67}, {&(0x7f00000035c0)=""/224, 0xe0}], 0x4, &(0x7f0000003700)=""/169, 0xa9, 0x100000000}}, {{&(0x7f00000037c0)=@nfc, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003840)=""/247, 0xf7}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/216, 0xd8}, {&(0x7f0000004a40)=""/86, 0x56}, {&(0x7f0000004ac0)=""/120, 0x78}, {&(0x7f0000004b40)=""/1, 0x1}, {&(0x7f0000004b80)=""/63, 0x3f}], 0x7, &(0x7f0000004c40)=""/20, 0x14, 0x9}, 0x7f800000000000}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000004c80)=""/139, 0x8b}, {&(0x7f0000004d40)=""/148, 0x94}, {&(0x7f0000004e00)=""/8, 0x8}], 0x3, &(0x7f0000004e80)=""/4096, 0x1000, 0x9}, 0x9}], 0x9, 0x2, &(0x7f00000060c0)={0x77359400}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000006100)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000006140)=""/107) syncfs(r1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000061c0)={0x0, 0x5c, "aa042bdb1b7d1fad47e11132de1906cb643e0a3888720c2b0f94d2bedbfd7a2826d81179fcb19f84deda9837a9848d18b6b33931e0f0ce5272eedd133fc97c18922cda9c56562076201fd6a23eff4edf79c634684df975233115bd03"}, &(0x7f0000006240)=0x64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000006280)={r3, 0x8}, &(0x7f00000062c0)=0x8) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000006300)={r4, 0x8, 0x800}, 0x8) setsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f0000006340)="f53e038e8fdfbddd30d7ee42ccdd8c79d226fd152043a821adc17e0d02452110bc9ca68ec0f1192fd80033b783322771e756e73b900cc8fc0106d9d0248c9c284d1f713131d807a43fb8f8778f3b79eb5008c3a0057dec6c48dea6c7e51127d905bb18e5b598158eb6539377a1a0208c666292ebf39fd83c2af5fbed293ffd04584a56ef7606bd0c36067c0f11c896e9cd8c69e984a6babb9dfb12fca48c4c40a8e9ee3452afa484a1d85fd85ab4", 0xae) r5 = openat$cgroup_procs(r1, &(0x7f0000006400)='cgroup.threads\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4) sendmmsg$alg(r0, &(0x7f0000009e00)=[{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000006440)="751f30b086267ded25ab254687dd387519a87fad188b3a082647bbdbbdfc01f759f496bbe2a2b5ba2c35f0ad662d84269b6e2850762e00cd6eb8ee90cb2a103fc16360574dac386cb46b50948c1547a164401076", 0x54}], 0x1, &(0x7f0000006500)=[@op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x70}, @op={0x18, 0x117, 0x3}, @iv={0x98, 0x117, 0x2, 0x7d, "755203d4388a96d048e647d4e14a01c9f2091fabf26f7fc05ace130716097d094219ae6ace72327a04d70fda8aa170f9f16c0bcc915e87abfd9a816a56d3277150da59eb4aad78eb237ace77dddfbc93d3329c0451d8f61b8b123e324618bd2bc17ca75898bf9ad4178a33babb6d44201bf135454c5baf63ea3a3c5815"}, @assoc={0x18, 0x117, 0x4, 0x31}, @assoc={0x18, 0x117, 0x4}, @assoc={0x18, 0x117, 0x4, 0x1ff}, @iv={0x38, 0x117, 0x2, 0x24, "e324486028ca37aef7b6097566f1efa4b618678b2fd294cd779298595c072b768a859115"}], 0x160, 0x80}, {0x0, 0x0, &(0x7f0000007ac0)=[{&(0x7f0000006680)="ea4a1605a16fe1b4ce76fea9f87875957ada5e3eba4da661a05e65176ac19a3f54413f96ead080bda5c76695e1d98077244f766c034bca5bc07d949ad963428b2a3134e413c119392fc951746ef3dc11b4dc6019f89e6c381704ba7d272c5c0a97c597a08fe32580db8806f3a37d09461a970ce800f6de42bcb5fe589051e10087b7913d9a8eb98e106b89f01eaa3d07fd61e862690a32eb7d64fc1d4aecb6cdc51a4c9f9b2f9d0a2aa91aa8283b8b52b74aee04c820e71190372a10917584c37f0e499e075e7d23f3229574111342132e5477576aeb7e5115a2bd4d643f5726af22129b30e24fd820358968c83c07410cf8eb6daffcdbbc95769cf8687d9b04fc82de02c1e71485978dba4c34657c77301e9cc5aa2511ba13a6d1b3cdfaaea83eb2509ec4a9a8f6150f4f059d33a83e4b028587a3ff0c31d1fa3c86c59260a7f41274229149d3a89336963c1a867ccec632587ca0ef7e163b2722460b29d67ec76f09950aa60499bd3ea029a678a38a0a6434508f20ae50901a496953fbcbb57f874b78399482f3895d1a3f6906be0fd2338997f5da0c9bf5364ce044b540408a7ad73b663e43bc824eade2651ecd00cf8e0d56be47220c8aeb03e9bb305194cfc08d07b233ee5a430b3b021f6b00263478ffb6aad4f0dcaa9e1f2ff67c69153b9fa552b156362bc901c5381cdb1d36e242f54538353327cf3cc19ba6fb8220ff38b9671507949b57698e272c233909481c9dcf3707347035fa78f4898c7beb39ef74fa8da8a73cd6c0e983a39218e5c73a0af5c3a7cef0573eda87b495eab1b4b1f3752c591873bc01ccd1533d24f9015119a0991cce64be541ebc10a8c86619dc38f9eb82a34c8c39d11bbe80bf515926aec3e3b007a5f822560aea41b7f8cc4afb1f2010dd5418f7b02a43d472f004f6f34ec404f043711ef8f3a3ab92e84007189c590e143b6447aabbd320c6f41cea94cfd9d2765bc13ccbd40fc12865c5662f9c39e4c8fe9590dea766c4776b2cdca98dfd9075aa104164cb53006c88ddc5b5994464630047348e3ed93483667723020e5ce442b390c51f1024d2a8e2512fe29175d5405dd1e9e4ead7324d396aed3c8288fd1825d282791f9db1e7b91792bba52db52a2792cb6f8a07cba0aa40b147dee60bfabdde940d4ec3fab8c808d9d63ad71280ee25e0a6a2c3bbd6f6aaa01fa2710716ade959fa354fee41217bdf53db88ada165f278a153228d20f885b6a1e31efd3db6f25ded9e166d29fd03a9c4726d8ba71db54828f33e937f02fa52d29e1e2c41af4e557d76bda47c67027918859897ac8479085a127a1f7a581b9883b98bd7244f63878db5e5aa9f8e6426809e75de6c33996165714cb24c33c9f9b6bebde7355919dffa32a2327af6f27855e2228084fe082a80cdd2110f3ebb665dab7450ff58369414d3f31a740de14e5f684d9fa0c4013da7842ef2d278715e85a0d997e2ca49d4d3a01a28c71cf9f8f5eeb576575b310d84988a9dd71b311649657a1e91d5c5b2fa650770e1db49e503f8351c37c3bfa4cc2929e0319b0bfe1e0e6f0b3a4f2ae77c4d9d45dcd62f640835a905a26e167781265988f78a3d19af8be2bc1ed7606b6c2be09e795ae7f9b02e8cc6391476dce190312f53f0380e9f87193b7bfe5b8fcfdc89284534b4eec7fef8369ffeb11b26d1b3e19d7db81c1ab1a166fc6ad898c46bba4385933454926f3b2e23b18934a34c36a4fbf8b412e9634f7d846456ef6b50b204ab187ec518d7ce9a3c4d50c9093e0715227fece6c619e712c3f51c001e237964fa4f45d303b6ba888c64a0e150e8f4ba0e91f8761e383bc3fa6201cd12b645575798dea0fbbe85a296785b287c39659294f3f9a285f37f2b21689d95d9d799f726b4e1e7b08dc9dd1ed90954f1d4998bd759ff4cf45fdc77d0c888deb4f0fbd2c282caed8f93e4af690b390fd1537fea7f47c36be69032c22b74f090961fd841410f1df9bedd400de3b1a2cff573f68048b90b2ed8973a868418a8842aa48be9f75bca0e49769a9929a1df023293985f1fefd4d49139060fe38957ab5175c0f503185d0bf7a25f43cbeee37aebe7f9da3b0b49d538b16c79e5160e76d3bab95fa2ffa2788456eef69a39ac7ee3a9e43206a56b506437040f4a8aa2ce3fc6e2837c25f9056b5fb194963dfd77139843f3bd16e8c98d8f8ddfd7efec2d973592934972b778149316a7f794c3673f5f69928b2191955eb8a6bafbaf57565b1e6bdf88876c4e85a873032a29921d62ace9a836e11b3e9324dec936556e1e28e5ee0d98b9a75eb441ff7d3bd2063062e2e3ce4a33e1508e692bc67ab2e00cafec7c4707783fb85a9c068a1d5c82742921bcaf5c7326665e39fbd2e2a9639d35fde4d85b929e0e270db3724943bc75ae5484bc850259e91db882d4e954895c4fcfd974354e53dc093b3fa87dfa00d9d2abfeb77f40310d97da5f7d1a2c5a4fa5cc8572342305fa04c477a68d5bf3ef0604e90d50db0e41009e916af4f6c87c5a6cd12966bb94334e5d6da30dfba6c9a0f3a87f01344113b60cc5aefe6fd6c2e3cedcc986f16a7a38c8beb19061248f79cdda8e8cfd85a0db63109a0c4d832fb7f26314aa09e6aa6c2d53e2084c79619462338e5f756e32686dba37f9472ab041dc11e3f87bb51ef44dad6b2ed637be061ca0fd9f912fc596f005f9df3d9f18e6a83a3a6629d4dc0e140bc23ed5db5c45147e113a011bc5abdac728f3baf25c4cc218e3643d5bd6f428161aacebfd5571ce88bc315ade936e0485833ad2217066aa26473f50f0e97c0168ebe022635ab0cfba58bbf9ba3a6c3cfd6a1d6e8b97f8aaec40c79d3af0ead8e7432ebcfb4fc29c4ccd2b4052dd923f4bfcbe36e01d9392eee0681ae957b89a38bb0cd4f8fa0ff3ccf1193a8f256c546c512c65a6f73e60e8ab975f4039b6164f919ce1eac2a9dca918d4d0c7a32ba542a3c79fd7f74a332d7c8e2e750af7c95aabd4b8cc67d89c246aba16594be2703d9d6dab1bb92876e6b0b3587bd9921a015175f7bf3d4985cfcefae14542ae822d855b1a04cef399b0e97056094459ad97fc8da2a4df774f3ac55bf8be3394b5ce0771962b367bb1f40799a64fa16d1fdef15186d85508366b4ec57f7ceefbd2f24d6f1a09253b60dc2175d9b892d46d81c155410284534978707a20a07e53a8c7e29ec02e13462d16c2d1fbb215d673c71ac7a0e3b4b8b55948b3ed039929e6aac9ec9259314ca775a75fca4f7aeb45b295407aac8e71184e73e3c20307103a6f2110953048cae967023f6d169960acfdea4c2d3f78a23c1868ecc96dd81315936abdf7318f8e2e4fde3bd9cbcc68a34bd0ffba8eddfb33417d589c7076a889344fa19c3527d4aac58a254e49a8a850144b991374bbacd1f6e7e5f46b31e657c8ffc14bb9a20b254e56bf655b7d0b6c33bde67faa7e9bce283de6f5f6e5a86a48a44a11d25bd1db64e5cf42a32b60e898d753ebf7c098af40537c07d9b80e2856d7397c361a311a1a63ca7b9e703ca83d2024a6d81042db5d7bb2a49f4f83d96661fef559e92c8d83df9a4efcaf935f6a06b8791c7428c43f51c3edc05def9e9bbad5b9fc2f77d198bd860fc4f8c1400056b5e9e8cb00d463a6023d5dbd7e71c9ed6862eb1238985f8ec4d3ac800878254f4473efe118854223fcfaa883d55d161b58d7c437238e7cdf0626b957b0fa58c226b946f42bdafb7a1e8eb75d0bb3a00906dfd82270e913a99842f32811e14440239a97451aa09bdfc5b573b6fd14a141b1400bb31b957c8e47262e224835e965e1ab0d627fb43d2327870887224d0ffb5cbd76f4b2c84bb66c5cffeeaf02161c5c1778abf8f5451efb288e859c9e8605826ea41f377e5ff3acf7e16cd20f7acbcef8b9809f00e814440fbe4df2692d983a2874ccaaf2c5cdd2bce8f8fc1bd6f403a2d4d1396653dfd7588191656166dc9de3af98261ccbd8f8138e2e7dce90ed40ae0f0566e21f5d3d02fdbfcab48d7071bf0f232bddf5d880bbd0322aff321f2e6ae63e5bb009daae6552ff29d05bc30f7287360e2f48131eae0f7ff69d78debb3b8c7dec7cd730cc09c0e23e5bc4455480ea939ba1825a456d08a3a3bd49e084b26e4a3bbf5df76c9c490362800354d554e3622e82a3db4cdc4ed462fbfeed6ff0b9adef33fe6957b4fe4138dc9fa65c133a9b91ce9279fcf253702b6e1e0fb6eb9b7127f346a352dcd3a877e351b7b9913e4d55be806b6d45d136d5b1e91f19f72a51f02d6644e81829c7c39b0f3b17889bc5a6ee57a879a08dc9b926261418e5a6109ad22facc2c9a1906344bf2105d6fea5ac9d4c22227a84e27afd39bac794a44747667048e0d2cb9d57d3a6c96977c9401f8046ead8dc73396808d4b2174acf51ff8859a87d1f0a530c91603015875313ccdf90a329ab15e55e93d7143d2ce7affb4d810b00df0cff1d92574e98b86b034e853a5e40900282223fb1792e3d4bea68ff488598a32a86146dabb14270c5a6e29a4d21ca181c517c88cf47c8c535fce870a59fd5f55f2432791657c53327dc3c6c120490100cae3c919ec660a30766768c49b107b4505f24cc7824ef8e0e0b5b3b9ddee54504e489bc23745250d659eef19d4620e1fccf4b77f39a5f24aa45e66dbbad6b163a72fdac00f1e624eb1a7ae4117e2f8128b017c92183d18ed959d9e5889c08c2b7509379601c387e81f69bf2bc484bb00021800003bc296bb3dbc6a6591c40c13e9eacd19f74c123f8684108948afa962966a296a10eda8c177943c4562b646618076ee38664d3ea598c7a1fbf67fcab3d7a47c56f74f8ecc40dcbc6267a1f8f0e89cdae7f98fca7bdd1e56ee278603d50cc36b0af23393e6076c75ed7c84068d65586468cd91b29af2057eb75fb871d174521d84cdfba4ffc432c3084c44ee57456c1ab57d19251b11459139ddf0e50f34a0901d6f3474a36a307f8e78e1e1057f31d6dadfcd75dd94acab832097a2e4967658c11f9c936b305db91cdea226eb55fca4a65628a19d29979e5d712616958724e9c535c0421c07ce90c5d0e7182f2541e35d8d76f6c00014c1f89db78dc6a2f33e43119ae77cbd7b41c5e298d1ce7d6d26a201cb353bca4082ceb42346a890239bc0cb6fd5de89e5798b00d2b8760e28cc9aab9f4819cb24c737019f405f77b4b2e048b3ad18f052ac642e1e2808db778807f37089c340c733c0f064ceb2c655c7377e910c5e8dd512b58bb55d477b8d50a62c66d088f5fff210655e84bbce2e7e777a2606f3c7b00e78f9ea79c0276d9f8ec890ca1fef791ad3c84a45ae491e819f9f089fd54ff999371dd6f10d21589bb7b053092359fa2507e803249976c60c81ef06d9d03bbe417dafd21977fc5ef34d4dabffe339b758131a3df8192e8d8e1a12a96b2f50e068cea67236e189403ed63b3ff0c88360932bd65c2c1e21620965ac7667e785b3ce9fe6e207cc0f4eb5759836a84d0bac852627e0a8aec334ec5047f415d99a311c3da56586fdc86af3aadf3dbe87762826816df8f533878acae4d7b48cdda7598d50f79dbab568af4ac4a3d0abbc82bf8e60e8d92e3a20eb77c3ca8a3bc77fab2cd5950c88b89d937fce8390d082e29e5e5b652527e3a1a4f76193d528482d324554c6abb00522bc56d4b4b8cb9fcb69bbf4f8b49e417493b496de476d1aecabeb7275b14b3e3b24068b1f69747cf3a6e7c0cd21bc0dd09c639deb4439109fdfd7a18bee9089f1db3eda139191cbe5ba75a13611a39dda19e3c148e29bb425fccf9467f8853", 0x1000}, {&(0x7f0000007680)="9330b2347b47c64e22a36bf8b816b82296dae0aafe36b0902ff1c1dc761ab5ff84ce9332253fc842146ff2799c6ae42581fd5122ba1e8aab4c963c84edc0e9b67db3288f9813f71289e8d63bc0b0e12b230296", 0x53}, {&(0x7f0000007700)="9b65616fe076886282a856ae8585bce848ce269521", 0x15}, {&(0x7f0000007740)="5546da896e26c6f8b4d5927d47560f9ca97ab97478d799f0fc60617f269e0f8dba528ec39543b2e696f5a786c195f3e2dab361c7e4f9300dbfef37cf47956e4070b27c9d59caf9861d1cbf267ddda0310bd79b90cabb807680aadd2207cdbe744641184026b852c1bc7f252066c63761a69278b21329004cbcd2f0091e04cf0009a5ea86042a8f02", 0x88}, {&(0x7f0000007800)="97be4236f8bbfd1cafb79a8ac5203028b2d30c087eead96de5c06c8c203c31d04660e29481db098b2c42dd11df113d34d552e0ad71f3250d8616c7a2be00d029fbad5aee6c13111c2fd35a56d71021edba002c7d391c", 0x56}, {&(0x7f0000007880)="a8c2971fdebe428e21fd9e7350f9aad845e51886b696bf9dd26e942d4539494499c9ed094dec3a60a40b10938fd105163bc6e1c8aa317d84905bcfaad51a2695ad073a7d57da4d9504724300f468fc97d83dfd43378dce0e5829eed8758336122b0e75317578da9965cfa4570e4aecc63c714aa4070342e547b80d8b6a3315ad", 0x80}, {&(0x7f0000007900)="0c07642432f8a490f0601d8700d01a4f3c0ef15fcaeaa80b061d198adfe1adc7292c6752d13fa6155e6a6f8b015bd1b0f450761bbca60d337d92c2429f1566ea00076f3bf2dff3708b3464939dbd1f25291e83", 0x53}, {&(0x7f0000007980)="010bb4dcee669c9be694f27cbcc522a24731d3cdf96c5afcc42a390469dcd81c8e84a3076e4f864deebdcd0f6ee401cb644d86fa72fdc26fdfd43bf34a53590508dc43a10a6b090f63fadbbff831b4cc6f2e02605509bb53ff431d97813c722b03a3b97a020c2c3be93bbcc432eb6450072fdcf20b2fc3da0f4c2abb620df0ee45a78d5b", 0x84}, {&(0x7f0000007a40)="b519dec2fb3f94f54d293470c7096561d706de69da93fbee5dc1a9c0faf054df6490c750ab97119cbcd9d5628f0f1d2814adcf225e2ba6f760849378", 0x3c}, {&(0x7f0000007a80)="ffeed8d98e94b093eff4885571716aa1fafff33d41a891c15a3a2642080eedaacdabdf3d7ef92a7bedd693377bcc", 0x2e}], 0xa, &(0x7f0000007b80)=[@assoc={0x18, 0x117, 0x4, 0xdf}, @iv={0x98, 0x117, 0x2, 0x7d, "f0e6cf02fa3e49a9aad4b6fd45dd7be03f37a921717b144f0d2e1499a81c7c0982f5935050d79cf97500e64b2f64936b852eb44cc7da00294da2fca65858d58f15297e385a8f785dd62f55a040c81487852a4c68bed722e675953ba5d8ec9f0a6fe8a2c20fb0d1492ec9da150bc056820c9b27b0fda7e6161d486bbd96"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3}, @iv={0x108, 0x117, 0x2, 0xf4, "8187f2a4e46b37468a02933f395859e832d2b839dfdec2ec38aa1aa4c229b00c022c05558d43acbb9ffbb859b9fb31dd5ff9c04af395146b0fc98454275a7e06f3dd3a1bb328501128a3a9e7f780ff8ef913bf3de3c800bc55219532661c0dbf7c7700c5dc60ccb7501a237af935c0a6f14a5f94726f158b232e2d81251d8f285e9b20db63d70fa7c95f532be3163b6e13eed7ab62557248ac9a435f7526643c30d0ad746e80f095b00a559cda13c4a428fe42c3b9babaa1fd62530f00c1aa1c74778920c08f0130bb73ed1a38c8b37f26fed5c2def4e681678cf2ad15b7f691ac4a384d34cdc5ce1c6d91df1a5b15feb23c29b5"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1bc}], 0x2260, 0x4}], 0x2, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000009e80)={r4, 0xffff, 0x8, 0x100, 0x5, 0x9}, &(0x7f0000009ec0)=0x14) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000009f00)={0x7f, 0x1c, [0xdbb, 0xa01, 0x3f0eef08, 0xffffffff80000001, 0x1ff, 0x40c, 0xfff]}) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000009f40), &(0x7f0000009f80)=0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000000a100)={r5, &(0x7f0000009fc0)="fef9fcec7f723b3a5caff7ed91f45f6543b28ddabf4320a8fe788e5a2a872c99bf5a2b4e0ea278f47679617ec524ba1cdcfeb616b7847c5a651ae0705f6e6244e97df1bebe63841c19c08ccde7000cc48827f016b44c6a638b7ad0c65e0bd4bd97754e3ca3c047d81c4a4e695481bdfff042e8db9d38e5771da9b8f4e97e4d8f517335f69c27", &(0x7f000000a080)=""/84}, 0x18) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r6 = syz_open_dev$amidi(&(0x7f000000a140)='/dev/amidi#\x00', 0xffff, 0x80000) fcntl$setpipe(r2, 0x407, 0x41868285) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f000000a180)=""/243) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f000000a280)={'sit0\x00', 0x8}) mknod(&(0x7f000000a2c0)='./file0/file0\x00', 0x8000, 0x88) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f000000a300)={r4, 0x7a, "054075147a3876f0d35e02df85024b8d80bcf1e74d37b1a5abb9131d5d576be134645ef3bc3673084fa56c797c42b94edd6c3790c8f5726c70b9261c384222082c27b96eeb8bf26b79b1cb9bf7b12c40c7db5975b6db94e54912b63403ea59a422eadbc8515330d39aa83cefb94f0c1e9cece6c311f21723790a"}, &(0x7f000000a3c0)=0x82) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f000000a400), &(0x7f000000a480)=0x68) faccessat(r6, &(0x7f000000a4c0)='./file0\x00', 0x40, 0x800) syz_open_dev$ndb(&(0x7f000000a500)='/dev/nbd#\x00', 0x0, 0x800) 20:54:25 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x103000, 0x0) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8040ae9f, &(0x7f00000001c0)) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x1}, 0x7) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x1}) 20:54:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) unshare(0x40000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) 20:54:25 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="673e866cd00a0f01dbea2700d80036f2660f096766c74424008db5c1ff6766c7442402d75200006766c744240600000000670f011424260f320fc79d0f000f8d5e00f326def466b9800000c00f326635000400000f30", 0x56}], 0x1, 0x0, &(0x7f0000000000), 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0xa9, 0x20, @buffer={0x0, 0x37, &(0x7f00000000c0)=""/55}, &(0x7f0000000180)="7096f8571c131ad0dfd2ea18c6cee955afe079fd27d972a4eb78e62ed2e43df91dbdee304251ddedd64cc2d24fbe68cd6f02a190273e9f2025d71919e23fc764c9470d999a0e8612c90937d594b5b53dfb5e365f3ac0400e7a0183c9f8f20de6afa430d402e304697fcbb4b3704720ec24ab7d1aa574066e81b08e8d96b5d226e10f3f85dc72795ddd1975665aee794c6ee9b805fd9c6335af1c29245a81dc2f82233a9a19da91596b", &(0x7f00000002c0)=""/179, 0x1, 0x10010, 0xffffffffffffffff, &(0x7f0000000100)}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 192.539029] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 192.558675] RSP: 002b:00007f2026deec68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 192.566409] RAX: ffffffffffffffda RBX: 00007f2026def6d4 RCX: 0000000000455e29 [ 192.573693] RDX: 00000000fffffdef RSI: 00000000200005c0 RDI: 0000000000000013 [ 192.580989] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 192.588275] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000015 [ 192.595563] R13: 00000000004c14fe R14: 00000000004d1a20 R15: 0000000000000000 20:54:26 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0xa7, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x0, @loopback=0x7f000001}, @in={0x2, 0x0, @rand_addr}]}, &(0x7f0000000100)=0x10) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x7f, 0x10001, 0x5, 0xe5dd, 0x4, 0x5, 0xa1, 0x9, 0x400, 0x6, 0x7, 0x0, 0x5, 0x8, 0xb3af48, 0x6], 0xf002, 0x88180}) io_submit(r2, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001000)}]) [ 192.624648] IPVS: ftp: loaded support on port[0] = 21 [ 192.639531] binder_alloc: binder_alloc_mmap_handler: 13472 20001000-20004000 already mapped failed -16 [ 192.663168] binder: BINDER_SET_CONTEXT_MGR already set 20:54:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) [ 192.671186] binder: 13472:13481 ioctl 40046207 0 returned -16 [ 192.684175] 9pnet: Insufficient options for proto=fd 20:54:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x801, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000000c0)={0x7, 0x2}) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x42, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, 0x1c) listen(r1, 0x0) 20:54:26 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101500) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @rand_addr}, 0xc) mlockall(0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x0) [ 192.769958] 9pnet: Insufficient options for proto=fd [ 192.777422] IPVS: ftp: loaded support on port[0] = 21 20:54:26 executing program 4 (fault-call:8 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) [ 192.812496] binder: BINDER_SET_CONTEXT_MGR already set 20:54:26 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000005c0)="295ee1311f16f477671070") socket$inet(0x10, 0x3, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x8) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xa9, 0x80) execveat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='io.bfq.weight\x00', &(0x7f00000001c0)='io.bfq.weight\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280)='!lo&cpuset\x00', &(0x7f00000002c0)='wlan1\x00', &(0x7f0000000300)='[\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='io.bfq.weight\x00', &(0x7f00000003c0)="7f2d00"], &(0x7f0000000580)=[&(0x7f0000000480)='io.bfq.weight\x00', &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000500)="75736572e97472757374656400", &(0x7f0000000540)='./cgroup\x00'], 0x800) ioctl$VT_DISALLOCATE(r3, 0x5608) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000012000), 0x4) [ 192.866415] binder: 13500:13501 ioctl 40046207 20000040 returned -16 20:54:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x3) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)}, 0x10) r1 = getpid() get_robust_list(r1, &(0x7f00000002c0)=&(0x7f0000000280)={&(0x7f00000001c0)={&(0x7f0000000180)}}, &(0x7f0000000300)=0x18) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000380)={0x7, {{0xa, 0x4e21, 0x80000001, @mcast2={0xff, 0x2, [], 0x1}, 0x7bc7}}}, 0x88) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x100, 0x0) clock_getres(0x0, &(0x7f0000000440)) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x43) 20:54:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x78, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, @in6={0xa, 0x4e24, 0xfffffffffffffff8, @mcast2={0xff, 0x2, [], 0x1}, 0x400}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x2}, &(0x7f00000001c0)=0x8) write$binfmt_misc(r1, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1000) [ 192.920558] binder_alloc: binder_alloc_mmap_handler: 13500 20001000-20004000 already mapped failed -16 [ 192.958865] FAULT_INJECTION: forcing a failure. [ 192.958865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 192.970789] CPU: 1 PID: 13511 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #141 [ 192.978164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 192.987532] Call Trace: [ 192.990104] binder: BINDER_SET_CONTEXT_MGR already set [ 192.990143] dump_stack+0x1c9/0x2b4 [ 192.995840] binder: 13500:13514 ioctl 40046207 0 returned -16 [ 192.999078] ? dump_stack_print_info.cold.2+0x52/0x52 [ 192.999108] should_fail.cold.4+0xa/0x1a [ 192.999130] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 192.999152] ? trace_hardirqs_on+0xd/0x10 [ 192.999166] ? try_charge+0xabd/0x1650 [ 192.999182] ? down_read+0xb5/0x1d0 [ 192.999202] ? get_user_pages_unlocked+0xfd/0x5d0 [ 193.007181] binder: BINDER_SET_CONTEXT_MGR already set [ 193.010297] ? __mem_cgroup_largest_soft_limit_node.part.61+0x6b0/0x6b0 [ 193.010320] ? graph_lock+0x170/0x170 [ 193.010340] ? up_read+0x1a/0x110 [ 193.010358] ? print_usage_bug+0xc0/0xc0 [ 193.010380] ? get_user_pages_longterm+0x650/0x650 [ 193.010394] ? get_user_pages_fast+0x22b/0x450 [ 193.010420] __alloc_pages_nodemask+0x36e/0xdb0 [ 193.014871] binder: 13500:13523 ioctl 40046207 20000040 returned -16 [ 193.019576] ? mark_held_locks+0xc9/0x160 [ 193.019598] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 193.019615] ? mem_cgroup_charge_skmem+0x183/0x350 [ 193.019630] ? mem_cgroup_sk_free+0x90/0x90 [ 193.019652] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 193.019668] ? tcp_leave_memory_pressure+0x47/0xf0 [ 193.019682] ? tcp_push+0x8c0/0x8c0 [ 193.019696] ? __sk_mem_raise_allocated+0x88a/0x1600 [ 193.019714] ? sk_busy_loop_end+0x1c0/0x1c0 [ 193.019726] ? trace_hardirqs_on+0x10/0x10 [ 193.019744] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 193.131814] alloc_pages_current+0x10c/0x210 [ 193.136218] skb_page_frag_refill+0x45f/0x6a0 [ 193.140705] ? graph_lock+0x170/0x170 [ 193.144495] ? sock_kzfree_s+0x60/0x60 [ 193.148379] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 193.153910] ? zerocopy_from_iter.constprop.12+0x48e/0x640 [ 193.159532] sk_page_frag_refill+0x55/0x1f0 [ 193.163860] sk_alloc_sg+0x1e7/0x9d0 [ 193.167586] ? sk_page_frag_refill+0x1f0/0x1f0 [ 193.172156] ? free_sg+0x530/0x530 [ 193.175690] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 193.180705] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 193.185726] ? __local_bh_enable_ip+0x161/0x230 [ 193.190395] tls_sw_sendmsg+0x67e/0x12c0 [ 193.194459] ? expand_files.part.8+0x9c0/0x9c0 [ 193.199051] ? tls_sw_push_pending_record+0x30/0x30 [ 193.204068] ? lock_downgrade+0x8f0/0x8f0 [ 193.208215] ? lock_release+0xa30/0xa30 [ 193.212184] ? __check_object_size+0x9d/0x5f2 [ 193.216677] inet_sendmsg+0x1a1/0x690 [ 193.220487] ? ipip_gro_receive+0x100/0x100 [ 193.224896] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 193.230437] ? security_socket_sendmsg+0x94/0xc0 [ 193.235190] ? ipip_gro_receive+0x100/0x100 [ 193.239502] sock_sendmsg+0xd5/0x120 [ 193.243206] __sys_sendto+0x3d7/0x670 [ 193.247097] ? __ia32_sys_getpeername+0xb0/0xb0 [ 193.251759] ? wait_for_completion+0x8d0/0x8d0 [ 193.256348] ? __lock_is_held+0xb5/0x140 [ 193.260412] ? __sb_end_write+0xac/0xe0 [ 193.264381] ? fput+0x130/0x1a0 [ 193.267653] ? ksys_write+0x1ae/0x260 [ 193.271467] ? __ia32_sys_read+0xb0/0xb0 [ 193.275540] ? syscall_slow_exit_work+0x500/0x500 [ 193.280390] __x64_sys_sendto+0xe1/0x1a0 [ 193.284450] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 193.289472] do_syscall_64+0x1b9/0x820 [ 193.293353] ? finish_task_switch+0x1d3/0x870 [ 193.297944] ? syscall_return_slowpath+0x5e0/0x5e0 [ 193.302952] ? syscall_return_slowpath+0x31d/0x5e0 [ 193.307983] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 193.313361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 193.318204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 193.323386] RIP: 0033:0x455e29 [ 193.326564] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 193.345803] RSP: 002b:00007f2026deec68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 193.353517] RAX: ffffffffffffffda RBX: 00007f2026def6d4 RCX: 0000000000455e29 [ 193.360777] RDX: 00000000fffffdef RSI: 00000000200005c0 RDI: 0000000000000013 [ 193.368038] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 193.377208] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000015 [ 193.384556] R13: 00000000004c14fe R14: 00000000004d1a20 R15: 0000000000000001 20:54:27 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) r1 = dup2(r0, r0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x9, 0x1}) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x82, 0x4) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) 20:54:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000040)={0x3c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000000000000104000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0600000000000000e13d7edd2a3d89416eab83c0afab264f485e3a994e9175bfa91cc9b289bd881dd78f75f93f7bd62a4a0702f7f93b17d131d5bc67b0d7a488bb2261afd8a0085f69a7fdf259bb"]], 0x0, 0x0, &(0x7f0000000300)}) 20:54:27 executing program 6: r0 = socket$xdp(0x2c, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x1ff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f0000000140)={&(0x7f0000000080)=""/2, 0x0, 0x0, 0xffffffff}, 0x18) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xffffffffffff6f73, 0x0) dup2(r2, r0) 20:54:27 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x0) ppoll(&(0x7f0000000680)=[{r0}], 0x1, &(0x7f00000006c0)={0x0, 0x989680}, &(0x7f0000000700), 0x8) 20:54:27 executing program 4 (fault-call:8 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) 20:54:27 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/178, 0xb2) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000500)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) [ 193.786341] binder_alloc: binder_alloc_mmap_handler: 13537 20001000-20004000 already mapped failed -16 [ 193.802874] FAULT_INJECTION: forcing a failure. [ 193.802874] name failslab, interval 1, probability 0, space 0, times 0 [ 193.814258] CPU: 0 PID: 13544 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #141 [ 193.821640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 193.831008] Call Trace: [ 193.833615] dump_stack+0x1c9/0x2b4 [ 193.837263] ? dump_stack_print_info.cold.2+0x52/0x52 [ 193.842469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 193.848021] ? __do_page_fault+0x449/0xe50 [ 193.852274] should_fail.cold.4+0xa/0x1a [ 193.856369] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 193.861496] ? graph_lock+0x170/0x170 [ 193.865316] ? graph_lock+0x170/0x170 [ 193.869142] ? graph_lock+0x170/0x170 [ 193.872963] ? vmalloc_sync_all+0x30/0x30 [ 193.877127] ? sk_busy_loop_end+0x1c0/0x1c0 [ 193.881468] ? trace_hardirqs_on+0x10/0x10 [ 193.885721] ? find_held_lock+0x36/0x1c0 [ 193.889808] ? __lock_is_held+0xb5/0x140 [ 193.893903] ? check_same_owner+0x340/0x340 [ 193.898244] ? check_same_owner+0x340/0x340 [ 193.904121] ? rcu_note_context_switch+0x730/0x730 [ 193.909064] __should_failslab+0x124/0x180 [ 193.913313] should_failslab+0x9/0x14 [ 193.917122] __kmalloc+0x2c8/0x760 [ 193.920672] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 193.925694] ? _copy_from_iter+0x39d/0x1090 [ 193.930021] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 193.935047] ? tls_push_record+0x10d/0x1400 [ 193.939377] ? __check_object_size+0x9d/0x5f2 [ 193.943889] tls_push_record+0x10d/0x1400 [ 193.948048] ? _copy_from_iter_nocache+0x1050/0x1050 [ 193.953161] ? __local_bh_enable_ip+0x161/0x230 [ 193.957856] tls_sw_sendmsg+0x9e6/0x12c0 [ 193.961947] ? tls_sw_push_pending_record+0x30/0x30 [ 193.966971] ? lock_downgrade+0x8f0/0x8f0 [ 193.971129] ? lock_release+0xa30/0xa30 [ 193.975118] ? __check_object_size+0x9d/0x5f2 [ 193.979625] inet_sendmsg+0x1a1/0x690 [ 193.983434] ? ipip_gro_receive+0x100/0x100 [ 193.987764] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 193.993315] ? security_socket_sendmsg+0x94/0xc0 [ 193.998075] ? ipip_gro_receive+0x100/0x100 [ 194.002407] sock_sendmsg+0xd5/0x120 [ 194.006131] __sys_sendto+0x3d7/0x670 [ 194.009947] ? __ia32_sys_getpeername+0xb0/0xb0 [ 194.014624] ? wait_for_completion+0x8d0/0x8d0 [ 194.019217] ? __lock_is_held+0xb5/0x140 [ 194.023298] ? __sb_end_write+0xac/0xe0 [ 194.027331] ? fput+0x130/0x1a0 [ 194.030617] ? ksys_write+0x1ae/0x260 [ 194.034427] ? __ia32_sys_read+0xb0/0xb0 [ 194.038501] ? syscall_slow_exit_work+0x500/0x500 [ 194.043359] __x64_sys_sendto+0xe1/0x1a0 [ 194.047433] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 194.052461] do_syscall_64+0x1b9/0x820 [ 194.056353] ? finish_task_switch+0x1d3/0x870 [ 194.060858] ? syscall_return_slowpath+0x5e0/0x5e0 [ 194.065798] ? syscall_return_slowpath+0x31d/0x5e0 [ 194.070741] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 194.076203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.081059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.086267] RIP: 0033:0x455e29 [ 194.089465] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 194.108845] RSP: 002b:00007f2026deec68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 194.116563] RAX: ffffffffffffffda RBX: 00007f2026def6d4 RCX: 0000000000455e29 [ 194.123837] RDX: 00000000fffffdef RSI: 00000000200005c0 RDI: 0000000000000013 [ 194.131115] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 194.138389] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000015 [ 194.145675] R13: 00000000004c14fe R14: 00000000004d1a20 R15: 0000000000000002 [ 194.159234] binder: BINDER_SET_CONTEXT_MGR already set [ 194.167519] binder: 13537:13539 ioctl 40046207 0 returned -16 [ 194.349694] ================================================================== [ 194.357479] BUG: KASAN: use-after-free in tls_push_record+0x1091/0x1400 [ 194.364240] Write of size 1 at addr ffff8801924e8000 by task syz-executor4/13542 [ 194.371826] [ 194.373486] CPU: 1 PID: 13542 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #141 [ 194.380841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.390207] Call Trace: [ 194.392812] dump_stack+0x1c9/0x2b4 [ 194.396446] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.401637] ? printk+0xa7/0xcf [ 194.404935] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 194.409697] ? tls_push_record+0x1091/0x1400 [ 194.414105] print_address_description+0x6c/0x20b [ 194.418949] ? tls_push_record+0x1091/0x1400 [ 194.423358] kasan_report.cold.7+0x242/0x2fe [ 194.427775] __asan_report_store1_noabort+0x17/0x20 [ 194.432832] tls_push_record+0x1091/0x1400 [ 194.437076] ? lock_sock_nested+0x9f/0x120 [ 194.441319] tls_sw_push_pending_record+0x22/0x30 [ 194.446168] tls_sk_proto_close+0x74c/0xae0 [ 194.450494] ? lock_acquire+0x1e4/0x540 [ 194.454472] ? tcp_check_oom+0x530/0x530 [ 194.458551] ? do_lock_file_wait.part.32+0x260/0x260 [ 194.463667] ? tls_write_space+0x360/0x360 [ 194.467908] ? rcu_note_context_switch+0x730/0x730 [ 194.472842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.478385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.483944] ? ipv6_sock_ac_close+0x356/0x490 [ 194.488446] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.493998] ? ipv6_sock_mc_close+0x162/0x1d0 [ 194.498495] ? ip_mc_drop_socket+0x20f/0x270 [ 194.502909] ? down_write+0x8f/0x130 [ 194.506629] inet_release+0x104/0x1f0 [ 194.510436] inet6_release+0x50/0x70 [ 194.514152] __sock_release+0xd7/0x260 [ 194.518040] ? __sock_release+0x260/0x260 [ 194.522192] sock_close+0x19/0x20 [ 194.525648] __fput+0x355/0x8b0 [ 194.528954] ? fput+0x1a0/0x1a0 [ 194.532237] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.536739] ____fput+0x15/0x20 [ 194.540027] task_work_run+0x1ec/0x2a0 [ 194.543922] ? task_work_cancel+0x250/0x250 [ 194.548248] ? exit_to_usermode_loop+0x8c/0x370 [ 194.552925] exit_to_usermode_loop+0x313/0x370 [ 194.557517] ? syscall_slow_exit_work+0x500/0x500 [ 194.562371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.567914] do_syscall_64+0x6be/0x820 [ 194.571827] ? syscall_slow_exit_work+0x500/0x500 [ 194.576673] ? syscall_return_slowpath+0x5e0/0x5e0 [ 194.581608] ? syscall_return_slowpath+0x31d/0x5e0 [ 194.586549] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 194.591920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 194.596777] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 194.601966] RIP: 0033:0x40ff01 [ 194.605149] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 194.624515] RSP: 002b:0000000000a3eab0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 194.632230] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 000000000040ff01 [ 194.639499] RDX: 0000000000000000 RSI: 0000000000730c28 RDI: 0000000000000013 [ 194.646783] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000094a [ 194.654138] R10: 0000000000a3e930 R11: 0000000000000293 R12: 0000000000000000 [ 194.661422] R13: 0000000000000000 R14: 0000000000a3f160 R15: 00000000007034c0 [ 194.668793] [ 194.670425] The buggy address belongs to the page: [ 194.675358] page:ffffea0006493a00 count:0 mapcount:-128 mapping:0000000000000000 index:0x0 [ 194.683790] flags: 0x2fffc0000000000() [ 194.687683] raw: 02fffc0000000000 ffffea00066adc08 ffffea00063b9208 0000000000000000 [ 194.695565] raw: 0000000000000000 0000000000000003 00000000ffffff7f 0000000000000000 [ 194.703441] page dumped because: kasan: bad access detected [ 194.709143] [ 194.710765] Memory state around the buggy address: [ 194.715690] ffff8801924e7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.723065] ffff8801924e7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 194.730426] >ffff8801924e8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.737780] ^ [ 194.741161] ffff8801924e8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.748523] ffff8801924e8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 194.755883] ================================================================== [ 194.763256] Disabling lock debugging due to kernel taint [ 194.768862] Kernel panic - not syncing: panic_on_warn set ... [ 194.768862] [ 194.776239] CPU: 1 PID: 13542 Comm: syz-executor4 Tainted: G B 4.18.0-rc4+ #141 [ 194.784987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 194.794360] Call Trace: [ 194.796968] dump_stack+0x1c9/0x2b4 [ 194.800624] ? dump_stack_print_info.cold.2+0x52/0x52 [ 194.805814] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 194.810591] panic+0x238/0x4e7 [ 194.813873] ? add_taint.cold.5+0x16/0x16 [ 194.818023] ? do_raw_spin_unlock+0xa7/0x2f0 [ 194.822439] ? do_raw_spin_unlock+0xa7/0x2f0 [ 194.826851] ? tls_push_record+0x1091/0x1400 [ 194.831261] kasan_end_report+0x47/0x4f [ 194.835237] kasan_report.cold.7+0x76/0x2fe [ 194.839555] __asan_report_store1_noabort+0x17/0x20 [ 194.844574] tls_push_record+0x1091/0x1400 [ 194.848812] ? lock_sock_nested+0x9f/0x120 [ 194.853048] tls_sw_push_pending_record+0x22/0x30 [ 194.857918] tls_sk_proto_close+0x74c/0xae0 [ 194.862247] ? lock_acquire+0x1e4/0x540 [ 194.866244] ? tcp_check_oom+0x530/0x530 [ 194.870406] ? do_lock_file_wait.part.32+0x260/0x260 [ 194.875513] ? tls_write_space+0x360/0x360 [ 194.879776] ? rcu_note_context_switch+0x730/0x730 [ 194.884708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.890271] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.895824] ? ipv6_sock_ac_close+0x356/0x490 [ 194.900321] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 194.905861] ? ipv6_sock_mc_close+0x162/0x1d0 [ 194.910354] ? ip_mc_drop_socket+0x20f/0x270 [ 194.914768] ? down_write+0x8f/0x130 [ 194.918485] inet_release+0x104/0x1f0 [ 194.922297] inet6_release+0x50/0x70 [ 194.926014] __sock_release+0xd7/0x260 [ 194.929902] ? __sock_release+0x260/0x260 [ 194.934048] sock_close+0x19/0x20 [ 194.937532] __fput+0x355/0x8b0 [ 194.940818] ? fput+0x1a0/0x1a0 [ 194.944185] ? _raw_spin_unlock_irq+0x27/0x70 [ 194.948694] ____fput+0x15/0x20 [ 194.951976] task_work_run+0x1ec/0x2a0 [ 194.955868] ? task_work_cancel+0x250/0x250 [ 194.960211] ? exit_to_usermode_loop+0x8c/0x370 [ 194.964897] exit_to_usermode_loop+0x313/0x370 [ 194.969487] ? syscall_slow_exit_work+0x500/0x500 [ 194.974332] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 194.979875] do_syscall_64+0x6be/0x820 [ 194.983766] ? syscall_slow_exit_work+0x500/0x500 [ 194.988613] ? syscall_return_slowpath+0x5e0/0x5e0 [ 194.993545] ? syscall_return_slowpath+0x31d/0x5e0 [ 194.998478] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 195.003833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.008667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 195.013848] RIP: 0033:0x40ff01 [ 195.017049] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 195.036220] RSP: 002b:0000000000a3eab0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 195.044356] RAX: 0000000000000000 RBX: 0000000000000014 RCX: 000000000040ff01 [ 195.051626] RDX: 0000000000000000 RSI: 0000000000730c28 RDI: 0000000000000013 [ 195.058882] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000094a [ 195.066143] R10: 0000000000a3e930 R11: 0000000000000293 R12: 0000000000000000 [ 195.073406] R13: 0000000000000000 R14: 0000000000a3f160 R15: 00000000007034c0 [ 195.081404] Dumping ftrace buffer: [ 195.084944] (ftrace buffer empty) [ 195.088631] Kernel Offset: disabled [ 195.092237] Rebooting in 86400 seconds..