ce12ceff016b8c659f792a4602c476bc4feac9892b172bf01a48b1d4a8860cb0c4b50a299ee4ef5a6569e8d684d8f372452eb782717c0ac18b68f426493a40ed8d1d5465374b1782f93a582d21aee3af2507396b3", 0x1000}, {&(0x7f00000033c0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x40000}, {&(0x7f0000004400)=@file={0xb9a612950a07638f, './file0\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004480)="355e17d1a306377d031189515e4f4348b250db8e19c221a8f11f94cc15339f313e42dba859c60204ba876fe4a7f39ca07bde24d604fabbceeeb469b0dfcb66cfa3b5eca5ebe32d9ba3d1ef6a56814f29268e46b78a54ffb9059940bac7c114071a5e07ff08548f200a3c93128f60eec3a44e5a537e05038af028798680b870d3fa165d30e6f26e3030da8348c9", 0x8d}, {&(0x7f0000004540)="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", 0xff}, {&(0x7f0000004640)="1d76af800ac9f587a2313cab5b7d4b54c70dd51f329b1042110194f9d133455cf83bfbe44059548a3ed1fa4c58cd2ab7b05aaee9f1ff81b87373646bb173ae594043c0658e8c2507c26e1f0c5190075163dd0a83cf4d9b4477bea75eb52b39c57040497e28", 0x65}], 0x3, &(0x7f0000004740)=ANY=[@ANYBLOB="3800000000000000010012bda1c10000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x2400c880}, {&(0x7f0000004800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004e80)=[{&(0x7f0000004880)="d6980b13ee5bdfb1b898703df83ea1f41f43f80b852dc07d6ca8fe99ed5a7550dd7da5adb847f690bf02564abd04405a46874b21e9c9b3dd43abfc030b0959dc1bae9ae5f2f9b28cd4810b910c5261d5d9383551fdd8c3a801eb914d5c01908b044b95e89ccd31e90ffc1c850b2f60b173e128fa3ef42bd53eac8a0b8926352f96be66a9508b24f10cc2e4869ed3ec9399c776bb615aeb0188c682c2883b4e4e46b9b1bb48aa2274466e0570d8a5168fb51c374514ac867dfa9b3a65840acfaae97ce68b2c8298c54c3164fbaa260a8b8cf4c7a92c12dee8bbb58c87069b3b5d83ec9075e4c4de13a4adb969283c9590f20ac335", 0xf4}, {&(0x7f0000004980)="5646be6cfcd0c608c53fa818d3bb3b2af719713c12f43195e07413e5b3795fe6a000f10d63dae2342390f794457f3751756f4d330015b0b207570916975a905414c3d9", 0x43}, {&(0x7f0000004a00)="cb2c8440ce7358d682c9f05ae4fcd1e6c861eed6a54b9875606998ab36eb3071dfc8b3ad50f04ddddb132d64bf3093fcaada52a9421f35ea91ecb86136e31bcbaaa7f9492b1b12e2b567331c5612a88139a740f98c4609db8d37806e5716ab9373f21e2fa90988bcf554bc34", 0x6c}, {&(0x7f0000004a80)="fe84208fa79b43ef8c43f77b427125b5cb878e078f37d5abb9791737f1a8f47aa845705d360f83a8f94c8eea565482c8d9b4aad9d828393f67d3719313f47afcc850196445e86acd001158c9e4bf79deb9f6ed92a593238e0d2ea0caba5d13c87fea5d23520190f448ffb9d1fc59e8e27c13fe640e5fb7a20f078f", 0x7b}, {&(0x7f0000004b00)="6e97886879c7ed305b96fea5ffef7157316f1f956e41907d6a5dcacfe7dca868d9ce1fc3d1ea8ac838257f99eb5863369c1f4bcfbd3787e2b83af4541121311b74e36e13d3e7f7a65b767b9d597fd562591eed72fab8cf4eefd87de122acbab781a1200b04ed80954c05db9692abde195a1db1db15c3ee947239028d190b017ae823fef548cc5664fa0761809d55a7c61b7f7d8e1025db3d83e0bdbe2c07785ef630e52b3902e9b831149fe54e56e47bb47ea1dd75071c9db9d4341e3e9aac3ada219bc54843a04fe49a9a52d5f95a96b60337179e601df7a4b2782385", 0xdd}, {&(0x7f0000004c00)="2f5284cf86a2afdcd8373a93ac9a65f4c298d34e95469f398cbd77e1c5050260559308869e8b59d508e3b5edef4a32dd657432c3c5fcb37ea6405addb9a39d2bc05aacb425604c54b2bb6b0e252d9b1464aa9427891093a29cf460a99005c99f499151e0af324b6d953299daf512133e7f4ec6a33664df8cecdaadcd13c8cd09626ecfa07952c1e6e54a69d1f5e5868bc6ed6c4d8f44bcf3ee2387a587ed8fdbeb41e612caec683a2ce7996c26c542edaa5a03c6a9f61c47b2d8e274ad0114d85a172958e1ba67fa736e71aa778d3d5c7ac1db8c24822d05ca14c906186bacf62336b7481d6e9363a794", 0xea}, {&(0x7f0000004d00)="acf1c3e66e948ee477ecaad7a08fef0f0ac67d12b58858a746fb60e731f56f9ec7105da0fbda13d716d9858792b051cb9d435a6f6ade43accc5623e2860905cb1b5985282e48b25f76b4921570b72681033eacd92ec44c280be41d4ba651b3a79e63170979509947cbf46fe2c0ea0bd8e08aaedde395f14adb112397e4f3197b8d5eb281c5a44f44bd910210a439285746ef81d507b63f6a24953a22eb80", 0x9e}, {&(0x7f0000004dc0)="1ffe7981033de20acf2c43af1950ad9d4d5f59e5b13e371a0df4196dbc73fdea232cfa3610a44a51ce2175203caa8d57e0b6d0186dd6aea19d77bd2e753bf482646df748892410b10857d3f04f93573245befd9accdf7aa5187a0aa6aa5bb2f7850714d411cd0b0b03059caa227b77a027dae6e463dd5a3bdce7b138212d44b6d1e1fd8f44", 0x85}], 0x8, &(0x7f0000005100)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x70, 0xc090}, {&(0x7f0000005180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005600)=[{&(0x7f0000005200)="5496a63ed44c47b0322a38e9159ee00ec6b81f7eedb3458a4b43db9d93", 0x1d}, {&(0x7f0000005240)="922973892455f608cb7b3c1da23b7a7cc93a505ab0df592536299e2e5e82e8afbe3f7e48b2b20aee0c3a4ecabda9e87a174d78c78a6cbe4c16bfd696bf63530efb32bca196600597bba43a8d2d89526bfb8904c28cc7dcc6e80376d197eea13cc14479ddbe0bac69e75c243698069d924c314841d27048fbe7dcb974462fed35164840b98dd135e9ab0cd476838fbf94acce2f598f2bf926e72553e47df7edb24f67aeb3729fc869124b9643c69920622d8f6a54a73c2d905a64c3de2b11a3598244f4913b", 0xc5}, {&(0x7f0000005340)="52d808e2a99d39bc9fd297e659acab3869eda9a8a6e9b9c532689e613d288e44a020ed167c305f576f2033e99844b725f4def68e0cf725ea1492d3", 0x3b}, {&(0x7f0000005380)="e28d3caaba8f30a90b9deb142cb236fe84bb54f38721", 0x16}, {&(0x7f00000053c0)}, {&(0x7f0000005400)="d8b371b959a9bf7df4929d4142d2bb961f08f790969fe0571560ee548edb9492dad6790c32639c5b7d6799cf088d375279ac236c67bcd725c8cfc84f75d317b80e24c10548df04ca0e46fedb9ebb8d6fe2c63d18f05da71f76322bb2745a05491c6c6ecda6589f322d8895bb502ae0a4", 0x70}, {&(0x7f0000005480)="5ee9a2c05aae71ee40bd34d0a15193c68673834bf8d75c3b51e83c46a79af4726f3a95498cf1aebdd040cabddf86ef5cbb113f5d6570c6e4c8bbc5d4fae41b6c22200619ac13e5c95bd55ae9e38968c8563befd1e7702e27e78fa9e6a87ec368ccaeb557b6e2bc221557d65717d04ce0", 0x70}, {&(0x7f0000005500)="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", 0xfe}], 0x8, &(0x7f0000005e40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r29, r30, r31}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r35, r36, r37}], 0x130, 0x20000800}], 0x7, 0x44) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r38 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r38, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 19:50:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x0}) 19:50:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x600300, 0x400100]}, 0x3c) 19:50:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:35 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) getpeername(r1, &(0x7f00000001c0)=@generic, &(0x7f0000000140)=0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000280)={0x101, 0xa, 0x0, [{0x4, 0xb7, 0xfff, 0xfffffffffffffffa, 0x3, 0x6, 0x73cd6d4c}, {0x10001, 0x0, 0x9, 0x1, 0x40, 0x3ff, 0xcc}, {0xe93, 0x78790e33, 0x5, 0x80, 0xffffffffffff7fff, 0x1, 0x3f}, {0x4, 0x8eeb, 0x9, 0xfff, 0x7, 0x7f, 0xfe59}, {0xdff2, 0x8, 0x7fffffff, 0x7, 0xfe, 0x9}, {0x3, 0x3, 0x10001, 0x0, 0x2, 0x90, 0x3}, {0x7, 0x4, 0x3, 0x5, 0x80000001, 0x0, 0x5}, {0x7, 0x6, 0x10000, 0x5, 0x3, 0x1, 0x10000}, {0x2, 0xfffffffffffffff8, 0x5, 0x3, 0x1, 0x1, 0x1}, {0x6, 0x9e7f, 0x0, 0x10000, 0xfff, 0xffffffffffffffe0, 0xfffffffffffffffb}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x34000, 0x0) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000040)=""/14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 19:50:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xc8000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x1000000, 0x0}) [ 738.679373] binder_release_work: 22 callbacks suppressed [ 738.679380] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.708891] binder: BINDER_SET_CONTEXT_MGR already set 19:50:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x4a457ae864000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x740000, 0x400100]}, 0x3c) [ 738.761557] binder: 21692:21708 ioctl 40046207 0 returned -16 19:50:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x100000000000000, 0x0}) 19:50:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xcc000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x740100, 0x400100]}, 0x3c) 19:50:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 738.952676] binder: undelivered TRANSACTION_ERROR: 29201 [ 738.982058] binder: undelivered TRANSACTION_ERROR: 29201 19:50:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x4c1d000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xcdf11b01, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 739.208543] binder: undelivered TRANSACTION_ERROR: 29201 19:50:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x740200, 0x400100]}, 0x3c) [ 739.249062] binder: undelivered TRANSACTION_ERROR: 29201 19:50:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x4010, r0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 19:50:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xd0100012, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 739.433199] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.441054] binder: BINDER_SET_CONTEXT_MGR already set [ 739.479440] binder: 22013:22014 ioctl 40046207 0 returned -16 19:50:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x277, 0x0}) fremovexattr(r1, &(0x7f0000000000)=@random={'user.', '}*\x00'}) [ 739.526264] binder: undelivered TRANSACTION_ERROR: 29189 19:50:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$peek(0x2, r2, &(0x7f0000000040)) 19:50:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x740300, 0x400100]}, 0x3c) 19:50:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xd0100013, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x3f) delete_module(&(0x7f0000000000)='selinux\x00', 0x800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x40, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x64}) [ 739.744435] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.767747] binder: undelivered TRANSACTION_ERROR: 29201 [ 739.781226] net_ratelimit: 1 callbacks suppressed [ 739.781235] protocol 88fb is buggy, dev hsr_slave_0 19:50:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5001000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 739.791290] protocol 88fb is buggy, dev hsr_slave_1 19:50:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x800100, 0x400100]}, 0x3c) 19:50:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200004, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000100)=""/126) 19:50:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r1, 0x0, 0x1000, 0x6d, &(0x7f0000000040)="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", &(0x7f0000001040)=""/109, 0x9}, 0x28) [ 739.972115] binder_transaction: 22 callbacks suppressed [ 739.972127] binder: 22165:22166 got transaction with invalid offsets size, 3 [ 739.993780] binder_transaction: 23 callbacks suppressed [ 739.993797] binder: 22165:22166 transaction failed 29201/-22, size 0-3 line 3005 19:50:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x800200, 0x400100]}, 0x3c) 19:50:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe7100000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x5c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 740.060808] binder: undelivered TRANSACTION_ERROR: 29201 [ 740.080861] binder: 22165:22281 got transaction with invalid offsets size, 3 19:50:36 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000140)={0x0, r1}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup2(r2, r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000180)=""/90) 19:50:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000001c0)=""/4096) [ 740.176058] binder: 22165:22281 transaction failed 29201/-22, size 0-3 line 3005 19:50:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:36 executing program 1: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x800300, 0x400100]}, 0x3c) 19:50:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe8000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x20080) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000040)={0x0, 0x0, {0x800, 0xcafa, 0x302e, 0x0, 0x0, 0x0, 0x2, 0x7}}) r2 = socket$packet(0x11, 0x7, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 740.413201] binder: 22412:22413 got transaction with invalid offsets size, 3 19:50:37 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40200, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") clock_gettime(0x5, &(0x7f0000000480)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000180)={0x0, @aes256}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r3, 0x9, 0x0, 0x2}, 0x10) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)={0x1, 0x81}) r4 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x400448c9, &(0x7f0000000040)={0xfdd0, 0x0}) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 740.490290] binder: 22412:22413 transaction failed 29201/-22, size 0-3 line 3005 [ 740.529443] binder: 22412:22426 got transaction with invalid offsets size, 3 19:50:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 740.569920] binder: 22412:22426 transaction failed 29201/-22, size 0-3 line 3005 19:50:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x940000, 0x400100]}, 0x3c) 19:50:37 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xff, 0x301442) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f0000000000)={0x0, 0x0}, 0x10) 19:50:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8009000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:37 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0xffffffffffffff2b, 0x0}) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100)) 19:50:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xf0010000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x940100, 0x400100]}, 0x3c) [ 740.873949] binder: 22555:22557 got transaction with invalid offsets size, 3 [ 740.908376] binder: 22555:22557 transaction failed 29201/-22, size 0-3 line 3005 19:50:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) r3 = accept4(r1, &(0x7f00000001c0)=@can, &(0x7f0000000140)=0x80, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xd, &(0x7f0000000240)="5e2c79034b5edbb761a4e735e52014e41d58f515f04da5f32470e6eb666100d377aaadca818e3caf77ef6181444bd9ced4679fe02c081bdb2f3671c908a5d2eb20dde8671dfcd5f589120a99da4bb337031ec51e6b1106bc93a00e735161404857664ed9941a562bb47637135210f33ab2e7027dfc6389e2e92db5afd68db8e6d3e5ec41ee3c5a621242c59336be4d294c36c54faa3d0433e2f2ef4b030b6651575320a3bb2fb90cdb238a75055cbc592ed7cc91cabe9b498e71c6fdf5e783cbf47c", 0xc2) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x8) [ 740.982030] binder: 22555:22670 got transaction with invalid offsets size, 3 19:50:37 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) write$binfmt_elf32(r0, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0x100000000, 0x652, 0xff, 0x2, 0x3, 0x0, 0x102, 0x38, 0x1ff, 0x9, 0x2800000, 0x20, 0x2, 0x3, 0xfff, 0x8}, [{0x60000007, 0x4, 0x0, 0x5, 0x9, 0x7fff, 0x1f, 0x7}, {0x4, 0xff, 0x5849, 0x0, 0x8, 0x8, 0x100, 0x20}], "e1d34b68cd1492f67d9aca85ff1d193e9657343bff136165619adcfb0175c57d7f946f65d7370826b196502af0a5461452aa85f7aa9b5c3e6762562a5f7a3a365ca5e62ff014c4db9fb9a468e46eaa7cbc9667fc6c87f0e2cb871ba17792c1e3d86afe6a74d632f5eb8b3ddc9b30620ac4f5224ba304919a52753fdd315acbcbd52336b86cd51e371da651ab3190ff78cc7fd27d6a896ca3fd130f486681e0f3192c01dc2d95a3df7f16c6", [[], [], []]}, 0x423) 19:50:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8010001200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 741.060652] binder: 22555:22670 transaction failed 29201/-22, size 0-3 line 3005 19:50:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xf4010000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f0000000000)={0xffffffffffffff55, 0x0}, 0xfffffffffffffe83) 19:50:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x940200, 0x400100]}, 0x3c) 19:50:37 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x50000, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8010001300000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xfc000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 741.358599] binder: 22785:22807 got transaction with invalid offsets size, 3 19:50:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f2b9bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 741.408706] binder: 22785:22807 transaction failed 29201/-22, size 0-3 line 3005 19:50:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x940300, 0x400100]}, 0x3c) [ 741.461637] binder: 22785:22816 transaction failed 29189/-22, size 0-3 line 2855 19:50:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x400000) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/101) r2 = dup2(r0, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffc2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) [ 741.643619] binder: 22844:22848 got transaction with invalid offsets size, 3 [ 741.699667] binder: 22844:22848 transaction failed 29201/-22, size 0-3 line 3005 19:50:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x82248ce864000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa00100, 0x400100]}, 0x3c) [ 741.751917] binder: 22844:22948 got transaction with invalid offsets size, 3 19:50:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000009, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x8) 19:50:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setpipe(r1, 0x407, 0x6) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x4, 0x2, 0x0, 0x6, 0x6, 0x7ff}, 0x80000001}, 0xa) [ 741.802588] binder: 22844:22948 transaction failed 29201/-22, size 0-3 line 3005 19:50:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x504237dd90, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa00200, 0x400100]}, 0x3c) 19:50:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x4, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f0000000040)={{0x2, @name="6d0a4e259ad67df9c589682034db5f4e943f341e805f18f4d0c25053387af49b"}, 0x8, 0x0, 0x9}) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) 19:50:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:38 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) [ 742.067058] binder: 23050:23056 got transaction with invalid offsets size, 3 19:50:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x50424df271, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 742.155117] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 742.222668] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 742.238646] CPU: 0 PID: 23050 Comm: syz-executor.4 Not tainted 4.19.36 #4 [ 742.245633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.254997] Call Trace: [ 742.257611] dump_stack+0x172/0x1f0 [ 742.261298] dump_header+0x15e/0x929 [ 742.265119] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 742.270240] ? ___ratelimit+0x60/0x595 [ 742.274138] ? do_raw_spin_unlock+0x57/0x270 [ 742.278558] oom_kill_process.cold+0x10/0x6f5 [ 742.283092] ? task_will_free_mem+0x139/0x6e0 [ 742.287595] ? find_held_lock+0x35/0x130 [ 742.287617] out_of_memory+0x936/0x12d0 [ 742.287636] ? lock_downgrade+0x810/0x810 [ 742.287653] ? oom_killer_disable+0x280/0x280 [ 742.295695] ? find_held_lock+0x35/0x130 [ 742.295722] mem_cgroup_out_of_memory+0x1d2/0x240 [ 742.295738] ? memcg_event_wake+0x230/0x230 [ 742.317780] ? do_raw_spin_unlock+0x57/0x270 [ 742.322214] ? _raw_spin_unlock+0x2d/0x50 [ 742.326500] try_charge+0x1028/0x15b0 [ 742.330318] ? find_held_lock+0x35/0x130 [ 742.334430] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 742.339297] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 742.344175] ? find_held_lock+0x35/0x130 [ 742.348280] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 742.353178] memcg_kmem_charge_memcg+0x7c/0x130 [ 742.357872] ? memcg_kmem_put_cache+0xb0/0xb0 [ 742.362478] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 742.367453] memcg_kmem_charge+0x136/0x300 [ 742.371971] __alloc_pages_nodemask+0x3c6/0x760 [ 742.376665] ? __alloc_pages_slowpath+0x2870/0x2870 [ 742.381697] ? lockdep_hardirqs_on+0x415/0x5d0 [ 742.381713] ? trace_hardirqs_on+0x67/0x230 [ 742.381727] ? kasan_check_read+0x11/0x20 [ 742.381746] copy_process.part.0+0x3e0/0x7970 [ 742.381769] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 742.404680] ? delayacct_end+0x5c/0x100 [ 742.408672] ? __delayacct_freepages_end+0xe0/0x140 [ 742.413712] ? __lock_acquire+0x6eb/0x48f0 [ 742.418927] ? __cleanup_sighand+0x70/0x70 [ 742.418947] ? mark_held_locks+0x100/0x100 [ 742.418973] _do_fork+0x257/0xfe0 [ 742.430892] ? fork_idle+0x1d0/0x1d0 [ 742.434629] ? blkcg_print_stat+0xb90/0xb90 [ 742.439077] ? kasan_check_read+0x11/0x20 [ 742.443226] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 742.448002] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 742.452757] ? do_syscall_64+0x26/0x610 [ 742.456770] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 742.462429] ? do_syscall_64+0x26/0x610 [ 742.469893] __x64_sys_clone+0xbf/0x150 [ 742.475267] do_syscall_64+0x103/0x610 [ 742.479342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 742.485595] RIP: 0033:0x45b5f9 [ 742.488806] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 742.507887] RSP: 002b:00007fffee5670b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 19:50:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa00300, 0x400100]}, 0x3c) 19:50:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) clone(0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeed) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kexec_load(0x2, 0x1, &(0x7f0000000080)=[{&(0x7f00000001c0)="9a804a6f7870148d745fff2b6ac56a09e0ec8b10305cd7e1882ff66623ce20475ae498dfff095bd71a00c6e06c847b0c97bac72b6f859ec4b68d23b3b88bdaffffb937cad2f1b0fe85a708a49cf3c1ae3e9987ca1ceb4a44469200d069c36dd46dc20936f5cb1aa88b88428ff7e3a108f9ae4d2ee83f863e3ea6454ae29570a2132a41f09146d42fc861d8a870bd02c05769fc0676db37cb0aa74daa83c649039e6a604d3757407606b46a8e910df320fb3c37fb5d31f376e92bfe6a9d9c066f7e1361ee8c77b53f69cbee66edc6294e91e75aeec9bd1cd638ba7d32879a53ebb2b7054a90698e02bd32b1fbc0da28b98cf4a27f39df96c161afa5514a666e88bd63db86ecc6162bbe86402103627b65efeea1ee2ba82a206997ea7430c681c338b8b91cdaeef72170f9f6f45b0a51eb3bd6d2a293ec11dd1d3296d598ad8bba5472c7a4f48e0ef07886ba0ce66b2a879c91ae992a77c255c5dde5d8dbfe9daf3ccba7db1836cd18851216d9d0f74c8d9e22369fbe2d82014987eae698331ab8b05d20d677b2a0b1bdb7cfe18fb11ca0bb3d0b795bc4b210e0ad5da1dfc87526344e975291ac066c5274e151146e445a603b6c0ab496139f54f53bedd0d8a975f426d918a6e40ef6d4fe2774c65b92d8bb59b4591dc91ba63126d54b68daa6e79ccddca7eae550d4c361f9f8a3bc6456ac20c253702a400cfb83bb1a1cf5b588082134d79dba3eafb53171f6a582e163248c8441356f9c410bb121a50a099bfc70032244b5d62b6d6688cc74d3e2c651c7054cbf21f9c3fc1dbce443642fc360a0792174def23b7ebcdb463df6f71eb7cf8bb450b6ed6ba3414e861121fa03c508e70027093e0436b4c4094f9d45087e9cc7dbd737f01855487b7839a7f03fa771360236a819059d011067566a1340b27378898f5b1676563fe16a886c69b01c59f308dd6a0bc237b7e851fa95a076b3bfbb19b43ddcf04cff53454a158242b11c6a7262d6ce3f9f28968533d072e1a2244255c2572d234c9c1a48090a36fea502fc49469ff2f9e30809cf46096b9bfd5099d3528222b05a7b100c7cbfecc003c00c6dfaabb0a047c065124d281015b1c53f1c9108913027dab49b0e92acf15f77857a11b9eaaf060cfa170f6c33582de3caf2ec01d2ad6328e4bb530f26ce7909cc50dc28b0fc812ecfb8a51d8de9505542f85b5375b39d2d622d90a36580db1bab11a117cd182a29826f8a739c5ff2b3a9d62bcf335f6ece9e383a161e09413655e4b5c62f11884f3e6fd443f9dc7a7d44d99522baf622cf98e60004f5cd94243a1d7e1e6a07efddfaed51f397f14dae088c32552c6088159dc02df8324fb27f669631eb0af5765e152c1642620fe0d45309318f58d08826127c1d67ea2a91004418cd74f7dfe0046cfbd8ba26d7b9e30d75a40b5203da9166aaae0e7e91cf4ce8eb65ff898e03cf5d6221ea0346203f2d172290be50f53dfc53e226d1860ad89e57c376178705250128616a2584acb82bdf98dad591e02ce24580e9121af5fac071dcd151a670c522dc5e10737c7a99cb20c00768bcf704eae9d59ad315f1718a1a9615922469cf9e58d31284c9a4679fec4711b40e24db4b2879940f99cff5d6ed8b02faa1c5f69b130c1ddd70d047821406af8a2b2f453382d404075a7df49fb8b8875e38b3fe15d6ddf722ad9d1fd98bd46b890d483d640b0e4cf75cfa34af2f96705963154d1fed5e7201b1eb7a5a3ecd22035f3ef1d74ed30781098117d689b24a94f6d1998d69e731a79c9e0a8ad473e3eb4e1ec26ef467416b4330acebebe0afcd8abbc3e260404e8532518a659d2842efd58d5614a777a32db4638ab18fedf0cf5d788cc23023540774aa4c2d61aff0996423206e0a339868cb87a902727f8bd4b899e9fc284eeb85106b8ecd12f4fe81ac2281d19e9c4bd0773c8707c5cb70a8af7d5d173812e5af84da318e1c222746b9fe1e6aadea8003e44029e2b0a632c0ba1b1ef35a94acec3c7c9ae8c2ef5eaf5ecaaab2ef2232eb57799c975f3db6ab0b5afefdd89f61ed57afc0edfa0c2d3bfc66152ca57a4277fdc848317ba2a184b336cbacef7fababe910a30bdafec9d0c831b4855a037d7b43e7415e1005fc338caf7d61ac92cce3fc87c5f16bac6c40b7c56a7f8d6dddfe3cc1d82708f3deeada2c19afc0e8fe33b8f139391e400c1056a058840f59729e37b1b820978832376534a2822ae9dab20d88b794e21f46c058838b09e0970e7f9975ef64fad6a7d07a688f1b46c5596f21ae951fa67dd18eae4a0094aa36cd7d545c537932117d8d847b7fe3f2899f92f1b66a9f2a5689c19dec79b0f95ee36bb95d798952923aaf4cdfff47cc171005b09d6b097b8b7bc3a1e7fd637344a7c7e1363d0cc49440052023ec8610ff96ae66f045bc5766a673a31045e8d2737277dfc939da830f9e51a4cb056dffb8fe0b1b656735788c57b0a88f82f426838f447bdfe69197ddf86b96bfccc79177e1ed4b8a6a5664bf8f2862d2e3ff35b09a2660f0267da9f30ba5f4b5da405c85908b9c5b9b64fb747ceb33189125be0cdf5b2deda068cf8f9a6f26a3bf45e2825a238ab20cf6eeb98c9275570cf156326be333255e40462db33c92f110f4f0113eab1da3ffc4d8dec2f6ee3cd7848388309da0ce9a80ff564a5c49712c60d4f9bcffcedfc2f0a17401531adb90275b95b654f67b68f98d1a25e63a29afa9d34e655816058adb39432c9ed36c4e0a7a657fdb8c5a9fdd88065f345d8be326b25fc9b7326f044f00c315ec27a1f58b225bcf0debeef80a88c80e55f000277dfab822f751105855fcaa56584fc235b2587fbce34b454818dcaa4d11ccc682dc88d270cbc115c7a980f58d57354071bbe9c4623867e821c9931b6b9a8361cfbc9f979df1d620dd2089d62e070c09e180ba9ffc8e53e58d16079df83022fec580a46ab8c86bd1f87b67995f62a1da2919495ffd9e0bcb101cfbebec1942f3b8b8842215676bf916caecb36e6b02fc719e62ce107a6df6ca08b7b6c89c2207ec976c82bce98fd907b9c10c66a0fca1f53cb94797f3b186ff5979d4ac6788bd5dbb113548c4dcad104b19d3db7e6ac5329041e2cefecd066a85b1e013a606628895d0d4d4a18a2179465a59950e7e5d1f8d5c7fdc1e1486e937617e509a68a784e714c2eec0c3558d22611189ac426ab121dbdd24dc54cb9aaae8375aa2384f0a02c968856c81b74ec3a3576eeef8c929f521309a5202fe218c3dc1faad7a21c681ba7f72c929aca47830398e0faac849a22f120e7cbb10fb60302828d3d21177e138b9aa18f4bb1a06a25e4ea0bfa4f3eb0433af33a752628f596004f5216ea2bb902a4d4928762175dc8a134feb25f2ee681e4976579176c0bdf7596220dc3dce23f359acd6085bc67c34a2fbb5b32caaa34bdee9d63042d7485c7c8d44bce7d8bf146b21a6be7dee12056722bf94aeb4ed7c197cea3bed5678cc106e707bba23a1808deba2cdca436373d601e3dde70b1e0171757024a2799ca5b6de80abbdf486197fabfdd6768aac63d26b76f8cee07dcb16e43c2c4f1a3d87f8c3d6f213857040363ae1dfa6d3ed14d52d0e865a8467494311c62095d7ca038ccc79dbefdb54eae7ccc2074e224f53ad224e6fade9dd8a8d5eb721b72c413f8f7f10d145435a5109608d1366f80b8680789608c3cf61f59df65e3cd3f6b0f06f1a6642807bbd74ff70496ffbe284e6b73a35932a8c7ff362b4314a40b590482496b1bae1918505101f9735b10097ecfe656c025df76d2081ad91641e62647564c4fa7a34d1155b1349bacfaca970a8be1d686dd53037bcb277edb6db78d9ff1ea915784c33d603e384750106da0ae738126be2191cf2b2fafae26dd582fa2c10f909cf75538edaea004e78dd64850346b28076e8773c1e0c3132fd2ff05f58cb5a28d4b3e015c690f3914c7768ee19056289098254673e3f03404c6557b300badc8f961c2a583ceace334067f0305f110b2999694c5b3109fc52ab3eb0a0a0ee16c9d357c1accb4b50b34544183ecaebd2e9c1f320217f2d5e2b27be4e2f6529b8c7a00a8d38e6611eaead00774e1fde68e49037a2ab58c7026f6bfb39a47f93315cfc14e50cf2bd8b61d6c370ef1f57cf5ffa5d10a49382cb309295e129bfc0d176e3e496b118397568ac6ac1c1b2152468ed653805c48fbb9c1c5f0509759ee08c0a28665a8405dbed0e2bb703ec4e09cf0766b45120793b15ecc1c3d2634958efa8b03d104b5ed1023d3352b69c28c5ac367a199e6cc4c131904f26c001908a6e684ea78ba740b3efafeb41f5c67b8aeed788a15c2f427a2f7ea3f035fe8876dd432c24d4f52ae2d00b90c8cb8a029eba77a23b2bc9b15bf2d6b90395e63e92b6e78df065dadd06d2c936ea14720c640f98b3d58dc3af887d035f81a0368ec1c5fd47636157b90f3ed2fbab620592383f212472d67cf8283f4384ca7bdbeb5843d46c8c8d93248909be8d4b8d51a1e2a109e6f26f995074ac190304af7f9e67a1a43eb862aef30fdf968aa168a93757d93ab2458b4e0f98b23ca31bb131cd7c66e96923ac0535d92a98ffe4ebc0afd474b696a75abc3937252ec4bcff288300c4b099ecba61401170c7ed58b0d1c8b65b4da01e5d91f9f03521a098c71b612240e1078f75b2b67e91dd39bfcf7f1ff8f7449885643e1e2d69ca28c441137090023b0a5ea440b3b87b3559aed76d11f358f6601fd6cff00c4fa68d8bf5db830b6d2fca301516caffd3d03a3f07dc99be089f5eca0e720b0f0401b99643dfcd3438c378c89b1db740d5f46b4e9ba59817ca4752aea1a15bfa5ca329aeac1de222cf5c4c7caec14a2b69a634b52a8de615f1ad21c7be968f7735476f2eec7b686bb5f9cb93bdbbea03b9f13241ce9b51882994c55f378f0c1f379ee4b9069162fff7e4c7eb2ced6cbd45b2b4f23a8f99b10c9e8b157b7407a54426d1a3637ff20bd1889ba29918489a0de89eb3db57f7e2fa21c13d803d2d70a306a9161870a23f993fe351379706629ca0e2614bdd40c910a5190d53046d529bf0e242356d60ab0320aaf30a6a190c3c95812cb18f1d3f9869f05c7f1e7cc9a43df92b1121c6009c0934706b34a1f34a83f844271da13042e749689dd9d8fb9022f7fa40976707265647ea714e25fbbfef43af5cbe6abc0cc064d5f8de98e6bf78e4a04d231c765af76c27a4cb832c06ec6cf439aebb9c9971977846601c3c0223a9c99c681f9dfd7f9d87a29b9d62416c3284a1f8e0770368ce58566d4367061973d2785c5c178670f727b7f19f4af1324a47bf99c9a2211c569e672416ab01c97d30cd26e8dd85782b18a9a0fe1063d2715ef505619314b77a0a3be98cf4b310ec4e3279bf988738da23ec734d0d062ea711c04fc77b794c856fa0462fb89f3fbb93921859a6b37ac9c51288dd98ea9bd4ce03e441d46199c705af43a13e3a005181543590e1f03255abbebf2fed919195a9fcdad7214e3d2792016425d714ea1bc05f8940e1114976be1b53586ad8c9e2c67960905f4bbfdcab28907c8fc5e7b484c3cc4f6df7171f0816ac96141c1826bc0e5e16746dba1642f794d8d3d2947861d0bcba29cc63a2ad8f1160ef0d3c62b1a63527273c5c49abfaaeaaa163fb0276636e2d193a7c316a760dad185b72680e771173275ed81f99c912ecfbee1be1f665a1bc98fe6e99055fb1508052357fa7bdb33cd98aa740e9af39183358d3015eda5d70168ce04b38c526ed46e6e552bbea8402e92c4d9811b3f89384abeb", 0x1000, 0x8, 0x58c5}], 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r4 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x671, 0x2000) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x8, @empty, 0x6ffc}, @in6={0xa, 0x4e24, 0x3, @remote}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x48) setsockopt$packet_fanout_data(r5, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 19:50:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb40000, 0x400100]}, 0x3c) 19:50:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) getgid() syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x287, 0x4400) [ 742.515598] RAX: ffffffffffffffda RBX: 00007f28ef792700 RCX: 000000000045b5f9 [ 742.525385] RDX: 00007f28ef7929d0 RSI: 00007f28ef791db0 RDI: 00000000003d0f00 [ 742.532737] RBP: 00007fffee5672c0 R08: 00007f28ef792700 R09: 00007f28ef792700 [ 742.540008] R10: 00007f28ef7929d0 R11: 0000000000000202 R12: 0000000000000000 [ 742.547548] R13: 00007fffee56716f R14: 00007f28ef7929c0 R15: 000000000073bfac 19:50:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x89c280e864000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x1000, "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"}, &(0x7f0000001080)=0x1008) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000001100)) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000010c0)={r2, 0x2}, 0x8) [ 742.692166] Task in /syz4 killed as a result of limit of /syz4 [ 742.698343] memory: usage 307176kB, limit 307200kB, failcnt 3210 [ 742.725095] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 742.764633] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 742.798576] Memory cgroup stats for /syz4: cache:36KB rss:250120KB rss_huge:223232KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:250172KB inactive_file:0KB active_file:4KB unevictable:0KB [ 742.848733] Memory cgroup out of memory: Kill process 23050 (syz-executor.4) score 1117 or sacrifice child [ 742.872884] Killed process 23050 (syz-executor.4) total-vm:72584kB, anon-rss:4184kB, file-rss:34880kB, shmem-rss:0kB 19:50:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb40100, 0x400100]}, 0x3c) 19:50:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x5042576e64, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x0) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8a1e6de864000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 742.896876] oom_reaper: reaped process 23050 (syz-executor.4), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB 19:50:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x6, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000140)={0x401, 0x52, 0x1}) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x101, 0x3, 0x0, 0x7, 0x80000001, 0x8}, 0x20) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000080)) tee(r2, r0, 0x800, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 742.975779] audit: type=1400 audit(1555789839.577:321): avc: denied { map } for pid=23330 comm="syz-executor.1" path="socket:[139661]" dev="sockfs" ino=139661 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=socket permissive=1 19:50:39 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x98840, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000180)=""/2, 0xfffffffffffffdfa}, &(0x7f00000000c0), 0x14}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 19:50:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x50425be7ab, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb40200, 0x400100]}, 0x3c) 19:50:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) sendto(r1, &(0x7f00000000c0)="059e17e2300e8934ff6dc63f727a2704271feb2d9242e2cd980c8b51c2aa8b164fdfd136a38345550b802cc2c73f589c8e0d326cc33d18c5ca0339243935478af9d4339dd8a295cd60538ac7d6c69db838c281638959248d7b8f2a825b05cd6a5dfba2e20c47ac9cc426967607ba4733ae05c225e2177763ffdcf9b26f41eabdbdeb57e015237a5cee83808b820406c98f642bcabf1220d5424e8ad65289950b7038d902812ea99c051527b450bcf486f361ab856502a7dd7ffc", 0xba, 0x40081, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @broadcast}, 0x4, 0x3}}, 0x80) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x6}, 0x28, 0x3) get_thread_area(&(0x7f0000000200)={0xffffffffffffffff, 0x100000, 0x0, 0x1, 0x1, 0xe39, 0x3a7, 0x5, 0x4, 0x1}) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000240)='trusted.overlay.nlink\x00', 0x16) 19:50:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x210002, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080)={0x6, 0x1, 0x6f, 0x401, 0x8b, 0x8a49}) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) [ 743.381217] protocol 88fb is buggy, dev hsr_slave_0 [ 743.386388] protocol 88fb is buggy, dev hsr_slave_1 [ 743.391745] protocol 88fb is buggy, dev hsr_slave_0 [ 743.396816] protocol 88fb is buggy, dev hsr_slave_1 19:50:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x1f, 0x9, 0x7f, 0x0, 0x10, 0x4}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x142ae66c75d272e8, 0x0}) msgget(0x2, 0x30) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) 19:50:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb40300, 0x400100]}, 0x3c) [ 743.491584] binder: BINDER_SET_CONTEXT_MGR already set [ 743.507231] binder: 23333:23582 ioctl 40046207 0 returned -16 19:50:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x50425f279f, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80c0, 0x0) write$UHID_INPUT2(r1, &(0x7f00000001c0)={0xc, 0xf6, "4605cb50f06952a022908f2f890ffc76ad6e2d46fc622ab880d7b876c9689ca4c2fc1b2c92325e568006cce7bf4012b5f6adf0a4332ce59c709c0e718b3729bf52fe4788d4e892dfd2e5baf4cbb003d96c890d5a2f6f4b76af6e52462c6d2b843b2251f9a769d5de231186b8fd21134808f488340df7583d20118660bbe0d7604a0abaac4276f1c66bfc8f05aca65137048d96a2d3289130eeff54a201bb1183d40ff0b0c5aeaf5321e966c8672fdb8b6dfa6179bd3e62ee4f319f99ed98490406c3df75bb3e5026f40a3cbe9041b258e593f61f5a0673fd6b8364f68ff693adc515e5160fcd9e37f1d37712ce126ca98210ed5bef89"}, 0xfc) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 19:50:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x8c33000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:40 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xe00, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x7fffffff, 0x10000) ppoll(&(0x7f0000000080)=[{r0, 0x8001}], 0x1, &(0x7f0000000100)={r1, r2+10000000}, &(0x7f0000000140)={0xf8}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup2(r3, r3) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x200, 0x0, 0x1, 0x2, 0x0, 0xa342, 0x80000000, 0xefe6, 0x10000, 0x8, 0x4, 0x0, 0x4, 0x5, 0x1a, 0x23}}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc00100, 0x400100]}, 0x3c) 19:50:40 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r2, 0x3c, 0x0, @ib={0x1b, 0x2400000000, 0x7fffffff, {"404e386d1209c598cefc4b197427caf0"}, 0x5, 0xfffffffffffffff7, 0x9}}}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x8, &(0x7f00000000c0)={0xffffffda, 0x0}, 0xffffffffffffff00) 19:50:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x50426a58aa, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 743.683230] binder_release_work: 12 callbacks suppressed [ 743.683238] binder: undelivered TRANSACTION_ERROR: 29201 [ 743.716231] binder: BINDER_SET_CONTEXT_MGR already set 19:50:40 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x40000, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) write$FUSE_STATFS(r0, &(0x7f0000000240)={0x60, 0x0, 0x3, {{0x3ff, 0x9, 0x851e, 0x7, 0x4, 0x56160d86, 0x4, 0x3}}}, 0x60) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x335, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000002c0)={0xa, 0x0, 0x80, 0x3, 'syz1\x00', 0x3}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x408, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) [ 743.778003] binder: undelivered TRANSACTION_ERROR: 29189 [ 743.783697] binder: 23604:23606 ioctl 40046207 0 returned -16 19:50:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f000050c000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r2 = socket$inet6(0xa, 0x1, 0xfffffffffffffff7) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 19:50:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x402, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000300)=""/241, &(0x7f0000000400)=0xf1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x25}}}, 0x7, 0x2, 0x2, 0xfffffffffffff800, 0x80}, &(0x7f00000001c0)=0x98) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f00000000c0)='veth0\x00'}) sendmsg$inet_sctp(r3, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0x5, 0x8001, 0x1f, 0x8000}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x6, 0x205, 0x1, 0x1ff, 0x100000000, 0x3b0, 0x9, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x10000}}], 0x80, 0x4000}, 0x400c001) r5 = dup2(r3, r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc00200, 0x400100]}, 0x3c) 19:50:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x50428169a5, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 744.052757] binder: undelivered TRANSACTION_ERROR: 29201 [ 744.063894] Unknown ioctl 19584 [ 744.073665] binder: BINDER_SET_CONTEXT_MGR already set 19:50:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) accept4$unix(r2, &(0x7f0000000100)=@abs, &(0x7f00000001c0)=0x6e, 0x800) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) sync_file_range(r0, 0x1866, 0x9, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)=0x7f) 19:50:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x54) [ 744.104658] binder: undelivered TRANSACTION_ERROR: 29189 [ 744.129562] binder: 23739:23740 ioctl 40046207 0 returned -16 19:50:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x504302ee35, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc00300, 0x400100]}, 0x3c) 19:50:40 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0xa79631285af909d3, 0x0}) 19:50:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000000)={0xdd, &(0x7f00000001c0)="92bbf9bfe43e82aea8b6f712601b1e3957201d81db2a1a08a43793c9625c2ad70876377e9a337c216bfe31c1e84b7ece49e51035883e9cf7f7247c52e55ce60a0390ec21ec2ac8e09c21017d6ee868962af9a4c4a4e3f46e7ea9b0e47272cd75accf201792dd404baa44f8a9ecc6d36c2dbac55e0fa755acb0ece1b5476a269b91e2cc57e2c1d359955fabb2679947908cf3049114be9b3c47e8263a089eb3e22bd8229028e18d4d9410400dabae0f77aa69857711f535cc6707f814921a945fb871c6039256f2a00de12cca010b88eddb9664139df3ebf2e59569ffec"}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000005, 0x1013, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 744.350761] binder: undelivered TRANSACTION_ERROR: 29201 [ 744.385827] binder: undelivered TRANSACTION_ERROR: 29201 19:50:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x983a000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x5043065106, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:41 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000140)={0x3bb223f, 0x0}) 19:50:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd40000, 0x400100]}, 0x3c) [ 744.581220] protocol 88fb is buggy, dev hsr_slave_0 [ 744.586347] protocol 88fb is buggy, dev hsr_slave_1 [ 744.591554] protocol 88fb is buggy, dev hsr_slave_0 [ 744.596639] protocol 88fb is buggy, dev hsr_slave_1 19:50:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000100)={{0x9, 0x0, 0x4, 0xa000000, 0x6, 0x2}, 0xea}) [ 744.642425] binder: undelivered TRANSACTION_ERROR: 29201 [ 744.663848] binder: undelivered TRANSACTION_ERROR: 29201 19:50:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:41 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x400}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0x87, "059f262b2937dde003ad85497a9eeaa0d561dfc2f18b2e4bb18e2c6d64d0888a9cabcdf6f0fa8e1f88e546072f9e0fbe4ff3985d55936acb4c93fb40edb0e6ba70569bacb057bc9dfbcad3287152aff126f1947880791ac36b341afe0ce6fac295bbd3c03f175117daf75768b8d1bb6d2759c61b7cb8d0c47d0505e54313f45d032549a2bd29d7"}, &(0x7f0000000280)=0x8f) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x504324975f, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @remote}, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6}, 0x10) io_setup(0x3, &(0x7f0000000000)) 19:50:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd40100, 0x400100]}, 0x3c) 19:50:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x9c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:41 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 744.911864] binder: BINDER_SET_CONTEXT_MGR already set [ 744.946189] binder: undelivered TRANSACTION_ERROR: 29201 [ 744.965760] binder: 24092:24099 ioctl 40046207 0 returned -16 [ 744.979230] binder: undelivered TRANSACTION_ERROR: 29189 19:50:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:41 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x101400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000080)={{0x4, 0x6}, 'port0\x00', 0xc, 0x8, 0x5, 0x6, 0x101, 0x7, 0x4, 0x0, 0x2, 0xfffffffffffffff9}) r2 = dup2(r0, r0) fdatasync(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f0000000200)={0x344, 0x0}, 0xffffffffffffff6d) 19:50:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd40200, 0x400100]}, 0x3c) [ 745.191859] binder_transaction: 9 callbacks suppressed [ 745.198707] binder: 24191:24211 got transaction with invalid offsets size, 3 19:50:41 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) pread64(r0, &(0x7f0000000040)=""/228, 0xe4, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa001000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:41 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xa00, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0x3, 0x7, 0x10000, 0x7, 'syz0\x00', 0x6}, 0x6, 0x8, 0x3, r2, 0x5, 0x4, 'syz1\x00', &(0x7f0000000140)=['lo\x00', 'cpu.stat\x00', '\x00', 'em0nodev\\/\'mime_typeppp1!\x00', 'lo\x00'], 0x2a, [], [0x86e, 0x101, 0x8000, 0xffff]}) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000004, 0x32, r0, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000040)) [ 745.250556] binder_transaction: 13 callbacks suppressed [ 745.250574] binder: 24191:24211 transaction failed 29201/-22, size 0-3 line 3005 19:50:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x9000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd40300, 0x400100]}, 0x3c) 19:50:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x30040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0xc00, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x9}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f00000002c0)={0xfffffffffffffe8d, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0x8001, 0x4, 0x10000, 0x5}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0406c070ff00f71a4ff200000000000000000000db8d9262986ba971a66b3bbd351f072c3aaac922b499f5107a56057d1122cff68a73d1b363b504aa836346aa079d0f3a25c9fe10befe9ab20720dc45db0b4dbbeec5dfd9a663508314502454ec6c4a225846c3069d5f0700000099bb6d2514c3097c5daee6ce09fdf9f016423a2c458e7d8ca0d0ad97f3e28189513429070d36047eb20751"], 0x14, 0x2) 19:50:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) memfd_create(&(0x7f0000000000)='/dev/sequencer2\x00', 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) fcntl$setstatus(r1, 0x4, 0x2c00) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x610802, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000002c0), 0x4) [ 745.399429] binder: BINDER_SET_CONTEXT_MGR already set [ 745.427805] binder: 24191:24281 got transaction with invalid offsets size, 3 19:50:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x64000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 745.489688] binder: 24191:24279 ioctl 40046207 0 returned -16 [ 745.528568] binder: 24191:24281 transaction failed 29201/-22, size 0-3 line 3005 19:50:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe00100, 0x400100]}, 0x3c) 19:50:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa4a461de00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:42 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) 19:50:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) 19:50:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x200) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfffffffffffffffb) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x84000) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000a59000/0x3000)=nil, 0x3000, 0x1000003, 0x41013, r0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) getsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000100)=0x5, 0x4) 19:50:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe00200, 0x400100]}, 0x3c) [ 745.858602] binder: 24422:24438 got transaction with invalid offsets size, 3 19:50:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 745.904298] binder: 24422:24438 transaction failed 29201/-22, size 0-3 line 3005 [ 745.968924] binder: BINDER_SET_CONTEXT_MGR already set [ 746.007859] binder: 24422:24539 transaction failed 29189/-22, size 0-3 line 2855 19:50:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe00300, 0x400100]}, 0x3c) [ 746.060428] binder: 24422:24438 ioctl 40046207 0 returned -16 19:50:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000380), &(0x7f00000003c0)=0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000340)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000480), 0x4) 19:50:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:42 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x20082) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0xaf, 0x3}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 19:50:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xa801000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:42 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) pipe(&(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 746.270912] binder: 24667:24669 got transaction with invalid offsets size, 3 19:50:42 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf40000, 0x400100]}, 0x3c) 19:50:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000001c0)={0xe, 0x0, 0xb28, 0xe725, 0x83, "0503387a33eae08ba8ae4a96d644afb4c36843a1674d7d145bd7eafa9cd341289ead0b1c9fa97c34c29f2171673830ee425e448cf4379f35f9eef0981e259d600ba6a1dd6dbad594779be6e662a08b7c651c5ffd4b98c0f3f5d9273896aad819c99dd9548c4a9676bcfff4ba08c4eaad5f95ac84e571b32a7cf73ea8fcd1e573b5399f"}, 0x8f) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, r1, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x44, r3, 0x500, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7f}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x40}]}, 0x44}}, 0x4000000) 19:50:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x207, &(0x7f0000000140)={&(0x7f0000000080)=""/148, 0x94}) r2 = dup2(r0, r0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/relabel\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 746.345233] binder: 24667:24669 transaction failed 29201/-22, size 0-3 line 3005 [ 746.378819] binder: BINDER_SET_CONTEXT_MGR already set [ 746.431795] binder: 24667:24683 got transaction with invalid offsets size, 3 [ 746.439288] binder: 24667:24681 ioctl 40046207 0 returned -16 19:50:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:43 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x80, 0x80800) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000080)={0x1dd, 0x0}) [ 746.490522] binder: 24667:24683 transaction failed 29201/-22, size 0-3 line 3005 19:50:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xb010000f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) 19:50:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf40100, 0x400100]}, 0x3c) 19:50:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r1}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x800) [ 746.682957] binder: 24810:24811 got transaction with invalid offsets size, 3 [ 746.743863] binder: 24810:24811 transaction failed 29201/-22, size 0-3 line 3005 19:50:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 746.797181] binder: 24810:24903 got transaction with invalid offsets size, 3 [ 746.806228] binder: 24810:24903 transaction failed 29201/-22, size 0-3 line 3005 19:50:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xb010001200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r2}) 19:50:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) recvfrom$rxrpc(r1, &(0x7f00000001c0)=""/4096, 0x1000, 0x1, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x24) r2 = socket$packet(0x11, 0x400002, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) lookup_dcookie(0x5, &(0x7f0000000100)=""/109, 0x6d) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) 19:50:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf40200, 0x400100]}, 0x3c) 19:50:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x401000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x7, 0x2) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1000000, 0x400100]}, 0x3c) 19:50:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="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") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 747.128812] binder: 24952:24953 got transaction with invalid data ptr 19:50:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:43 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xb010001300000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 747.187274] binder: 24952:24953 transaction failed 29201/-14, size 2-3 line 2988 19:50:43 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 747.255344] binder: 24952:25069 got transaction with invalid data ptr 19:50:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x2000000, 0x400100]}, 0x3c) [ 747.330626] binder: 24952:25069 transaction failed 29201/-14, size 2-3 line 2988 19:50:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) 19:50:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x651064350000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 19:50:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xb400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) times(&(0x7f0000000040)) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x40000, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000100)=0x1f) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x400041, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1f) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 747.576690] binder: 25198:25200 got transaction with invalid data ptr 19:50:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x3000000, 0x400100]}, 0x3c) 19:50:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 747.647946] binder: 25198:25207 got transaction with invalid data ptr 19:50:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x4000000, 0x400100]}, 0x3c) 19:50:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xb40f84e864000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0xffff, 0x100}, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="44010000400000082bbd7000ffdbdf250400140030011300fa3977eec5d1e3f32d17bf4a2d81624103b5d770291a5b6b3231da94cb7d3fde7a20277b77dfb29b538e21d7745266ffd558066f20dd37dba832b70e4c64566c5183465db2f927d1bc68e595051adf334c9bed8206346baf9eedfae878391a9bb033f6f9e92108b253ccadee695182c8466d70fd65db4a5dd3627ba74cb241718255fb76b894bb0caa424c8c136a1e1e68d2ee24440bce9bbfb3a70ea4ce2b3ce4616966c6e001804dc4128e2ec94a6acdd688f3003734d1223b0932894243fedf88623ca6a500ae174036651ff280ba575bf0c6c974a832f088ce7baca5f56292265d4d31a7f15551b4ed5d0d6dc35791691f37588dc33b427a479e2e25cd558d4aee67f0c49db5261a62759d07d4aa538a268d58fef30c005b00000400000000000008008e00ac1414aa00"], 0x144}], 0x1, &(0x7f0000000480)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x20, 0x4008044}, 0x4008000) 19:50:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x100000890e, &(0x7f00000012c0)="42123a0214924c3a8f1a7e9115d46c8e8ca7419cf094f443d458034bf04104c33544060bf3fe7f2db471540642c07de7057ef25772e0da8904d8b5b794bf483ea38e78a35e7be1ccf5197c5ea2ff4d9484568b53951e965007291fdc62f42cf7a8fc2527187f49dfaeb52af6e6fbdecff29b61bcf6f938d96fc311f8897ddc75fcfbf9b40f516008823a06ac73af6509d212e4fd4fe4") r1 = socket$packet(0x11, 0x3, 0x300) r2 = accept4(r1, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001200)={r1, r0, 0x6, 0x0, &(0x7f0000000100), 0x3ff, 0x1ff, 0x800, 0xc0bc, 0x4845, 0x2, 0x80, 'syz0\x00'}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000001c0)={0x3, 0x1000, "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"}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x8, &(0x7f00000000c0)={0x0, 0x0}, 0x10) [ 747.941041] binder: 25333:25337 got transaction with invalid data ptr 19:50:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 747.998918] binder: BINDER_SET_CONTEXT_MGR already set 19:50:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ftruncate(r0, 0xfff) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0}) [ 748.023518] binder: 25333:25351 got transaction with invalid data ptr [ 748.043652] binder: 25333:25350 ioctl 40046207 0 returned -16 19:50:44 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x5000000, 0x400100]}, 0x3c) 19:50:44 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x7d, 0x2, 0xe7, 0x6000000000000000, 0x7fffffff, "0f50a46a86894de605d765e55f3863abdf56a5", 0x7fffffff, 0x5}) write$P9_RSTAT(r0, &(0x7f0000000080)={0x61, 0x7d, 0x1, {0x0, 0x5a, 0x80, 0x2, {0x0, 0x3, 0x5}, 0x20000000, 0x2, 0x80000001, 0x1, 0x9, 'cgroupv[]', 0x1c, 'eth0-systemmime_type)vmnet0)', 0x2, '}-'}}, 0x61) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000100)={0x6, 0x3, 0x6, 0x8, 0x9, 0xff, 0x5}) 19:50:44 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xc2ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x802000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 748.247445] binder: 25477:25479 got transaction with invalid data ptr 19:50:44 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/176) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000100)={0x3, 0x2, 'client1\x00', 0xffffffff80000000, "1f922123fe502f99", "bc0a751537f8a38acf91c31d7f6a8e648bf7f11cc8facf3c014d1d7a1b450ded", 0x1, 0x10000}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000005c0)) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000280)=""/234) r2 = dup2(r0, r0) r3 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x11, 0x80800) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000200)=[0x2], 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\a\x00', @ANYRES16=r4, @ANYBLOB="04022bbd7000fedbdf25020000000800060004000000580002000800080004000000080003000100000008000b000000000008000400000000000800f9ff4d23000014000100e0000002000000000000001d000000000800040006000000080007000500000008000500ffff00005400030014000200697036746e6c3000000000000800040000000800010000000000080004000200000008000300030000000800080000000000140002006e72300000000000000800"/194], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000580)=0x9) [ 748.320749] binder: 25477:25489 got transaction with invalid data ptr 19:50:45 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x6000000, 0x400100]}, 0x3c) 19:50:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xc66d000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:45 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)={0x5, 0x1ae5, 0x4, 0x2, 0x4e7}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000040)={0x56, 0x5, 0x400, {0x34b7, 0x3ff}, {0x7, 0xfffffffffffffffb}, @const={0x100000001, {0x20, 0x0, 0x0, 0x800}}}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa1000040}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x178, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xeca3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x27}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xc8, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1400000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7e9a}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x35}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xadcd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x94}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x24040095}, 0x400c880) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797a30f858a936147263e408184058ebd40d03dcca87584a19e9b6b6f823372f1e9c465121369ffdd2f1d01227d407000000000000004b464dc90e6465d1cbbdc23e8dc5828e4a8fed80aec1bd7f7ba44f8e6ac50df62493bf01e8390f56b9fbb2582649955e0183971e46abe14fdc9668343ef4bd5350c3a24fce8f59c767ca87f1d79b8da67e138a4851c7217b73b39ad395f8121478a8fe7e4d31c443a7f8eeffe938ef7edda88ed5733fd64541c2acb736df70b9d42f9fe1f77f9a"], 0x44) [ 748.564123] binder: 25610:25611 got transaction with invalid data ptr 19:50:45 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 748.609599] binder: 25610:25618 got transaction with invalid data ptr 19:50:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x7000000, 0x400100]}, 0x3c) 19:50:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:45 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:45 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x80) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000080)=0x3) creat(&(0x7f00000000c0)='./file0\x00', 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 19:50:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xc800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 748.904025] binder_release_work: 18 callbacks suppressed [ 748.904032] binder: undelivered TRANSACTION_ERROR: 29201 [ 748.938404] binder: BINDER_SET_CONTEXT_MGR already set 19:50:45 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x4, 0x3e, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)=""/62}, &(0x7f0000000140)=0x78) 19:50:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x8000000, 0x400100]}, 0x3c) [ 748.998451] binder: undelivered TRANSACTION_ERROR: 29189 [ 749.004625] binder: 25743:25744 ioctl 40046207 0 returned -16 19:50:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:45 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:45 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:45 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:45 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x9000000, 0x400100]}, 0x3c) 19:50:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xcc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 749.281067] binder: undelivered TRANSACTION_ERROR: 29201 [ 749.299935] binder: BINDER_SET_CONTEXT_MGR already set 19:50:45 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x7fff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 749.358787] binder: undelivered TRANSACTION_ERROR: 29189 [ 749.365507] binder: 25851:25883 ioctl 40046207 0 returned -16 19:50:46 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa000000, 0x400100]}, 0x3c) 19:50:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) getsockopt$packet_buf(r1, 0x107, 0x0, &(0x7f00000000c0)=""/173, &(0x7f0000000180)=0xad) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:46 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xd010001200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 749.634589] binder: undelivered TRANSACTION_ERROR: 29201 [ 749.643474] binder: BINDER_SET_CONTEXT_MGR already set 19:50:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb000000, 0x400100]}, 0x3c) [ 749.700763] binder: undelivered TRANSACTION_ERROR: 29201 [ 749.707897] binder: 25977:26023 ioctl 40046207 0 returned -16 19:50:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1400000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:46 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xd010001300000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 749.971581] binder: undelivered TRANSACTION_ERROR: 29201 [ 749.983535] binder: BINDER_SET_CONTEXT_MGR already set 19:50:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1c01000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc000000, 0x400100]}, 0x3c) [ 750.013325] binder: 26131:26157 ioctl 40046207 0 returned -16 19:50:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000040)={0x6, 0x1, 0x7, 0x4, 0x1, 0x9bd4}) 19:50:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 750.071927] binder_alloc: 26131: binder_alloc_buf, no vma [ 750.097577] binder: undelivered TRANSACTION_ERROR: 29189 19:50:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd000000, 0x400100]}, 0x3c) 19:50:46 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0xffffffff, 0x200, 0x702d82d9, 0x3, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x8557, @empty, 0x1}}, 0x7fffffff, 0xf6}, 0x90) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:46 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 750.277620] binder_transaction: 16 callbacks suppressed [ 750.277638] binder: 26220:26223 transaction failed 29201/-14, size 96-3 line 2988 19:50:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2265000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:46 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xd96689e864000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) fstat(r0, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000100)={0x0, 0x0}) [ 750.403853] binder: undelivered TRANSACTION_ERROR: 29201 [ 750.431602] binder_alloc: 26220: binder_alloc_buf, no vma [ 750.431950] binder: BINDER_SET_CONTEXT_MGR already set [ 750.437671] binder: 26220:26304 transaction failed 29189/-3, size 96-3 line 2970 19:50:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe000000, 0x400100]}, 0x3c) [ 750.511454] binder: undelivered TRANSACTION_ERROR: 29189 [ 750.517100] binder: 26220:26223 ioctl 40046207 0 returned -16 19:50:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:47 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x4}, 0x4) 19:50:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf000000, 0x400100]}, 0x3c) 19:50:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xe000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 750.743531] binder: 26429:26431 transaction failed 29201/-14, size 104-3 line 2988 19:50:47 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') dup2(r0, r0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="3819bb8a06405dbb05431a58d8e42194cc32eb2dc60f0da6bf28b6c990603143c466257dbe29d4a542c19f2e18519b3a7b7c951fe36c2571b10eeb8e5cceb966df4a8685f04ee6f277d56f044f2cf000b7c0ceb172dec38b0035c20c9b103a1c066d444f0d14ca2495bc9d5b0b14dfb1d206ce7cc8559ee8298974c1811ac65cafd1885453491c7e3dea1293d41ae88c94fdfdd65952130abfa0fe845b401427252c9589712df487", 0xa8}, {&(0x7f0000000140)="e9e796a88d427b3637220a4475c7602c5161bafd97567cef80028b36648baed6fd13ef51f9b606c546f33934a1f814cc6de0e2be59340de1d84a6b86abbedad4699e33cbd8d008032560d6c3856d40bf326369d7decfaae045", 0x59}, {&(0x7f00000001c0)="87da4b9937f31e4c264b2518c0d494ea20b6fc590829f9c4d1139105e04b7301c8b4f04a360111d8304af6831a6ca9f91534eea8868737703a718e1281e3cc95ec56379fd48376ad0cbb9fc9d50b0fc6828ebc240bd31dd7a77830ec0a29208bd7c921c6a5efae0f5d9a8c3d6e3a7a670ce61b461a8406b9", 0x78}, {&(0x7f0000000240)="3d826a5a96f2ff88466284685f73d0d7c934facad2891fd9e4db99cc590ffc0d1df6929bc28ea7b97ec6847455c495", 0x2f}, {&(0x7f0000000280)="c2404073f15e237abed57173bc0651c3e21dce9b6c5b9594ee1d47e43f38cfc1cf273df2f91adb75606a0d51c33c20e6755273b64cc68ad6669c30bbdaa22266ffd34a058b1389221dc89da687118e30ca50b9df08586c152c345429589be82a00f24e5f4ee9849b8524cadebd3c6ba6452fe81772fb825c76a9db61010dfa2764d4e60078e6b42cb721cc60860a24526782dc5fb5c51e268b2702702a843710a3e4aa7c078b81d30d461ee6267729cf1668caccc5a814fc", 0xb8}, {&(0x7f0000000340)="a3d9635db31a37c74a007fea560520f2d3c4c009fc980f1fa9ce86495e6c1f4034939a4f21ee8fcc4800eb17a3313dcf3ebe565dba83e0bd4a5e8edd340889cd11cfcbbf90d45627c3c36ac51ad6be915c31da6a0ecc8c65d6308eba2e8e9d87447a8b8219198005f824e11d16afb47af7b6c78d220aeca67bdd0caeaf9049f7a24ec0127939885c32564a4be5177bc455e86f2b9493f35a245ae5fc71b9c656df22be48b03a0fc5813f35a9cdcf29cbaba6", 0xb2}], 0x6, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000500)={0xf1, 0x0}) [ 750.799819] binder: 26429:26439 transaction failed 29201/-14, size 104-3 line 2988 19:50:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3075000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x10000000, 0x400100]}, 0x3c) 19:50:47 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xe100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 751.014531] binder: 26555:26560 transaction failed 29201/-14, size 108-3 line 2988 19:50:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x2e8, 0x0, 0x0, &(0x7f0000000400)=""/150, 0x96}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000180)=0x3) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) getgroups(0x4, &(0x7f0000000100)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r1, r3, r4) r5 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 751.079151] binder: BINDER_SET_CONTEXT_MGR already set 19:50:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3400000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 751.149139] binder: 26555:26564 ioctl 40046207 0 returned -16 19:50:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:47 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r2, 0x202, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 19:50:47 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:47 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x11000000, 0x400100]}, 0x3c) 19:50:47 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x35ee024350000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 751.389716] binder: 26654:26674 transaction failed 29201/-14, size 116-3 line 2988 19:50:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xe48693e864000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x34, "3fd747ee9a42f982f1da1ab69c97f7984c8436fab6bf17970183ae0173cde137c47101065743d1941628f41b7f8aa604830aa99f"}, &(0x7f0000000080)=0x3c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000180)=0x84) [ 751.466523] binder: 26654:26704 transaction failed 29201/-14, size 116-3 line 2988 19:50:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, 0x0) 19:50:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x12000000, 0x400100]}, 0x3c) 19:50:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) fstatfs(r1, &(0x7f0000000040)=""/210) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3c02000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, 0x0) 19:50:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xe800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 751.770657] binder: 26760:26830 transaction failed 29201/-14, size 122-3 line 2988 19:50:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x2) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/251) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x3b8, 0x0}) 19:50:48 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, 0x0) [ 751.857180] binder: 26760:26842 transaction failed 29201/-14, size 122-3 line 2988 19:50:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x13000000, 0x400100]}, 0x3c) 19:50:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3e00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x401, 0x90100) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@bcast, @null}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x65f) 19:50:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) readv(r0, &(0x7f0000001580)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/112, 0x70}, {&(0x7f0000001180)=""/107, 0x6b}, {&(0x7f0000001200)=""/133, 0x85}, {&(0x7f00000012c0)=""/127, 0x7f}, {&(0x7f0000001340)=""/178, 0xb2}, {&(0x7f0000001400)=""/168, 0xa8}, {&(0x7f00000014c0)=""/79, 0x4f}, {&(0x7f0000001540)=""/10, 0xa}], 0xa) 19:50:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xe803000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 752.083600] binder: 26959:26960 transaction failed 29201/-14, size 768-3 line 2988 19:50:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x14000000, 0x400100]}, 0x3c) 19:50:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f0000000040)="09996349464cd9594e818f32a689edec0235f188df54e4c61eb63d1dad29d6c6f6fd2d443ae5adba5eebe183abb7739891fdb2f7c6b343d7f007d0a8617773c46c01cc914f12372cfafc6b669001e67fda831cca24717665264ea1cfb13904bb445a15de46a65a753e6cc9b8eaec49960b20f5e67826bb49f327f88429c7691073dafd75dedf0b6bf1b8263eed43f5c681f9627913b03327522ad92b6ecd9503cacaf62f57eee448cf028f3ce39557aeeb292ca4657d67b8cdab17b1e17f7e7f2814869b0e837be0350d5ae46dac56004b1dd8833a559b6b8875afdc44cff885f24e7ec5c944ea1515e7eceae35875939f991172"}, 0x10) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xfffffffffffffffc, 0xa3}, {0x80, 0x80}, {0x4, 0x100}]}) [ 752.217363] binder_transaction: 14 callbacks suppressed [ 752.217372] binder: 26959:26975 got transaction with invalid data ptr 19:50:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xf001000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000040)={'bridge_slave_1\x00', 0x3b55, 0xc37a}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000140)) 19:50:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x18000000, 0x400100]}, 0x3c) 19:50:49 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20001, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0xff, 0x1, 0x5, 0x20, [], [], [], 0x9, 0x2, 0x8, 0x20, "3d5d39a4020c5e827d107a877d145f17"}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000040)={0x0, 0x0}) 19:50:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xf401000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 752.658157] binder: 27203:27208 got transaction with invalid data ptr [ 752.703790] binder: BINDER_SET_CONTEXT_MGR already set [ 752.709140] binder: 27203:27219 ioctl 40046207 0 returned -16 [ 752.735331] binder: 27203:27220 got transaction with invalid data ptr 19:50:49 executing program 0: 19:50:49 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x4, r1}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448c9, &(0x7f0000000040)={0x0, 0x0}) 19:50:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x3f000000, 0x400100]}, 0x3c) 19:50:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4001000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xf665310100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 753.121509] binder: 27337:27338 got transaction with invalid data ptr 19:50:49 executing program 0: 19:50:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000080)={0x0, 0x0}) [ 753.167098] binder: 27337:27358 got transaction with invalid data ptr 19:50:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x40000000, 0x400100]}, 0x3c) 19:50:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:49 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xf8866ae864000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:50 executing program 0: 19:50:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r1 = signalfd4(0xffffffffffffff9c, &(0x7f0000000080)={0x80}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup2(r2, r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 753.436684] binder: 27464:27465 got transaction with invalid data ptr 19:50:50 executing program 0: 19:50:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x20000000000, 0x400100]}, 0x3c) 19:50:50 executing program 0: [ 753.584038] binder: 27464:27512 got transaction with invalid data ptr 19:50:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) write$P9_RXATTRCREATE(r1, &(0x7f00000002c0)={0x7, 0x21, 0x1}, 0x7) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000300)) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="03000000", @ANYRES16=r2, @ANYBLOB="12072bbd7000fedbdf250f000000080006000000008020000100080006007365640014000300ac1e00010000000000000000000000000800050000000000440002000800080001000000080005000200000008000900020000000800080005000000080007000010000008000b000a000000080005000300000008000800030000003c00020008000400ee02000008000b000a0000000800050009000000080006007fffffff080008000100000008000800000000800800080008000000"], 0xc4}, 0x1, 0x0, 0x0, 0x6fd02d7a0883c7de}, 0x1) creat(&(0x7f0000000340)='./file0\x00', 0x40) truncate(&(0x7f0000000080)='./file0\x00', 0x80000000) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000040)) 19:50:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xfc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:50 executing program 0: 19:50:50 executing program 1: sync() r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x204002, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1ff, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x1, 0x9}, 0x10) fcntl$getown(r1, 0x9) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x30000000000, 0x400100]}, 0x3c) 19:50:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4c1d000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 753.834106] binder: 27600:27601 got transaction with invalid data ptr 19:50:50 executing program 0: pipe(0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) set_tid_address(0x0) r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) seccomp(0x0, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x1, &(0x7f0000000100)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x200000, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @local}}) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) [ 753.909661] binder: 27600:27611 got transaction with invalid data ptr [ 753.941693] binder_release_work: 16 callbacks suppressed [ 753.941700] binder: undelivered TRANSACTION_ERROR: 29201 19:50:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000001c0)={'v\x00', 0x8}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000100)=0x3) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) r2 = dup2(r0, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:50 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x40000000000, 0x400100]}, 0x3c) 19:50:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x5000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 754.135485] binder_alloc: 27731: binder_alloc_buf size 18440 failed, no address space [ 754.211261] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:50 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0xfffffffffffffe51, 0x0}) [ 754.278743] binder: undelivered TRANSACTION_ERROR: 29201 [ 754.315212] binder_alloc: 27731: binder_alloc_buf size 18440 failed, no address space [ 754.383753] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1000000000000, 0x400100]}, 0x3c) [ 754.458959] binder: undelivered TRANSACTION_ERROR: 29201 19:50:51 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 19:50:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x5001000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:51 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x2, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffe) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x4000000000000, 0x400100]}, 0x3c) [ 754.725382] binder_alloc: 27878: binder_alloc_buf size 19464 failed, no address space [ 754.755198] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 754.765118] syz-executor.0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=2, oom_score_adj=1000 19:50:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 754.796227] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 754.816061] binder: undelivered TRANSACTION_ERROR: 29201 [ 754.818341] CPU: 0 PID: 27867 Comm: syz-executor.0 Not tainted 4.19.36 #4 [ 754.828822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.838212] Call Trace: [ 754.841020] dump_stack+0x172/0x1f0 [ 754.841043] dump_header+0x15e/0x929 [ 754.841062] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 754.848588] ? ___ratelimit+0x60/0x595 [ 754.848605] ? do_raw_spin_unlock+0x57/0x270 [ 754.848628] oom_kill_process.cold+0x10/0x6f5 [ 754.866686] ? task_will_free_mem+0x139/0x6e0 [ 754.871234] out_of_memory+0x936/0x12d0 [ 754.875242] ? lock_downgrade+0x810/0x810 [ 754.879415] ? oom_killer_disable+0x280/0x280 [ 754.883933] ? find_held_lock+0x35/0x130 [ 754.888035] mem_cgroup_out_of_memory+0x1d2/0x240 [ 754.892903] ? memcg_event_wake+0x230/0x230 [ 754.897269] ? do_raw_spin_unlock+0x57/0x270 [ 754.901817] ? _raw_spin_unlock+0x2d/0x50 [ 754.906000] try_charge+0x1028/0x15b0 [ 754.909852] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 754.914716] ? mark_held_locks+0xb1/0x100 [ 754.918881] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 754.924688] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 754.929640] ? __sk_mem_raise_allocated+0x557/0x1390 [ 754.934745] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 754.939672] ? lockdep_hardirqs_on+0x415/0x5d0 [ 754.944253] ? trace_hardirqs_on+0x67/0x230 [ 754.948574] mem_cgroup_charge_skmem+0x12f/0x280 [ 754.953432] ? mem_cgroup_sk_free+0x90/0x90 [ 754.957752] ? kasan_check_write+0x14/0x20 [ 754.961990] ? __alloc_skb+0x3d6/0x5f0 [ 754.965877] __sk_mem_raise_allocated+0x557/0x1390 [ 754.970983] __sk_mem_schedule+0x6d/0xe0 [ 754.975041] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 754.980612] tcp_sendmsg_locked+0x1a5f/0x3560 [ 754.985119] ? tcp_sendpage+0x60/0x60 [ 754.988932] ? trace_hardirqs_on+0x67/0x230 [ 754.993251] ? lock_sock_nested+0x9a/0x120 [ 754.997578] ? __local_bh_enable_ip+0x15a/0x270 [ 755.002254] tcp_sendmsg+0x30/0x50 [ 755.005816] inet_sendmsg+0x147/0x5d0 [ 755.009611] ? ipip_gro_receive+0x100/0x100 [ 755.013928] sock_sendmsg+0xdd/0x130 [ 755.017638] sock_write_iter+0x27c/0x3e0 [ 755.021697] ? sock_sendmsg+0x130/0x130 [ 755.025682] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 755.031398] ? iov_iter_init+0xc6/0x1f0 [ 755.035394] __vfs_write+0x58e/0x820 [ 755.039109] ? kernel_read+0x120/0x120 [ 755.043000] ? selinux_file_permission+0x92/0x550 [ 755.048036] ? security_file_permission+0x8f/0x230 [ 755.053073] ? rw_verify_area+0x118/0x360 [ 755.057229] vfs_write+0x20c/0x560 [ 755.060767] ksys_write+0xea/0x1f0 [ 755.064320] ? __ia32_sys_read+0xb0/0xb0 [ 755.068381] ? do_syscall_64+0x26/0x610 [ 755.072356] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 755.077713] ? do_syscall_64+0x26/0x610 [ 755.081687] __x64_sys_write+0x73/0xb0 [ 755.085679] do_syscall_64+0x103/0x610 [ 755.089627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 755.094811] RIP: 0033:0x458c29 [ 755.097997] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 755.116890] RSP: 002b:00007f43df0f8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 755.125222] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29 [ 755.132496] RDX: 00000001000001bd RSI: 0000000020002300 RDI: 0000000000000003 [ 755.140021] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 19:50:51 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:51 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88080024}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000f9eb3429199cc6d01b8c826a1483c6c8b957a1399df25f6b63c34c502e58c3d4e1c25ba9b316c13fc8c4880acb8612324daf1a41aa27186f8deee5a2222faa2066f0761af4c5eacf4702679a671b1939caecc660ef6e1914ba8d10434d02bcd0ed485787d9658d65b7b9de83e1212bb3d6859bd5bd838a392b44b5c9be6c150c82bcd9ff61b35f83603fae3526c5213f50edb94cdecdeb86e0411d0a0a74d1e1f63470877fa3512ab3e52377262b11428c9432394a1fc2a5ca5a351c3e087c316330c5d608f35ded702a28a0a21948704cd29f34dd07a25301", @ANYRES16=r2, @ANYBLOB="01072bbd7000fcdbdf2509000000140007000800010009000000080001009c000000"], 0x28}}, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000002c0)={0x4006, 0x3, 0xfffffffffffffffe, 0xffffffff}) [ 755.147287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f43df0f96d4 [ 755.154555] R13: 00000000004c8636 R14: 00000000004ded80 R15: 00000000ffffffff [ 755.163020] binder: BINDER_SET_CONTEXT_MGR already set [ 755.197191] binder_alloc: 27878: binder_alloc_buf size 19464 failed, no address space [ 755.229850] Task in /syz0 killed as a result of limit of /syz0 [ 755.232720] binder: 27878:27879 ioctl 40046207 0 returned -16 19:50:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x14000000000000, 0x400100]}, 0x3c) 19:50:51 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 755.241507] memory: usage 307192kB, limit 307200kB, failcnt 5234 [ 755.248291] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.256568] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 755.277718] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.283448] binder: undelivered TRANSACTION_ERROR: 29201 [ 755.301207] Memory cgroup stats for /syz0: cache:20KB rss:244376KB rss_huge:217088KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:244348KB inactive_file:0KB active_file:0KB unevictable:0KB 19:50:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 755.389900] Memory cgroup out of memory: Kill process 15890 (syz-executor.0) score 1113 or sacrifice child [ 755.420033] binder_alloc: 28116: binder_alloc_buf size 24584 failed, no address space [ 755.443646] Killed process 15890 (syz-executor.0) total-vm:72584kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB [ 755.475007] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 755.494308] binder_transaction: 13 callbacks suppressed [ 755.494331] binder: 28116:28117 transaction failed 29201/-28, size 24576-3 line 2970 [ 755.507705] oom_reaper: reaped process 15890 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB [ 755.509352] syz-executor.0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 755.538079] binder: undelivered TRANSACTION_ERROR: 29201 [ 755.546416] binder: BINDER_SET_CONTEXT_MGR already set [ 755.556561] binder: 28116:28122 transaction failed 29189/-22, size 24576-3 line 2855 [ 755.565786] binder: 28116:28117 ioctl 40046207 0 returned -16 [ 755.574192] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 755.580026] CPU: 1 PID: 27866 Comm: syz-executor.0 Not tainted 4.19.36 #4 [ 755.586641] binder: undelivered TRANSACTION_ERROR: 29189 [ 755.587055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.601859] Call Trace: [ 755.604459] dump_stack+0x172/0x1f0 [ 755.608103] dump_header+0x15e/0x929 [ 755.611840] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 755.616962] ? ___ratelimit+0x60/0x595 [ 755.620868] ? do_raw_spin_unlock+0x57/0x270 [ 755.625373] oom_kill_process.cold+0x10/0x6f5 [ 755.629876] ? task_will_free_mem+0x139/0x6e0 [ 755.634404] out_of_memory+0x936/0x12d0 [ 755.638410] ? oom_killer_disable+0x280/0x280 [ 755.642911] ? find_held_lock+0x35/0x130 [ 755.646986] mem_cgroup_out_of_memory+0x1d2/0x240 [ 755.651834] ? memcg_event_wake+0x230/0x230 [ 755.656257] ? do_raw_spin_unlock+0x57/0x270 [ 755.661196] ? _raw_spin_unlock+0x2d/0x50 [ 755.665468] try_charge+0xd25/0x15b0 [ 755.669215] ? find_held_lock+0x35/0x130 [ 755.673331] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 755.678182] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 755.683204] ? find_held_lock+0x35/0x130 [ 755.690725] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 755.695599] memcg_kmem_charge_memcg+0x7c/0x130 [ 755.700387] ? memcg_kmem_put_cache+0xb0/0xb0 [ 755.704915] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 755.710109] memcg_kmem_charge+0x136/0x300 [ 755.714451] __alloc_pages_nodemask+0x3c6/0x760 [ 755.719131] ? __alloc_pages_slowpath+0x2870/0x2870 [ 755.724174] ? lockdep_hardirqs_on+0x415/0x5d0 [ 755.728748] ? trace_hardirqs_on+0x67/0x230 [ 755.733083] ? kasan_check_read+0x11/0x20 [ 755.737240] copy_process.part.0+0x3e0/0x7970 [ 755.741865] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 755.746961] ? delayacct_end+0x5c/0x100 [ 755.750925] ? __delayacct_freepages_end+0xe0/0x140 [ 755.755953] ? __lock_acquire+0x6eb/0x48f0 [ 755.760389] ? __cleanup_sighand+0x70/0x70 [ 755.764650] ? mark_held_locks+0x100/0x100 [ 755.768898] _do_fork+0x257/0xfe0 [ 755.772359] ? fork_idle+0x1d0/0x1d0 [ 755.776079] ? blkcg_print_stat+0xb90/0xb90 [ 755.780405] ? kasan_check_read+0x11/0x20 [ 755.784544] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 755.789289] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 755.794065] ? do_syscall_64+0x26/0x610 [ 755.798044] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 755.803396] ? do_syscall_64+0x26/0x610 [ 755.807389] __x64_sys_clone+0xbf/0x150 [ 755.811373] do_syscall_64+0x103/0x610 [ 755.815277] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 755.820465] RIP: 0033:0x45b5f9 [ 755.823669] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 755.842566] RSP: 002b:00007ffd5ca28b58 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 755.850266] RAX: ffffffffffffffda RBX: 00007f43df0b7700 RCX: 000000000045b5f9 [ 755.857529] RDX: 00007f43df0b79d0 RSI: 00007f43df0b6db0 RDI: 00000000003d0f00 [ 755.864794] RBP: 00007ffd5ca28d60 R08: 00007f43df0b7700 R09: 00007f43df0b7700 [ 755.872215] R10: 00007f43df0b79d0 R11: 0000000000000202 R12: 0000000000000000 [ 755.879584] R13: 00007ffd5ca28c0f R14: 00007f43df0b79c0 R15: 000000000073c04c [ 755.888592] Task in /syz0 killed as a result of limit of /syz0 [ 755.894704] memory: usage 305884kB, limit 307200kB, failcnt 5244 [ 755.900872] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.907772] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 755.913995] Memory cgroup stats for /syz0: cache:20KB rss:242264KB rss_huge:215040KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4KB active_anon:242200KB inactive_file:0KB active_file:0KB unevictable:0KB [ 755.934974] Memory cgroup out of memory: Kill process 17022 (syz-executor.0) score 1113 or sacrifice child 19:50:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x6400, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000100)={0x28}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[0::]:4547:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) 19:50:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:52 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={0x0, 0x0}) 19:50:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x14010000000000, 0x400100]}, 0x3c) 19:50:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x5f97244350000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 755.944977] Killed process 17022 (syz-executor.0) total-vm:72584kB, anon-rss:2204kB, file-rss:35792kB, shmem-rss:0kB [ 755.957387] oom_reaper: reaped process 17022 (syz-executor.0), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 19:50:52 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000280)={@broadcast, @rand_addr, @empty}, &(0x7f00000002c0)=0xc) r1 = gettid() write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x1, {{0x1000, 0x5, 0x0, r1}}}, 0x28) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x0, {0x0, 0x7ff}}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x1b, "b936a442271108265c497755c3794e82c519357abba891ee7d67e2"}, &(0x7f0000000080)=0x23) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x2) getsockopt(r0, 0x3ff, 0x0, &(0x7f0000000000)=""/48, &(0x7f00000001c0)=0x30) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x3}, &(0x7f0000000100)=0x8) 19:50:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x14020000000000, 0x400100]}, 0x3c) [ 756.078866] binder_alloc: 28132: binder_alloc_buf size 26632 failed, no address space 19:50:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x646e574250000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 756.145313] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 756.175030] binder: 28132:28133 transaction failed 29201/-28, size 26624-3 line 2970 19:50:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) memfd_create(&(0x7f0000000040)='\\\x00', 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 756.242480] binder: undelivered TRANSACTION_ERROR: 29201 [ 756.251154] binder: BINDER_SET_CONTEXT_MGR already set [ 756.302231] binder: 28132:28255 ioctl 40046207 0 returned -16 [ 756.302666] binder_alloc: 28132: binder_alloc_buf size 26632 failed, no address space [ 756.326191] libceph: mon0 [::1]:4547 socket error on write 19:50:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x14030000000000, 0x400100]}, 0x3c) [ 756.348983] libceph: mon0 [::1]:4547 socket error on write [ 756.451066] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 756.465567] binder: 28132:28257 transaction failed 29201/-28, size 26624-3 line 2970 [ 756.476589] binder: undelivered TRANSACTION_ERROR: 29201 19:50:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x6400, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000100)={0x28}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[0::]:4547:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ceph\x00', 0x0, 0x0) 19:50:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x64969c8c00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:53 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x480) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000080)={0x7fff, 0x7, 0x0, [{0x5, 0x5, 0xff80000000000000, 0x4, 0x200, 0x5c7a, 0xfffffffffffffff8}, {0xf7e, 0x6, 0x2, 0x4, 0x2, 0x9, 0xfffffffffffffffb}, {0x7, 0x0, 0x6, 0x9, 0x7, 0x20, 0x8000}, {0x476cab4a, 0x4, 0x0, 0x4, 0x0, 0x1, 0x1}, {0x9, 0x9, 0xe733, 0x100, 0x3, 0x3, 0x80000000}, {0x7ff, 0x3efe3259, 0x6, 0x1, 0x3, 0xa93, 0x7fb5}, {0x2, 0x9, 0x7, 0x9, 0x6, 0xf935, 0x5}]}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000280)) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x20000000000000, 0x400100]}, 0x3c) [ 756.902769] binder_alloc: 28387: binder_alloc_buf size 27656 failed, no address space [ 756.931469] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 756.967815] binder: 28387:28388 transaction failed 29201/-28, size 27648-3 line 2970 19:50:53 executing program 1: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xca) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x410000, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x6f, 0xfff, 0x1, 0x2, 0x9, 0x8, 0x7, 0x3ff, 0x7fffffff, 0x1000, 0x80, 0xffffffffffffff7f, 0x81, 0xfff, 0x2, 0x20}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7800cf6a000059ae25b7a777a55df8eb4e680e8225cfc6ff60751b9bd9954d8f94417f231eb9818cda70aa6d14fe581ec7e1b7d01a3e7514a615d9c7a971bddc1b1ac94a01581e52789bd9c0f3f8a2001dd72c428f9b2ce42c549b6a98a6bbf843fd1f3560c0f0bdac75baf888489b60834efba264cde455e138876f28568ebca43be69637d1f19f4609b57a91ade54b6c551ea7d4faa6558fb255b7b34ca29d7d9e97b9d24d7ac7d78c8237f5f588035ebc9488a4b2ad3a3659d366436c8f008ffc0a", @ANYRES16=r3, @ANYBLOB="200025bd7000fedbdf250300000008000100000000000c00080007000000000000000c00060002000000000000002400070008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100000000000c000200d70f0000000000000c0003000101000000000000"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 19:50:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x20010000000000, 0x400100]}, 0x3c) [ 757.012789] binder: undelivered TRANSACTION_ERROR: 29201 [ 757.022083] binder_alloc: 28387: binder_alloc_buf size 27656 failed, no address space [ 757.097156] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:53 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:53 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 757.166994] binder: 28387:28414 transaction failed 29201/-28, size 27648-3 line 2970 [ 757.179139] libceph: mon0 [::1]:4547 socket error on write [ 757.190016] libceph: mon0 [::1]:4547 socket error on write 19:50:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x6f21000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xffffffffffffffff, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:50:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x20020000000000, 0x400100]}, 0x3c) 19:50:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r1 = dup2(r0, r0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000400)={@remote, @local, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_to_bond\x00', r2}) sendmsg$inet_sctp(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000100)="3ae8bd358692734db71f0adb9740e51faec331e4122fe09705cda8f5a9eda7a6fc512b74537d41c745db384d63d47c0a3fb3c40b3dfe91f1c98a1307af5ed42abd5aec43c3011a77e407db3c29a8386b1ec08a672fd2813f0329cf45a38cf45f3215a1bd7946eff1220b6c9dbe9280f29204c78b919a83cb8ebf7bee71025047183b7707d07e7bd746fbee5d5e0825a994f1ee52ffe612747f1d568c407bca07745e1cd343f0d7ff56e0327a3dd8", 0xae}, {&(0x7f00000001c0)="3c68768a19f2ef40fce934ddba9b6ddf1367866dac490e2a080e72154b597a056b60a1fa796b6d847593ee48ef4061433cce646d07a1911affe120d17852fd7e685db69317c4a965dc6c8db7fc74b52556cb7d3ed29a40515de347a6e8e64985f5a05cb3694bbfbb67ff67e705d2e8cf57fb79f4611ab858009bd6ab76e80b03077a4f30b78387ac0da1ad0191e3ce059cf003e614c9aa37984cf5dcaa1535b9f04b32417239fe929a4c34eb4e60dfe2c31d82527d3b90c228f89545040210fb0babef4c0d886f1540c4", 0xca}, {&(0x7f00000002c0)="032b5fa60320aa597b3b9ba9fdf1031718290ec2ac34e4eb99442248540cafd6a3fe6a88ea90521dbd3eb60eb982706cd065710d04d7cc86eef634b6a02237e94e4513528403d70e67ee92a4cacd8abef222dd086af54211e830a562da00125b550ef5961846ed67cf8a14596f3943d7a29618f6897001eba6394bed4c5ce7a805d534745de5baf1d358310a8e19c8ee55481b69c25b7ecdcf", 0x99}], 0x3, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x71f24d4250000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000540)={'nr0\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x3}}) accept$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) getpeername$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000bc0)={'veth1_to_hsr\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000e80)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000f80)=0xe8) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001040)={'veth0\x00', 0x0}) accept4$packet(r1, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000010c0)=0x14, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000011c0)={@local, 0x0}, &(0x7f0000001200)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001240)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001340)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000001380)={@empty, 0x0}, &(0x7f00000013c0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001400)={'veth1_to_bond\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001440)={@broadcast, @local, 0x0}, &(0x7f0000001480)=0xc) accept4$packet(r1, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004080)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000040c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f00000041c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004240)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000004340)=0xe8) getpeername$packet(r1, &(0x7f0000004380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000043c0)=0x14) getpeername$packet(r0, &(0x7f0000007380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000073c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000074c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000075c0)=0xe8) accept$packet(r1, &(0x7f0000007600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0xfffffffffffffffd) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000007f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000007f40)={&(0x7f0000007640)=ANY=[@ANYBLOB="ec080000", @ANYRES16=r2, @ANYBLOB="10072cbd7000fddbdf250000000008000100", @ANYRES32=r3, @ANYBLOB="d801020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000b000002000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000340004000101090308000000060002004268000000000008070000000400a0022d0b00000300c40600080000e50089ad02000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r4, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004008100000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400ae00000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r7, @ANYBLOB="b00102003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004001d00000008000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004007e0000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040006000000080007000000000008000100", @ANYRES32=r9, @ANYBLOB="fc00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004008d22000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000008000100", @ANYRES32=r13, @ANYBLOB="7c00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040075000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r14, @ANYBLOB="2801020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004006d03000008000600", @ANYRES32=r15, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000200000008000100", @ANYRES32=r18, @ANYBLOB="4400020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040080000000080007000000000008000100", @ANYRES32=r19, @ANYBLOB="ac00020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff07000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400690a000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000700000008000100", @ANYRES32=r20, @ANYBLOB="3401020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r22, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r23, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004008ab1f408080007000000000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r24, @ANYBLOB="4400020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r25], 0x8ec}, 0x1, 0x0, 0x0, 0x4004050}, 0x40000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 757.833976] binder_alloc: 28642: binder_alloc_buf size 29704 failed, no address space [ 757.871500] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7804000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 757.917652] binder: 28642:28643 transaction failed 29201/-28, size 29696-3 line 2970 19:50:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x20030000000000, 0x400100]}, 0x3c) [ 757.973571] binder: 28642:28760 transaction failed 29201/-28, size 29696-3 line 2970 19:50:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x402, r0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@empty, @multicast2, 0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, r2, 0x2}, 0xc) r3 = dup2(r0, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001980)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000140)={0x40, 0x4, 0x517, 0x0, 0x7ff, 0x2, 0x2}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) fcntl$addseals(r1, 0x409, 0x4) sendmsg(r0, &(0x7f00000018c0)={&(0x7f0000000180)=@isdn={0x22, 0x4, 0x3, 0x80000000, 0x1000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)="3ccd9515d57b8b0d14a0a08e5797730464bcee20d1b6f8ef711d5fea73bd6c22bb122ef53bd26a36223d78b54de040ab5266b7e45d0095104423b782dfab2a3c6b704238bd9e4a96d48e4d51ac123d35a91df8410af0628e4938d63283184d42a722cbd0ad7d1b9272e780fb7e6073ef077126df51e638c203681236694894560c002c9744f4e98e6ffbc6cdf916f47d312cfc81cbd6e88d928ac40725302b287a066c75019462c0768d08263eaf7aa8521e0dbf5794914b3b04f31c30450160eefc964bf85f7bf2ccd55bb02cd26e1fa7a16b6dca26db13c7035adf5d7c9b6dc30fa7ea7c7ba342d428623446b5e6c6", 0xf0}, {&(0x7f0000000300)="6776ac67289de5e44bf743a75aede361665579f88986b466", 0x18}, {&(0x7f0000000340)="3e6701b67f0155f7eebc038fbb823352fe8b96253cf77969a8b89d045c62b2c942ad2e14319928a48d63f5f4e2f8f412970a4625e73ae252c078ec91acc847a838702bc85d87594d6a1045b56cdb366c413b44f1d752986c89d66093b1398ace4280dcf3", 0x64}, {&(0x7f00000003c0)="61218a48803407fafc51247ed6b6176f3476260fad8ba23689a9a554312757c415cd365dbddf676729e1e47db7855dea71da5b88c39fc19a3041608c5cb770058b41", 0x42}, {&(0x7f0000000440)="a94e7a74eb19b326f139e06334b98312b05861247a93e58ea74458f448a4d3972334683b3bbd6b76f1afcffe7b4c7c9e380c669ebb330fcef2c7596a168cb085f36018e7d3b9b48023fc61ad7f6517e898cf9ac1e31dde28a035f3f79545c6de2df30ea18cfd23cbd5603f79a7afeee7fa0185fd6181637ea88114", 0x7b}], 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1358}, 0x1) 19:50:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870cb, 0x0) 19:50:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8009000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:54 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000340)) r2 = dup2(r0, r0) prctl$PR_GET_SECUREBITS(0x1b) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x40c000, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000300)={0x11, 0x12, &(0x7f00000002c0)="019ad6492f1f64c04a45dddaa6202d42dbd9"}) fcntl$setflags(r0, 0x2, 0x1) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000280)=0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0)="bc2d33077747f505cf6af5d0069aa72b3b89022c16768a0bcf5f921e9ff5783c498d38054e01258d87b1e017c77de4be08bc868a10464283cb8c2e74f757aa7efb51aac48806854e35561d6099ebe7a987596184df8fb60c9b82b83b3fdb9a2570604a20b250cedd32ecfe514e2c022d5a364e2a6d13b6d7edf1e20e236140d5ec06286b8cdfa8c14bdc5a9eb7629a834793180f68c7f851bd1762483916c7fa30a066b501d7c618f09ded0d275b29c828b22ab1315df9306909e0234a5b53a96a16df46e9442796f06362459317eff93714df1a0c29b6e7f743992c4d38d04df1edb7dec50c470e1e114b22d2009c4f", &(0x7f00000001c0)="f5fbd14348ca5f504161dd30bfa6ea60ecc494d2d5d91d20dcfb91e5", 0x3}, 0x20) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 758.266529] binder: 28782:28786 transaction failed 29201/-28, size 31232-3 line 2970 19:50:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8010001200000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:54 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x646e574250000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 758.322460] binder: BINDER_SET_CONTEXT_MGR already set [ 758.327825] binder: 28782:28871 ioctl 40046207 0 returned -16 [ 758.328437] binder: 28782:28885 transaction failed 29201/-28, size 31232-3 line 2970 19:50:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x24000000000000, 0x400100]}, 0x3c) 19:50:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/74) 19:50:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8010001300000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = accept(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:55 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x4001000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x34000000000000, 0x400100]}, 0x3c) 19:50:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8801000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz1\x00') fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)=0x2) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/251) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x3b8, 0x0}) 19:50:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x34010000000000, 0x400100]}, 0x3c) 19:50:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:55 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x4, 0x9, 0x0, 0x3, 0xc7, 0x200, 0x80000000, 0x0, 0x1ff, 0x2, 0x400, 0x7, 0x7, 0xaa, 0x19, 0x2}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x2040, 0x0) dup3(r2, r1, 0x80000) 19:50:55 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 759.119609] binder_release_work: 9 callbacks suppressed [ 759.119617] binder: undelivered TRANSACTION_ERROR: 29201 [ 759.149189] binder: BINDER_SET_CONTEXT_MGR already set 19:50:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x34020000000000, 0x400100]}, 0x3c) 19:50:55 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x6, 0x3f, 0x8, 0x3ff}, {0x1, 0xc0, 0x0, 0xffffffff}]}) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x340, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x808}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10001, @loopback, 0xa4c}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x81, @ipv4={[], [], @rand_addr=0x100000001}, 0x5}}}}]}, @TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd9dd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @remote, 0x1f}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x1, @remote, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0xf}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xffffffffffff270b, @dev={0xfe, 0x80, [], 0x16}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff00000000}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fffffffc000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x17fd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39b6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7a74}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x340}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 759.178862] binder: 29075:29089 ioctl 40046207 0 returned -16 [ 759.178905] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 759.178914] binder_alloc: 29075: binder_alloc_buf size 50331656 failed, no address space 19:50:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x9000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 759.231730] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 759.231746] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:55 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:50:55 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x0, 0x0}) name_to_handle_at(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x7c, 0x6, "524b59b78e0d216f92aeae9da40d8a2ddc06ea3cb192845af97c7fb7ff3a7ab215429c86545d783fddcdc5a2a6b8828e60f254e104481417492325146026c17690ac04a46bcb233527da293b0d464c89e3191b8b27fcd27f26fa4cbbb470329573522a87a09f394d257ec70ee526de422a20cbe2"}, &(0x7f0000000100), 0x1000) [ 759.403385] binder: undelivered TRANSACTION_ERROR: 29201 19:50:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x2, &(0x7f0000000000)={0x0, 0x0}) 19:50:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x34030000000000, 0x400100]}, 0x3c) 19:50:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x90dd374250000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x80) r2 = dup2(r0, r0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4b47, &(0x7f0000000000)={0x0, 0x0}) [ 759.641776] binder_alloc: 29320: binder_alloc_buf size 67108872 failed, no address space [ 759.661369] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 759.686616] binder: undelivered TRANSACTION_ERROR: 29201 [ 759.706481] binder_alloc: 29320: binder_alloc_buf size 67108872 failed, no address space 19:50:56 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x40, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00000010d066d900"/17, @ANYRES16=r2, @ANYBLOB="037528bd7000fcdbdf250c000000480007000c00030000000080000000000c000300dcbf00000000000008000100040000000800010008000000080002000400000008000200836500000c00040001000000000000002000060008000100ff0f000008000100d60300000400020004000200040002002c00090008000100e1ffffff0800020025000000080001000004000008000100e1b1362608000100c40000002c00090008000200fe0b0000080002000400000008000200ffffffff080002000700000008000200010000002400070008000200090000000c00040004000000000000000c0003000100008000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@local, 0x48, r1}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) socketpair(0x7, 0x80b, 0x3ea8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = dup2(r3, r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x40010000000000, 0x400100]}, 0x3c) 19:50:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x9801000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 759.735968] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 759.801988] binder: undelivered TRANSACTION_ERROR: 29201 19:50:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000080)={0x1000, 0x7, 0x0, 0x3, 0xc4}) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x101200) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:50:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4b49, &(0x7f0000000000)={0x0, 0x0}) [ 759.973278] binder_alloc: 29391: binder_alloc_buf size 83886088 failed, no address space [ 759.992529] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x983a000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x40020000000000, 0x400100]}, 0x3c) [ 760.026864] binder: undelivered TRANSACTION_ERROR: 29201 [ 760.035476] binder: BINDER_SET_CONTEXT_MGR already set [ 760.047342] binder: undelivered TRANSACTION_ERROR: 29189 [ 760.055578] binder: 29391:29402 ioctl 40046207 0 returned -16 19:50:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x1, 0x4) 19:50:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x541b, &(0x7f0000000000)={0x0, 0x0}) 19:50:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x9c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 760.214977] binder_alloc: 29488: binder_alloc_buf size 100663304 failed, no address space [ 760.245289] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x40030000000000, 0x400100]}, 0x3c) 19:50:56 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) close(r1) bind$unix(r2, &(0x7f000094cff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) sendmmsg$unix(r2, &(0x7f0000000640)=[{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000600)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}], 0x1, 0x0) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) [ 760.285535] binder: undelivered TRANSACTION_ERROR: 29201 [ 760.302263] binder_alloc: 29488: binder_alloc_buf size 100663304 failed, no address space 19:50:56 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5421, &(0x7f0000000000)={0x0, 0x0}) [ 760.357595] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 760.409381] binder: undelivered TRANSACTION_ERROR: 29201 19:50:57 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x54000000000000, 0x400100]}, 0x3c) 19:50:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x9c42050000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5450, &(0x7f0000000000)={0x0, 0x0}) [ 760.649504] binder_alloc: 29632: binder_alloc_buf size 117440520 failed, no address space 19:50:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 760.699501] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5451, &(0x7f0000000000)={0x0, 0x0}) [ 760.758337] binder_transaction: 12 callbacks suppressed [ 760.758355] binder: 29632:29634 transaction failed 29201/-28, size 117440512-3 line 2970 19:50:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x54010000000000, 0x400100]}, 0x3c) 19:50:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x9f275f4250000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 760.859649] binder: undelivered TRANSACTION_ERROR: 29201 [ 760.888925] binder_alloc: 29632: binder_alloc_buf size 117440520 failed, no address space 19:50:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5452, &(0x7f0000000000)={0x0, 0x0}) [ 760.944622] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:50:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4b47, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 760.996350] binder: 29632:29766 transaction failed 29201/-28, size 117440512-3 line 2970 [ 761.051598] binder: undelivered TRANSACTION_ERROR: 29201 19:50:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:57 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa001000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x54020000000000, 0x400100]}, 0x3c) 19:50:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5460, &(0x7f0000000000)={0x0, 0x0}) 19:50:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4b49, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 761.220614] binder_alloc: 29895: binder_alloc_buf size 134217736 failed, no address space 19:50:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa569814250000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 761.269544] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 761.299060] binder: 29895:29896 transaction failed 29201/-28, size 134217728-3 line 2970 19:50:57 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8901, &(0x7f0000000000)={0x0, 0x0}) 19:50:57 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x541b, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 761.371902] binder: BINDER_SET_CONTEXT_MGR already set 19:50:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x54030000000000, 0x400100]}, 0x3c) [ 761.413520] binder: 29895:30001 ioctl 40046207 0 returned -16 [ 761.413558] binder_alloc: 29895: binder_alloc_buf size 134217736 failed, no address space 19:50:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8902, &(0x7f0000000000)={0x0, 0x0}) [ 761.491385] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 761.530603] binder: 29895:30020 transaction failed 29201/-28, size 134217728-3 line 2970 19:50:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa800000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5421, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x60010000000000, 0x400100]}, 0x3c) 19:50:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5450, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8903, &(0x7f0000000000)={0x0, 0x0}) 19:50:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xa801000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 761.760662] binder: 30165:30166 transaction failed 29201/-28, size 536870912-3 line 2970 19:50:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5451, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8904, &(0x7f0000000000)={0x0, 0x0}) [ 761.887715] binder: 30165:30187 transaction failed 29201/-28, size 536870912-3 line 2970 19:50:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x60020000000000, 0x400100]}, 0x3c) 19:50:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xaa586a4250000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8940, &(0x7f0000000000)={0x0, 0x0}) 19:50:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5452, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:58 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 762.165264] binder: 30295:30306 transaction failed 29201/-28, size 1207959552-3 line 2970 19:50:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x60030000000000, 0x400100]}, 0x3c) [ 762.217626] binder: 30295:30318 transaction failed 29201/-28, size 1207959552-3 line 2970 19:50:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xabe75b4250000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:58 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x5460, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:58 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8941, &(0x7f0000000000)={0x0, 0x0}) 19:50:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x894c, &(0x7f0000000000)={0x0, 0x0}) 19:50:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8901, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xb010000f00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 762.458566] binder: 30418:30450 transaction failed 29201/-28, size 1275068416-3 line 2970 19:50:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x74000000000000, 0x400100]}, 0x3c) [ 762.568454] binder: 30418:30466 transaction failed 29201/-28, size 1275068416-3 line 2970 19:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8980, &(0x7f0000000000)={0x0, 0x0}) 19:50:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8902, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xb010001200000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x74010000000000, 0x400100]}, 0x3c) 19:50:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8903, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8981, &(0x7f0000000000)={0x0, 0x0}) 19:50:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xb010001300000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:59 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8904, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:50:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x74020000000000, 0x400100]}, 0x3c) 19:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8982, &(0x7f0000000000)={0x0, 0x0}) 19:50:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8983, &(0x7f0000000000)={0x0, 0x0}) 19:50:59 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:50:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xb400000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8940, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x74030000000000, 0x400100]}, 0x3c) 19:51:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a0, &(0x7f0000000000)={0x0, 0x0}) 19:51:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xc004000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8941, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x80010000000000, 0x400100]}, 0x3c) 19:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a1, &(0x7f0000000000)={0x0, 0x0}) 19:51:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x894c, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xc2ffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x80020000000000, 0x400100]}, 0x3c) 19:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c8, &(0x7f0000000000)={0x0, 0x0}) [ 763.900215] binder: BINDER_SET_CONTEXT_MGR already set [ 763.923003] binder: 31017:31018 ioctl 40046207 0 returned -16 19:51:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8980, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x80030000000000, 0x400100]}, 0x3c) 19:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, 0x0}) 19:51:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xc800000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 764.173972] binder_release_work: 18 callbacks suppressed [ 764.173980] binder: undelivered TRANSACTION_ERROR: 29201 [ 764.190832] binder: BINDER_SET_CONTEXT_MGR already set [ 764.262421] binder: 31158:31159 ioctl 40046207 0 returned -16 19:51:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x94000000000000, 0x400100]}, 0x3c) 19:51:00 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8981, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40049409, &(0x7f0000000000)={0x0, 0x0}) 19:51:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xcc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 764.509623] binder_alloc_new_buf_locked: 16 callbacks suppressed [ 764.509634] binder_alloc: 31290: binder_alloc_buf size 4294966792 failed, no address space 19:51:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8982, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 764.551793] binder_alloc_new_buf_locked: 16 callbacks suppressed [ 764.551822] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x94010000000000, 0x400100]}, 0x3c) 19:51:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xcdf11b0100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40086602, &(0x7f0000000000)={0x0, 0x0}) [ 764.678403] binder: undelivered TRANSACTION_ERROR: 29201 19:51:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x8983, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 764.735255] binder: BINDER_SET_CONTEXT_MGR already set 19:51:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 764.797601] binder: 31290:31292 ioctl 40046207 0 returned -16 19:51:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a0, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40087602, &(0x7f0000000000)={0x0, 0x0}) 19:51:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x94020000000000, 0x400100]}, 0x3c) 19:51:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xd010001200000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 765.015670] binder_alloc: 31447: binder_alloc_buf size 4294967176 failed, no address space 19:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4020940d, &(0x7f0000000000)={0x0, 0x0}) 19:51:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x89a1, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 765.061015] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x94030000000000, 0x400100]}, 0x3c) 19:51:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xd010001300000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 765.119493] binder: undelivered TRANSACTION_ERROR: 29201 [ 765.138848] binder_alloc: 31447: binder_alloc_buf size 4294967176 failed, no address space 19:51:01 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c8, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 765.210857] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 19:51:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffff000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 765.301624] binder: undelivered TRANSACTION_ERROR: 29201 19:51:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa0010000000000, 0x400100]}, 0x3c) 19:51:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40049409, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe000000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x80086601, &(0x7f0000000000)={0x0, 0x0}) [ 765.450414] binder_alloc: 31589: binder_alloc_buf size 140737488351240 failed, no address space [ 765.546435] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40086602, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa0020000000000, 0x400100]}, 0x3c) [ 765.600144] binder: undelivered TRANSACTION_ERROR: 29201 [ 765.616571] binder_alloc: 31589: binder_alloc_buf size 140737488351240 failed, no address space 19:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x80087601, &(0x7f0000000000)={0x0, 0x0}) [ 765.702244] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe710000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 765.751616] binder: undelivered TRANSACTION_ERROR: 29201 19:51:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x40087602, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff7f0000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa0030000000000, 0x400100]}, 0x3c) 19:51:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, &(0x7f0000000000)={0x0, 0x0}) [ 765.914595] binder_alloc: 31843: binder_alloc_buf size 67835469378813960 failed, no address space 19:51:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x4020940d, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 765.990387] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, &(0x7f0000000000)={0x0, 0x0}) [ 766.053217] binder_transaction: 16 callbacks suppressed [ 766.053244] binder: 31843:31844 transaction failed 29201/-28, size 67835469378813952-3 line 2970 19:51:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe800000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:02 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb4000000000000, 0x400100]}, 0x3c) [ 766.126598] binder: undelivered TRANSACTION_ERROR: 29201 [ 766.157835] binder: 31843:31893 transaction failed 29189/-22, size 67835469378813952-3 line 2855 [ 766.227857] binder: undelivered TRANSACTION_ERROR: 29189 19:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0189436, &(0x7f0000000000)={0x0, 0x0}) 19:51:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xe803000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb4010000000000, 0x400100]}, 0x3c) 19:51:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xf001000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 766.474122] binder_alloc: 32000: binder_alloc_buf size 72057594037927944 failed, no address space [ 766.511386] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x0}) [ 766.565523] binder: 32000:32003 transaction failed 29201/-28, size 72057594037927936-3 line 2970 19:51:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x80086601, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 766.616312] binder: undelivered TRANSACTION_ERROR: 29201 [ 766.624583] binder_alloc: 32000: binder_alloc_buf size 72057594037927944 failed, no address space 19:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x60802, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) connect$nfc_llcp(r2, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x6, 0x8, 0x7, "42046376573fcba55c358c4e407b47d3d6d9db27b70408eb8a8d4763c804e77d81d73a0a2311c25bb605945136acde492b1eba963047bf875f341770a534f3", 0xd}, 0x60) 19:51:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb4020000000000, 0x400100]}, 0x3c) [ 766.669887] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x80087601, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 766.737259] binder: 32000:32126 transaction failed 29201/-28, size 72057594037927936-3 line 2970 19:51:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xf401000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 766.795532] binder: undelivered TRANSACTION_ERROR: 29201 19:51:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0xfffffdff, 0x0}) socket$rds(0x15, 0x5, 0x0) 19:51:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb4030000000000, 0x400100]}, 0x3c) 19:51:03 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x11c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 767.003867] binder_alloc: 32248: binder_alloc_buf size 144115188075855880 failed, no address space [ 767.041902] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) pwrite64(r1, &(0x7f0000000040)="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", 0x1000, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000001040), &(0x7f0000001080)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0045878, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 767.083855] binder: 32248:32261 transaction failed 29201/-28, size 144115188075855872-3 line 2970 [ 767.146964] binder_alloc: 32248: binder_alloc_buf size 144115188075855880 failed, no address space 19:51:03 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc0010000000000, 0x400100]}, 0x3c) [ 767.203174] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 767.221529] binder: 32248:32280 transaction failed 29201/-28, size 144115188075855872-3 line 2970 19:51:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000080)={0x0, 0x5, 0x2, 0x9, '\x00', 0x7}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, {0x2, 0x96, 0x80000001, 0x9}}) 19:51:03 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc0189436, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0xc020660b, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 767.459628] binder: 32410:32412 transaction failed 29201/-28, size 216172782113783808-3 line 2970 19:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$VIDIOC_G_CTRL(r1, 0xc008561b, &(0x7f0000000080)={0xaec}) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x2, 0x3, 0x2}}, 0x14) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 19:51:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 767.520968] binder: 32410:32421 transaction failed 29201/-28, size 216172782113783808-3 line 2970 19:51:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc0020000000000, 0x400100]}, 0x3c) 19:51:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x1000000, &(0x7f0000000080)}) 19:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) r2 = dup2(r0, r0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x5) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 767.803286] binder: 32543:32544 transaction failed 29201/-28, size 288230376151711744-3 line 2970 19:51:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x100000000000000, &(0x7f0000000080)}) [ 767.899884] binder: 32543:32551 transaction failed 29189/-22, size 288230376151711744-3 line 2855 19:51:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc0030000000000, 0x400100]}, 0x3c) 19:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x4, 0x5, 0xb9, 0x1, 0xca7, 0xff, 0x7ff, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x9}}, 0x6, 0x10001, 0xfff, 0x5, 0x2}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x4, 0x6}, &(0x7f0000000180)=0x8) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000200)={r3, 0x3}) 19:51:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x3, 0x400, 0x3, 0x9}, 0x3, 0x101, 0xfffffffffffffffa}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d3, &(0x7f0000000040)={0x0, 0x0}) write$P9_RFSYNC(r1, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) 19:51:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd4000000000000, 0x400100]}, 0x3c) 19:51:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x198, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd4010000000000, 0x400100]}, 0x3c) [ 768.440645] binder: BINDER_SET_CONTEXT_MGR already set 19:51:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x2d4, &(0x7f0000000080)}) 19:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$TIOCSBRK(r1, 0x5427) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f00000000c0)={0xffffffffffffff15, 0x0}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f0000000040)=0xff4b) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0xfffffffffffff801, 0x6, 0x0, 0x2, 0x10001, 0x9, 0x7, 0x1, 0xd4, 0x1, 0x2, 0x1b, 0x7f, 0x2, 0x8, 0x20}}) [ 768.481289] binder: 353:363 ioctl 40046207 0 returned -16 19:51:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x3, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) finit_module(r1, &(0x7f0000000080)='selinuxself\x00', 0x1) 19:51:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd4020000000000, 0x400100]}, 0x3c) 19:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0xfffffed3, 0x0}) 19:51:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd4030000000000, 0x400100]}, 0x3c) 19:51:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) 19:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 768.999534] binder: BINDER_SET_CONTEXT_MGR already set 19:51:05 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x32001) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @timestamp], 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) getsockname$inet(r0, &(0x7f0000000380)={0x2, 0x0, @multicast1}, &(0x7f00000003c0)=0x10) accept4$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x80000) syz_execute_func(&(0x7f0000000400)="cfc4c17de0dec4427d21bbb58759bac4211fc2de160f94b0866ee187f3440f590243db07450f6f989d8999992e2ef2cd0047a3c2d0f3afc175e04d") r2 = dup2(r1, r1) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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") getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x7, 0x3}, &(0x7f00000002c0)=0x8) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000440)=0x18, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) 19:51:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 769.024327] binder: 552:563 ioctl 40046207 0 returned -16 19:51:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe0010000000000, 0x400100]}, 0x3c) 19:51:05 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x20, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000100)={0x109, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r1, 0x4000}, {r2, 0x80}], 0x1ffffdf6, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000040)=0x4, 0x4) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0), 0x4) 19:51:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 769.244424] binder_release_work: 14 callbacks suppressed [ 769.244432] binder: undelivered TRANSACTION_ERROR: 29201 [ 769.261809] binder: BINDER_SET_CONTEXT_MGR already set 19:51:05 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pread64(r0, &(0x7f0000000040)=""/155, 0x9b, 0x0) 19:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$KDSETLED(r1, 0x4b32, 0x7) accept4$rose(r1, &(0x7f0000000040)=@full={0xb, @dev, @bcast, 0x0, [@null, @netrom, @null, @null, @default]}, &(0x7f0000000100)=0x2ce, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) [ 769.313323] binder: undelivered TRANSACTION_ERROR: 29189 [ 769.319340] binder: 648:649 ioctl 40046207 0 returned -16 19:51:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe0020000000000, 0x400100]}, 0x3c) 19:51:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080)=0x80, 0x4) 19:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x82800, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 769.578763] binder_alloc_new_buf_locked: 11 callbacks suppressed [ 769.578777] binder_alloc: 791: binder_alloc_buf size 5188146770730811400 failed, no address space 19:51:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe0030000000000, 0x400100]}, 0x3c) [ 769.648306] binder_alloc_new_buf_locked: 11 callbacks suppressed [ 769.648321] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 769.721979] binder: undelivered TRANSACTION_ERROR: 29201 [ 769.729873] binder: BINDER_SET_CONTEXT_MGR already set 19:51:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 769.767090] binder: undelivered TRANSACTION_ERROR: 29189 [ 769.775674] binder: 791:793 ioctl 40046207 0 returned -16 19:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x204082, 0x0) write$input_event(r1, &(0x7f0000000080)={{0x0, 0x2710}, 0x12, 0x20, 0x6}, 0x18) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) socket$inet6(0xa, 0x0, 0x4) 19:51:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf4000000000000, 0x400100]}, 0x3c) 19:51:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:06 executing program 1: ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x0, 0x0, 0x1, "eb6a4c6efd87eaf2048fa782188db5d453158ba76efa944131c925c334bb0140"}) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(0x0, 0x0, 0x1080000200000581) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) write$P9_RLINK(r1, &(0x7f0000000000)={0x7}, 0x2dd) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000100)=r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x263}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup2(r3, r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 769.985678] binder_alloc: 941: binder_alloc_buf size 5476377146882523144 failed, no address space 19:51:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:06 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e23, 0x7, @rand_addr="b2d1690fb15de633acc31428ee8d3db1", 0x875e}}, 0x100, 0xeae, 0x4a0ef2dd, 0x7, 0xe22}, &(0x7f0000000380)=0x98) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup2(r2, r2) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000200)=0x156) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000400)=0x7) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000180)=""/21) getpeername(r2, &(0x7f0000000040)=@ax25={{0x3, @netrom}, [@rose, @bcast, @remote, @null, @rose, @remote, @null, @default]}, &(0x7f00000000c0)=0x80) [ 770.072469] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf4010000000000, 0x400100]}, 0x3c) [ 770.131452] binder: undelivered TRANSACTION_ERROR: 29201 [ 770.169726] binder_alloc: 941: binder_alloc_buf size 5476377146882523144 failed, no address space 19:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x1, 0x2}, 0xf) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:06 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 770.230183] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 770.261224] binder: undelivered TRANSACTION_ERROR: 29201 19:51:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf4020000000000, 0x400100]}, 0x3c) 19:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000040)={"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"}) 19:51:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f00000001c0)={0x8, 'syz0\x00'}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x2, 0x100000000, 0x6, 0x81, 0x0, 0x80000001, 0x7, 0x4, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e20, @local}}}, 0x84) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e22, 0x5946, @dev={0xfe, 0x80, [], 0x28}, 0x200}}, 0xd, 0x0, 0x100000000, 0x205ca3e9, 0x80000000}, &(0x7f00000002c0)=0x98) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) [ 770.449350] binder_alloc: 1190: binder_alloc_buf size 6917529027641081864 failed, no address space [ 770.482293] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 770.546405] binder: BINDER_SET_CONTEXT_MGR already set [ 770.574369] binder: undelivered TRANSACTION_ERROR: 29201 [ 770.590815] binder: 1190:1192 ioctl 40046207 0 returned -16 19:51:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000080)={0x1bacf914c1baf6c, &(0x7f00000000c0)}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xc8, r2, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9b}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x77c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x48081}, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000240)=""/234, &(0x7f0000000340)=0xea) 19:51:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x100000000000000, 0x400100]}, 0x3c) 19:51:07 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x5, 0x101, 0x4559, 0x100, 0x0, 0x1, 0x80100, 0xb, 0x100, 0xfffffffffffffffa, 0x2, 0x5, 0x2, 0x5, 0x3, 0x7, 0x80, 0x3f, 0x9, 0x731dcd00, 0xd8c, 0x6, 0x1000, 0x100000000, 0x1, 0x8, 0x4c, 0x1, 0x2, 0x8000, 0xffffffffffff9bcf, 0x80000000, 0xffffffffffff2e75, 0x80, 0x4, 0x8, 0x0, 0x1, 0x5, @perf_config_ext={0x0, 0x1}, 0x2000, 0x80000001, 0x9, 0x9, 0x5, 0x9, 0x6}, 0xffffffffffffffff, 0xb, 0xffffffffffffff9c, 0x4) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x1, 0x4d, "1f37c604749c70817b0e426c243d6dfa6c25c6a5260585a9a4dba71d1db323752eb6bcd0bd35fba61dca8f6df41441066cf5b27484c9e200d6fe1da099d62063f1b258d6207609fcd00b835e44"}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x0, 0x10001, 0x9}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f00000000c0)=0xc) 19:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0x0, 0x0}) 19:51:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x200000000000000, 0x400100]}, 0x3c) [ 770.888739] binder_alloc: 1334: binder_alloc_buf size 7493989779944505352 failed, no address space 19:51:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 770.935555] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 770.983188] binder: undelivered TRANSACTION_ERROR: 29201 [ 771.013849] binder_alloc: 1334: binder_alloc_buf size 7493989779944505352 failed, no address space 19:51:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000100)={0x15, &(0x7f00000000c0)}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x5, 0x4) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000000)={0x4a, ""/74}) fsetxattr$security_evm(r0, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@v2={0x5, 0x3, 0x13, 0x0, 0xbb, "0d095e3f9cf4c6cacffb23bceafaec9345d8ffe5c62729ccc08186aa5c629967d043d56ada61c03ed0479db3b8f0ed09dc80516f47355297c66e03fa8ae322ca63add55ae91667028f7799c346c21e4274159a5672be6fd4086bd01c4ead9a263406fe6ba3a9f8b0dc9693fb38d33506b56144e229f001016ca094d91ca378778364e04eb35f17bbefe2ea9e4504fd1e9f61472ff458f8d0cf7cd8c0a93b54f1322de367a6a213277554f3acee6a93b6c1daa079626619ac30fd62"}, 0xc5, 0x1) [ 771.066165] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40080, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x3a, 0x0}) getsockname$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) 19:51:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) accept4$rose(r1, &(0x7f0000000040)=@full={0xb, @remote, @rose, 0x0, [@rose, @null, @rose, @remote, @default, @bcast]}, &(0x7f0000000080)=0x40, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) [ 771.111768] binder_transaction: 16 callbacks suppressed [ 771.111787] binder: 1334:1468 transaction failed 29201/-28, size 7493989779944505344-3 line 2970 [ 771.141692] binder: undelivered TRANSACTION_ERROR: 29201 19:51:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x300000000000000, 0x400100]}, 0x3c) 19:51:07 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 771.320244] binder_alloc: 1605: binder_alloc_buf size 7782220156096217096 failed, no address space 19:51:08 executing program 0: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={0xffffffffffffff9c, 0x7, 0x1, 0x8f9f, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) getsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f0000000000), &(0x7f0000000080)=0x4) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000040)={0xfffffffffffffd29, 0x0}) setsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f00000000c0)="74071089fad011da4d805ff1dc529e36e4a375af56ed13e2f411898da392045ac2387930d5c36389a25cabd93cb7746e5b6787da296ecd854e11d578a8925f3abd22afa70471ed648a88ac36ed14ceac972099eedbf38a47cb8b60787a05ff491669b2b009af03d56cae8cdb292ccd0bd8d1ea042f25de89178cbdb4e3a8993bfddd4138c0a3a888d41ff93146aef5428d5d4d34de0e009526cbc6c159832e5025a594b3356a7d3302202796c30ecdf8dd3f223a5d1b4371abf28b1171eec133a1735d7426d115cf963760d7c6a50e8456df0ec374cf68", 0xd7) 19:51:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) accept$unix(r1, 0x0, &(0x7f0000000040)) [ 771.402691] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x400000000000000, 0x400100]}, 0x3c) 19:51:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 771.498183] binder: 1605:1609 transaction failed 29201/-28, size 7782220156096217088-3 line 2970 19:51:08 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x8080, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000140)={0x3, 0x50000000000}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000080)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000180)={[{0x4, 0xfffffffffffff562, 0xb7, 0x1ff, 0x7fff, 0x0, 0xffffffff, 0x2, 0x6e, 0xfffffffffffffffc, 0x1ff, 0x4, 0x3}, {0x2, 0x7f, 0x3, 0x8a4, 0x80000000, 0x7, 0x8, 0x0, 0x4, 0x8001, 0xfffffffffffffffc, 0x3, 0x2}, {0x8, 0x0, 0x8020000000, 0x739679ef, 0x65, 0x7, 0x0, 0x9, 0x80000001, 0xc45, 0x7fff, 0x80000000, 0xe9}], 0x1f}) socket$inet6_udp(0xa, 0x2, 0x0) [ 771.595435] binder: undelivered TRANSACTION_ERROR: 29201 [ 771.639361] binder: BINDER_SET_CONTEXT_MGR already set 19:51:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f00000000c0)={0xfffffffffffffefc, 0x0}) fstatfs(r0, &(0x7f0000000040)=""/82) [ 771.684155] binder: 1605:1716 ioctl 40046207 0 returned -16 [ 771.684195] binder_alloc: 1605: binder_alloc_buf size 7782220156096217096 failed, no address space 19:51:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x500000000000000, 0x400100]}, 0x3c) [ 771.820198] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 771.837230] binder: 1605:1740 transaction failed 29201/-28, size 7782220156096217088-3 line 2970 19:51:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:08 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x204602, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) 19:51:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x600000000000000, 0x400100]}, 0x3c) 19:51:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 772.038991] binder_alloc: 1870: binder_alloc_buf size 8358680908399640584 failed, no address space 19:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xfff) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x10001, 0x5, 0x8, 0x0, 0x0, [{r1}, {r1, 0x0, 0x3}, {r2, 0x0, 0x1}, {r2, 0x0, 0x100000001}, {r1, 0x0, 0xffffffffffffffc0}, {r0, 0x0, 0x1}, {r1, 0x0, 0x100000001}, {r1, 0x0, 0xa394}]}) [ 772.090148] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 772.137336] binder: 1870:1871 transaction failed 29201/-28, size 8358680908399640576-3 line 2970 19:51:08 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) write$selinux_user(r1, &(0x7f0000000040)={'system_u:object_r:dhcp_state_t:s0', 0x20, 'user_u\x00'}, 0x29) [ 772.200233] binder_alloc: 1870: binder_alloc_buf size 8358680908399640584 failed, no address space 19:51:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 772.258187] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 772.325539] binder: 1870:1967 transaction failed 29201/-28, size 8358680908399640576-3 line 2970 19:51:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x700000000000000, 0x400100]}, 0x3c) 19:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x408000, 0x0) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000140)) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00') getsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f0000000040)={@loopback, @loopback}, &(0x7f0000000080)=0x8) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 19:51:09 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x309000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x4, 0x0, 0x2, 0x1000, 0x4, 0x0, 0x8}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}, [0x7fff, 0x7fffffff, 0x3f, 0x0, 0xf60000000000000, 0x80000000, 0x0, 0x7, 0x6, 0x80000000, 0xfffffffffffff5b3, 0x7ff, 0xa2000, 0x7, 0x3]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r3, 0x4}, &(0x7f0000000240)=0x8) 19:51:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x100, 0x20, [0x2, 0x8, 0xff, 0x7fffffff, 0x5, 0x200, 0x3, 0x0]}) 19:51:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 772.559004] binder: 2089:2103 transaction failed 29201/-28, size 8791026472627208192-3 line 2970 19:51:09 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) fcntl$setlease(r0, 0x400, 0x1) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 19:51:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x800000000000000, 0x400100]}, 0x3c) [ 772.648380] binder: 2089:2137 transaction failed 29201/-28, size 8791026472627208192-3 line 2970 19:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000100)=""/62) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x3, 0x0, {0x0, 0xffffffffffffffff}}, 0x28) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000080)=[0x2, 0x3], 0x2) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x3) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:09 executing program 1: r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x6, 0x4, 0x80000000, 0x3, 0x3, 0x401, 0x7fffffff, {0x0, @in6={{0xa, 0x4e20, 0x6, @local, 0x15}}, 0xa645, 0x1, 0x81, 0x4, 0x1}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x3, 0x4) r4 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x900000000000000, 0x400100]}, 0x3c) 19:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0x0, 0x0}) [ 772.896778] binder: 2262:2265 transaction failed 29201/-28, size -9223372036854775808-3 line 2970 19:51:09 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x12d, &(0x7f0000000080)}) 19:51:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa00000000000000, 0x400100]}, 0x3c) [ 773.029707] binder: BINDER_SET_CONTEXT_MGR already set [ 773.046677] binder: 2262:2284 transaction failed 29201/-28, size -9223372036854775808-3 line 2970 [ 773.061471] binder: 2262:2281 ioctl 40046207 0 returned -16 19:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x200, 0x0) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'ip6_vti0\x00', 0x0}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x44000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x21, &(0x7f00000006c0)={@broadcast, @multicast2, r2}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) fchown(r1, r4, r5) r6 = dup2(r0, r0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x1, 0x3, 0x5, 0xad, 0x3, [{0x0, 0xfffffffffffffff8, 0x80000000, 0x0, 0x0, 0x1}, {0x3, 0x100000000, 0x5, 0x0, 0x0, 0x3c8e}, {0x20, 0x200, 0x101, 0x0, 0x0, 0x1000}]}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f0000000040)={0x5f36, 0x2, 0x200, 0x2, 0x2, 0x5}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:09 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1e080) 19:51:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xd5, "5bcc3cf8d9dc884c69c44d9e7354fedbe9d1555e3a0d60471e7c726ade6a6b5202a67071ff07909d80e6b4298bf4f70c421a3ab9196c3daeae481968b822d55eb035535f3eb6dcfbfacf9036a85f21dccc78882059000a14a3eecb3c8c586fa4ded5f560e8432c91a10e23ce57a8311c9ce9634fc5af415e5e22fd42eae53694a2b6711eb2960d1d8db35a1f1b7abdb4977333fd2529341687d4cc4f8295fd078ea7bdef1d52b95ad26e9504f89f6b5d912dfb164ba8f7c8172d122c1531e617a8df98db440631bca300b12d0b2c7aad821439afd4"}, &(0x7f0000000140)=0xdd) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={r2, 0xdb, "bb2dbcf75c6536810f130f9f2b1a6e576e2d745a39ec6a13aa95f3d6ddc2cdce084e5ae13ec7e45a139e84aa4935695a71e20991dffbdfb0a4106224dcec81d73d309525306b631183279bbb509f64b00164b7fc822dda64c68eaca7bc3714ef52fc20d214cfb46a2230d18707a720eef50f3a95b60aca2208e6481bcd570dd1fc89fef42b37b3788a51e725d1779c1fbd6032dd751f03f91249121b2a348b366f441c17069f5c8b4fd5ee2e6267e7fb2f8f6d8e0172bc136efc4bd7a588ff8027133ecb9ff808d03d652e64efe652ee81ed82fbe80ef6169425d6"}, &(0x7f0000000280)=0xe3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 773.313183] binder: 2403:2408 transaction failed 29201/-28, size -144678142324244480-3 line 2970 19:51:09 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb00000000000000, 0x400100]}, 0x3c) 19:51:10 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x10001}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e22, 0x80000001, @mcast2, 0x1}}}, 0x84) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x0, {0xcf5, 0x82, 0x1000, 0x7}}) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="0aadf700e9132e534be7ec", 0xb, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r1, 0x5, 0x20}, &(0x7f00000002c0)=0xc) keyctl$update(0x2, r2, 0x0, 0x0) 19:51:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x980, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:10 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x3, [0x8, 0x100000000, 0x9]}, 0xa) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x101000) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000000c0)=0x44bb, 0x4) uname(&(0x7f0000000100)=""/154) 19:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1200008}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="e0000000150000082dbd7000fdc8df2561656769733132382d67656e65726963000000000000000000000000000000000000000000000000000000000000000000004f32e5be9a7fa6ff0000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc00000000000000, 0x400100]}, 0x3c) 19:51:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x3, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:10 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xfffffffffffffffe, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000100)=0x24, 0x4) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0x4a) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd00000000000000, 0x400100]}, 0x3c) 19:51:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x101101) sync_file_range(r0, 0x1, 0x9, 0x3) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x800) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000000c0)=0x3, 0x4) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000100)=""/15) 19:51:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:10 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x105100, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 774.146838] binder: 2699:2713 got transaction with invalid offsets size, 2 19:51:10 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000100)={0x4, 0x76, &(0x7f0000000380)="490154aa754076e5f7809ede7b1d96686e3cd765ff37e8a11dd7dac9ecadbf812fdc21cda804a144133e0317997914c6ecd12294f32d81f940ad52911edf8aca97f99cc57325d36641120b759a2a74b5fee94fb91679c2c8a1297191afe937a400057782e83be4b5bd40e56688ade10e0569ae446697"}) r1 = dup2(r0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) quotactl(0x6, &(0x7f0000000140)='./file0\x00', r2, &(0x7f00000002c0)="36922571d860f8cd62329966afe10038aa28556dfc2448813a8d42da696b6bd8fb699851c75847c0a1913513682e97594b8a56969fabf46d8dd48bcc04e686d0e55e97e2181ee0fd4990cc87822ba8d2673fd8944380b41877997321dbc6f8400f23b3458ae8f58ad1f3ccdab31192348fa938e694b0e7bfac44ce4b5c334fb49da7435382b4ed1593") openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000040)=""/151) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) [ 774.189884] binder: BINDER_SET_CONTEXT_MGR already set [ 774.226612] binder: 2699:2814 got transaction with invalid offsets size, 2 19:51:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe00000000000000, 0x400100]}, 0x3c) [ 774.258008] binder: 2699:2810 ioctl 40046207 0 returned -16 19:51:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 774.310759] binder_release_work: 14 callbacks suppressed [ 774.310767] binder: undelivered TRANSACTION_ERROR: 29201 19:51:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) 19:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0x17f, 0x0}) fcntl$setflags(r0, 0x2, 0x1) [ 774.497462] binder: 2967:2989 got transaction with invalid offset (0, min 0 max 0) or object. 19:51:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf00000000000000, 0x400100]}, 0x3c) [ 774.542155] binder: undelivered TRANSACTION_ERROR: 29201 [ 774.575039] binder: 2967:3000 got transaction with invalid offset (0, min 0 max 0) or object. 19:51:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x14000) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) r2 = dup2(r0, r0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000040)={0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 774.634713] binder: undelivered TRANSACTION_ERROR: 29201 19:51:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040)) write$P9_RREADDIR(r1, &(0x7f0000000080)={0x68, 0x29, 0x2, {0x1, [{{0x40, 0x4, 0x3}, 0x8, 0x0, 0x7, './file0'}, {{0x4, 0x2}, 0x9, 0x7, 0x7, './file0'}, {{0x80, 0x0, 0x3}, 0x1, 0x7, 0x7, './file0'}]}}, 0x68) 19:51:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1000000000000000, 0x400100]}, 0x3c) 19:51:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x101, 0x8, 0xff}, &(0x7f0000000100)=0x165) r1 = dup2(r0, r0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x1c3, 0x0}) bind$alg(r2, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0xfffffffffffffffe, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f00000002c0)='fd/4\x00') ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000300)={0xe38, "8747d1b3c3d88a857c90f68c1c856c093b1d2f53172471356584168bd9183003", 0x1, 0x3, 0xfffffffffffffffe, 0xff, 0xe}) [ 774.842110] binder: 3138:3140 got transaction with invalid offsets size, 10 19:51:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x1bacf914c1bae27, &(0x7f0000000080)}) [ 774.917332] binder: undelivered TRANSACTION_ERROR: 29201 [ 774.951581] binder: 3138:3156 got transaction with invalid offsets size, 10 19:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) [ 775.006252] binder: undelivered TRANSACTION_ERROR: 29201 19:51:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1100000000000000, 0x400100]}, 0x3c) 19:51:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0xef, &(0x7f00000000c0)}) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0xd, "2d26aabf79387ff0b7b5d07f5a"}, &(0x7f0000000080)=0x31) 19:51:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) [ 775.236809] binder: 3276:3278 got transaction with invalid offset (0, min 0 max 0) or object. [ 775.279738] binder: undelivered TRANSACTION_ERROR: 29201 [ 775.298674] binder: 3276:3291 got transaction with invalid offset (0, min 0 max 0) or object. 19:51:11 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) mount$9p_virtio(&(0x7f0000000040)='#\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x110000, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB=',\x00']) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000400)) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x7b, 0x0, 0x1, 0x9c14, 0x1, 0x7ff, "003f9e8f45acd6318b68d099b728d0cbf34617e15ce7a4a64cc9440ef1f379c28e91212147971c66cca8f5197297b6d4d0a4d49a4280972af543d532511012503b97ceef32af98edcbe44568f8afc6577fad84b93c606e9165445b7335e1c032d822da1953897091dfa50aabcd4170c0736fa015075f35b6115911"}, 0x193) 19:51:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1200000000000000, 0x400100]}, 0x3c) [ 775.352811] binder: undelivered TRANSACTION_ERROR: 29201 19:51:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:12 executing program 0: lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x50, 0x6, 0x0, "231a93921a556245edf524c2395d3609", "24b46ee189e4b61d18f0835d38bb00028dcb540bb75b4ae4e17a91916c737fa1a5f824e47f6e4f74322dcf95a4a1591ecdcc7b7e33c53317c127a4"}, 0x50, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000603, 0x0, &(0x7f0000000600)=[0x0]}}}], 0x0, 0x0, 0x0}) 19:51:12 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x30, 0x7fff, 0xc, 0x4, 0x65}) signalfd(r0, &(0x7f00000000c0)={0x5}, 0x8) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1c01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1300000000000000, 0x400100]}, 0x3c) 19:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 775.646822] binder_alloc_new_buf_locked: 10 callbacks suppressed [ 775.646833] binder_alloc: 3428: binder_alloc_buf size 536872456 failed, no address space [ 775.667372] binder_alloc_new_buf_locked: 10 callbacks suppressed [ 775.667582] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 775.717353] binder: undelivered TRANSACTION_ERROR: 29201 19:51:12 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='security.apparmor\x00', &(0x7f0000000280)='raw\x00', 0x4, 0x1) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f00000001c0)=0x54) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="0aa0c6012b6dbaca093544f522328ee7d9807c2a86654313c1c2b205a0c0fd95caed4fa7af0d40c96c4b7c", 0x2b) [ 775.754623] binder_alloc: 3428: binder_alloc_buf size 536872456 failed, no address space 19:51:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1d4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1400000000000000, 0x400100]}, 0x3c) 19:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) sendto$unix(r1, &(0x7f0000000100)="94c87982d4f4c1e8e294d996f50d2db23cd05f575cea", 0x16, 0x8000, 0x0, 0x0) r2 = dup2(r0, r0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x5, 0x100) sync_file_range(r0, 0x3, 0x9, 0x3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:12 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000080)={0x0, &(0x7f0000000080)}) [ 775.935481] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 19:51:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x2]}}}], 0x0, 0x0, 0x0}) [ 776.001953] binder: undelivered TRANSACTION_ERROR: 29201 19:51:12 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1800000000000000, 0x400100]}, 0x3c) 19:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:12 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x0, 0x5, 0x3]}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x0, 0x4, 0xfffffffffba1a084, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000040)={r3, 0xfffffffffffffdb5, "636b619f0e2ee09d5f026286e08b77edb81cf99b8cf551af1a881d103ccb3fba078768ebc68f4d3041c92b562f34c991a6d5629640238ee292b75d92171304223757bc5df6dd45640f7be4823d37de2b3dcd98e348de2ab91484ed82389148290ac48df9e59a3dbe4c93035ea266130e6375836e067d37c612ad4dd15600b0bd6d62b110889be4d5cf94cd6a28"}, &(0x7f0000000280)=0x95) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x800}}}, 0x84) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 776.180209] binder: 3610:3642 got transaction with invalid offsets size, 3 [ 776.191358] binder_transaction: 15 callbacks suppressed [ 776.191375] binder: 3610:3642 transaction failed 29201/-22, size 0-3 line 3005 19:51:12 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1ecd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 776.262613] binder: undelivered TRANSACTION_ERROR: 29201 [ 776.288248] binder: 3610:3693 got transaction with invalid offsets size, 3 19:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000018c50ab56200000000000080"]) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="8250"], 0x2, 0x1) [ 776.315989] binder: 3610:3693 transaction failed 29201/-22, size 0-3 line 3005 19:51:13 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) eventfd2(0xffffffffffffffff, 0x1) 19:51:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x3]}}}], 0x0, 0x0, 0x0}) 19:51:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x3f00000000000000, 0x400100]}, 0x3c) 19:51:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:13 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000080)=0x3) r2 = dup2(r0, r0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f00000000c0)={0x8000, 0x40, 0xffffffffffffffff, 0x4, 0x45a64be1}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 776.553323] binder: 3779:3785 got transaction with invalid offsets size, 3 19:51:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x2c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x80, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x8e9, 0x1, 0x0, 0x1}, 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x7, 0x0) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 776.596755] binder: 3779:3785 transaction failed 29201/-22, size 0-3 line 3005 19:51:13 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x210200, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) fstatfs(r0, &(0x7f0000000240)=""/73) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=""/21, 0x15, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r1, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400, 0x0) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x4000000000000000, 0x400100]}, 0x3c) [ 776.667996] binder: 3779:3825 got transaction with invalid offsets size, 3 [ 776.708056] binder: 3779:3825 transaction failed 29201/-22, size 0-3 line 3005 19:51:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x150, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x4]}}}], 0x0, 0x0, 0x0}) 19:51:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x142) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'eql\x00', 0x3f}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffff9c, 0x2403, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:13 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3075, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xffffffff00000000, 0x400100]}, 0x3c) 19:51:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x188, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 776.995589] binder: 3949:3954 got transaction with invalid offsets size, 3 [ 777.021251] binder: 3949:3954 transaction failed 29201/-22, size 0-3 line 3005 19:51:13 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x6) 19:51:13 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x440041, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000080)=0x3) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/181) r2 = dup2(r1, r1) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000180)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 777.072259] binder: 3949:3966 got transaction with invalid offsets size, 3 19:51:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x200000]}, 0x3c) 19:51:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x198, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 777.132808] binder: 3949:3966 transaction failed 29201/-22, size 0-3 line 3005 19:51:13 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x1000) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000080)=""/179) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) 19:51:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x5]}}}], 0x0, 0x0, 0x0}) 19:51:13 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x338c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x200100]}, 0x3c) 19:51:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x1, 0x5}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0x3d0, 0x0}) 19:51:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 777.440225] binder: 4100:4104 transaction failed 29201/-22, size 0-3 line 3005 19:51:14 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x7fffffff, 0xc, 0x4, 0x70000, {0x77359400}, {0x3, 0x0, 0x8000, 0x80000000, 0x7ff, 0x6c, "9e32f56a"}, 0x8, 0x3, @fd=0xffffffffffffff9c, 0x4}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0x9, @raw_data="a8de81c5e7ec18725c8ddd1166eba2947997974492cd854a7470a7e1cd9862e066361a90f6871ef9717a7c37faac58e1caa810b2af808786b15840e7552431a1a3da283a1e1dfd5ebb67385d6f545b439e7407984cc911389a4cf612c27b1fad4292b8c55fb491b7ccf3844ed9928f6e06b069c159816c3fc3b92b133f2e985fd1e4868ff661d72d01a8308ffc4496fa9f200e0a454a1f1499b12831ed94306ef9c7cfa304eef8d74d2a7e0e8a5c8932ecef4e71212a95818eef270c8eaebccc7627e620caf2ddd3"}) [ 777.523137] binder: BINDER_SET_CONTEXT_MGR already set [ 777.528816] binder: 4100:4124 ioctl 40046207 0 returned -16 [ 777.529212] binder: 4100:4133 transaction failed 29201/-22, size 0-3 line 3005 19:51:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a8, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 19:51:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x210100]}, 0x3c) 19:51:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6]}}}], 0x0, 0x0, 0x0}) 19:51:14 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30) ptrace$getenv(0x4201, r2, 0x81, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:14 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0xdc11, 0x101}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0x8, 0x5}, &(0x7f0000000200)=0xc) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup2(r2, r2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000000c0)={r4, 0x0, 0xffff}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 777.870357] binder: 4249:4251 transaction failed 29201/-22, size 0-3 line 3005 19:51:14 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000080)={r2, r3/1000+10000}, 0x10) 19:51:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x220100]}, 0x3c) [ 777.943749] binder: 4249:4355 transaction failed 29201/-22, size 0-3 line 3005 19:51:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3a98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:14 executing program 0: r0 = socket$tipc(0x1e, 0x6, 0x0) signalfd4(r0, &(0x7f0000000040)={0xff}, 0x8, 0x800) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x356, 0x0}) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0xfffffffffffffbb3, 0xb, 0xc0, 0x4, "c558977fcdcc4bf55fe845551c2f574610e21ae3c5e0a475ab6a386514fd8558"}) 19:51:14 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7]}}}], 0x0, 0x0, 0x0}) 19:51:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x230100]}, 0x3c) 19:51:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0xfffffee8, 0x0}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x4, 0x1d, 0x8, 0x9, "561bd79bf7d6308ca794fd5eae57985917802a6a25c272a54fb6a1172b7da238"}) 19:51:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3c02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:14 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000040)={0xffffffffffffff7f, "2047e0f636554d5edc327e6a337167104dea9b75e78156604694b33b78ff46ea", 0x1, 0x20, 0xda, 0x13f7, 0x6, 0x1, 0xdf2, 0x8}) 19:51:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x240100]}, 0x3c) 19:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) 19:51:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x8]}}}], 0x0, 0x0, 0x0}) 19:51:15 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) sync_file_range(r0, 0x4c, 0x3ff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3e00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:15 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = getpgid(0x0) r3 = perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x2, 0x21, 0x1, 0x3cb6, 0x0, 0x20, 0x0, 0x1, 0x800, 0xeb, 0x1, 0x101, 0x7f, 0x7fff, 0x9, 0x1000, 0x6, 0x5, 0x7fffffff, 0xd3b, 0x2, 0x6, 0x7, 0x4, 0x5, 0x0, 0x3, 0x7, 0x0, 0x3, 0x0, 0x3, 0x9, 0x80000001, 0xfe, 0x8000, 0x0, 0xbe1, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x80, 0x1, 0x7ff, 0x0, 0x3, 0x2, 0x4}, r2, 0xf, r1, 0x8) r4 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3, 0x10000) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000140)={0x4, 0x49a44485, [{0x1ff, 0x0, 0x6}, {0xfffffffffffffffa, 0x0, 0xc812}, {0x8}, {0xffffffffffffffc1, 0x0, 0x5}]}) ioctl$KDENABIO(r4, 0x4b36) 19:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x400840) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x322, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x50) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000280)={0x30, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000200)=0x4, 0x8) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz0\x00') 19:51:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x250100]}, 0x3c) 19:51:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x48]}}}], 0x0, 0x0, 0x0}) 19:51:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000020c0)='io.stat\x00', 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000002100)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002180)={0x0, @in6={{0xa, 0x4e22, 0x9c, @remote, 0x1}}}, &(0x7f0000002240)=0x84) prctl$PR_MCE_KILL_GET(0x22) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000002300)={r3, 0x41, 0x0, 0x7, 0x40}, &(0x7f00000022c0)=0x18) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000040)={0x3, 0x0, 0x2080, {0x7001, 0x4000, 0x2}, [], "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", "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"}) 19:51:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:15 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x8000, 0x400000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000080)={0x1bacf914c1badbc, &(0x7f0000000080)}) 19:51:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x260100]}, 0x3c) 19:51:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x4c]}}}], 0x0, 0x0, 0x0}) 19:51:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80000000, 0x608000) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000080)={0x9, 0xd8d2}) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000000c0)) 19:51:15 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup(r0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0x1}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) [ 779.151479] binder_transaction: 11 callbacks suppressed [ 779.151491] binder: 4796:4888 got transaction with invalid offsets size, 3 19:51:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x10001, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r1}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x2, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x428) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r4, 0x2}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:15 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x270100]}, 0x3c) 19:51:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x60]}}}], 0x0, 0x0, 0x0}) 19:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={{0x1, 0x1, 0x6, 0x4, 0x3ad, 0x200}, 0x3b}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x478, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:16 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) fcntl$dupfd(r0, 0x406, r1) 19:51:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 779.497040] binder: 4993:5027 got transaction with invalid offsets size, 3 [ 779.531803] binder_release_work: 17 callbacks suppressed [ 779.531811] binder: undelivered TRANSACTION_ERROR: 29201 19:51:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x280100]}, 0x3c) [ 779.545827] binder_alloc: 4993: binder_alloc_buf, no vma [ 779.554281] binder: BINDER_SET_CONTEXT_MGR already set 19:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0xffffffffffffffea, 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x33, @dev={0xfe, 0x80, [], 0x18}, 0x2a}], 0x1c) [ 779.624795] binder: undelivered TRANSACTION_ERROR: 29189 [ 779.630943] binder: 4993:5027 ioctl 40046207 0 returned -16 19:51:16 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x501, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r3 = dup2(r0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x13f, 0xf}}, 0x20) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000240)) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xd5e) 19:51:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x290100]}, 0x3c) 19:51:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x68]}}}], 0x0, 0x0, 0x0}) 19:51:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000100)={0x0, 0x0}) [ 779.873549] binder: 5165:5166 got transaction with invalid offsets size, 3 19:51:16 executing program 1: r0 = gettid() ptrace$setregs(0xd, r0, 0x5, &(0x7f0000000080)="f59e003676bff584fba0d809fcd4456ebd5f0122de2710c9ac9e8f510fb5e673906e") r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 779.922632] binder: undelivered TRANSACTION_ERROR: 29201 [ 779.948120] binder: BINDER_SET_CONTEXT_MGR already set [ 779.969812] binder: 5165:5181 got transaction with invalid offsets size, 3 19:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2a0100]}, 0x3c) 19:51:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:16 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xd3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @multicast1}}}, 0xffffffffffffffec) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) [ 780.020062] binder: undelivered TRANSACTION_ERROR: 29201 [ 780.020084] binder: 5165:5179 ioctl 40046207 0 returned -16 19:51:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:16 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6c]}}}], 0x0, 0x0, 0x0}) 19:51:16 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000881a17709b7b70d2a179ed77162e11dd0200000000000000cd3578bc8017", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0xffffffffffffff38) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x20000) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f0000000200)) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000180)=0x5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0xfffffffffffff800, @empty, 0x7}}, 0xfff, 0x5, 0x3f, 0x72d, 0x20}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000380)={r3}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x3, @loopback, 0x3}]}, &(0x7f0000000140)=0x10) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000240)) [ 780.258256] binder: 5306:5310 got transaction with invalid offsets size, 3 19:51:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2b0100]}, 0x3c) [ 780.306162] binder: undelivered TRANSACTION_ERROR: 29201 [ 780.332509] binder: 5306:5382 got transaction with invalid offsets size, 3 19:51:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 780.382676] binder: undelivered TRANSACTION_ERROR: 29201 19:51:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4c1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x74]}}}], 0x0, 0x0, 0x0}) 19:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xffff, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r2, 0x7b}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2c0100]}, 0x3c) 19:51:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) [ 780.580020] binder: 5438:5440 got transaction with invalid offsets size, 3 [ 780.598887] binder: undelivered TRANSACTION_ERROR: 29201 [ 780.619380] binder: 5438:5463 got transaction with invalid offsets size, 3 19:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) [ 780.663922] binder: undelivered TRANSACTION_ERROR: 29201 19:51:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7a]}}}], 0x0, 0x0, 0x0}) 19:51:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x80000001}, {0x3, 0x401}]}, 0x14, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2d0100]}, 0x3c) [ 780.883089] binder: 5565:5571 got transaction with invalid offsets size, 3 [ 780.921926] binder: undelivered TRANSACTION_ERROR: 29201 19:51:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x980, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 780.932289] binder: 5565:5581 got transaction with invalid offsets size, 3 [ 780.964564] binder: undelivered TRANSACTION_ERROR: 29201 19:51:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2e0100]}, 0x3c) 19:51:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x300]}}}], 0x0, 0x0, 0x0}) 19:51:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c, 0x800) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e24, 0x5, @rand_addr="775163bf3d171263b419dafe9b461c99"}, {0xa, 0x4e20, 0x0, @remote, 0x18fb}, 0x5, [0x2000000000000, 0x0, 0x10001, 0x3, 0xffff, 0x1ff, 0x100000000, 0x100000000]}, 0x5c) r2 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000140)=""/111) setitimer(0x1, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$FIBMAP(r2, 0x1, &(0x7f00000001c0)=0x1f) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x200, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000200)=0x1) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000100)={0x3, 0xfffffffffffff55f, 0x40, 0x3, 0x6, 0xf04d, 0x200000007f, 0x1, 0x0, 0x2b1d}) 19:51:17 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x2a2001, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x40000) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0x200, 0x50000}}, 0x28) r3 = dup2(r2, r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x5001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2f0100]}, 0x3c) 19:51:17 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xbb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x500]}}}], 0x0, 0x0, 0x0}) 19:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0xfed7, 0x0}) 19:51:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 781.376434] binder_transaction: 20 callbacks suppressed [ 781.376451] binder: 5725:5752 transaction failed 29201/-22, size 0-3 line 3005 19:51:18 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x300100]}, 0x3c) 19:51:18 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x9, 0x309502) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev={[], 0x24}}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup2(r2, r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:etc_t:s0\x00', 0x1b, 0x3) [ 781.477761] binder: 5725:5832 transaction failed 29201/-22, size 0-3 line 3005 19:51:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x600]}}}], 0x0, 0x0, 0x0}) 19:51:18 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) pipe(&(0x7f0000000140)) r1 = dup2(r0, r0) poll(&(0x7f0000000040)=[{r0, 0x9000}, {r0, 0x3400}, {r1, 0x201c}, {r0, 0x424}, {r1}, {r0, 0x524}, {r0}], 0x7, 0xffffffffffffffe1) bind$ax25(r1, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) pipe2(&(0x7f0000000080), 0x84800) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x8bf, &(0x7f0000ffc000/0x2000)=nil, 0x4) 19:51:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 781.669206] binder: 5893:5916 transaction failed 29201/-22, size 0-3 line 3005 19:51:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x6400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 781.719422] binder: 5893:5962 transaction failed 29201/-22, size 0-3 line 3005 19:51:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x310100]}, 0x3c) 19:51:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x700]}}}], 0x0, 0x0, 0x0}) 19:51:18 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x200001, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000080)=0xfffffffffffffffe) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 781.946372] binder: 5980:5997 transaction failed 29201/-22, size 0-3 line 3005 19:51:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x320100]}, 0x3c) 19:51:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:18 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) chroot(&(0x7f0000000040)='./file0\x00') ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 781.998258] binder: BINDER_SET_CONTEXT_MGR already set [ 782.017586] binder: 5980:6091 transaction failed 29201/-22, size 0-3 line 3005 [ 782.070504] binder: 5980:6090 ioctl 40046207 0 returned -16 19:51:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x2000]}}}], 0x0, 0x0, 0x0}) [ 782.260268] binder: 6174:6202 transaction failed 29201/-22, size 0-3 line 3005 [ 782.284429] binder: 6174:6215 transaction failed 29201/-22, size 0-3 line 3005 19:51:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40, 0x0) r3 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x10000, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e23,cache=none,dont_hash,euid<', @ANYRESDEC=r3, @ANYBLOB="2c036d61636b66736465663d2976626f786e4ab84349c44f46d80c20e3e69784f2657430402c7375626a5f726f6c653d5c7b27757365722c66736d616769633d3078303030303030303030303030303030312c61707072616973655f74797065", @ANYRESDEC=r4, @ANYBLOB=',fowner<', @ANYRESDEC=r5, @ANYBLOB=',hash,\x00']) 19:51:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) dup2(r0, r0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x399f1336, r2}, &(0x7f00000000c0)={0x3, 0x1, 0x6e, 0x9, 0x8, 0x20}) 19:51:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x6dc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x330100]}, 0x3c) 19:51:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x4800]}}}], 0x0, 0x0, 0x0}) [ 782.594998] binder: 6222:6223 transaction failed 29201/-22, size 0-3 line 3005 19:51:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000080)={0x0, 0x0}) 19:51:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 782.696604] binder: 6222:6283 transaction failed 29201/-22, size 0-3 line 3005 19:51:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x8, 0x80000) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f00000000c0)) r2 = dup2(r0, r0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x2, @local, 'teql0\x00'}}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000280)={0xdc, &(0x7f00000001c0)}) getsockopt$inet6_dccp_buf(r1, 0x21, 0xcf, &(0x7f0000000100)=""/51, &(0x7f0000000140)=0x33) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x208200, 0x0) 19:51:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x340100]}, 0x3c) 19:51:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x7530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x4c00]}}}], 0x0, 0x0, 0x0}) 19:51:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x9) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000440)={0x7, @raw_data="faaf1fa7a5458f5a1a42ddc6de18caca5930cef1aad4c8448bd2b34b53426fdefcd7f26554b40690a9eabd3045001aea9ceb31c2bfb178e18cbba3073a1ecd71154be0ce5b7d601beb70fef7d9e7d36f2a38ed362af8721a530b32ca5cd9f186c483806a52dbbf72b2d60e038db4e31bc7b832adcadab6570d1d8c71b379ad9d0352ad2f2d041096b2631edc4fa836bb5380558db6f3d008b6d4536c10b1127b18209c3ddedaad344f352431d6f518d4983fb6fdb73cbcdb3d72062051742e2fb9bf6c475ca03fe8"}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000380)=[0xffffffffb5be0a79, 0x3, 0xde, 0x100], 0x4, 0x5, 0x4, 0x6, 0x100000001, 0x0, {0xe000000000000000, 0x57, 0x4, 0x0, 0x6, 0x400, 0x7, 0x3d, 0x7, 0x7ff, 0x0, 0x4, 0x8, 0x0, "b2a291ee26f9733d4a1591a949623f4779dc3cb5080c3048ee298d5ede711015"}}) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x3, 0x96}) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000100)={0x0, 0x0}) keyctl$set_reqkey_keyring(0xe, 0x7) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7890}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x308e756c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x68f2a5dc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe1e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffe}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb9d}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x15c}}, 0x8c0) 19:51:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x180, 0x0) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c01, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x350100]}, 0x3c) 19:51:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6000]}}}], 0x0, 0x0, 0x0}) 19:51:19 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:19 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000000c0)={0x3, "b9cebec52cbaaf28e7ac7aa4fcfeb67acd1140679909d276546911414f439910", 0x7, 0x1672, 0x9, 0x5, 0x10, 0x0, 0x8, 0xd116}) 19:51:19 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e24, 0x3, @mcast2, 0x6}, {0xa, 0x4e22, 0x8000, @mcast2, 0x7}, 0xfffffffffffff800, [0x80000000, 0x45a2, 0x80000000, 0xd2, 0x1, 0x1, 0x4, 0x3ff]}, 0x5c) 19:51:19 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x360100]}, 0x3c) 19:51:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d4c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:19 executing program 1: socket$kcm(0x29, 0x5, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6800]}}}], 0x0, 0x0, 0x0}) 19:51:20 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x216f, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x370100]}, 0x3c) 19:51:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000580)={&(0x7f0000000040)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="88e1a631585c825718001d421fe7dd3ece57ce39ad4c5c635f90e20a78c83de8920e7ca2184c8e05a0b37734704a817e2431f25653e8988455df0ebd106a22c4dc3e1ebe6a85501f44d712b321a3af6bec09f1ffeda88f183b1b9ab5f2914ac41496bb956a4893706c15ef34c0e707e89592085953667426a499212acd4ea28dabe9c1cdea635635f4", 0x89}, {&(0x7f0000000140)="004680aad2a26e15cbc42e5c5d83ff", 0xf}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="c30370695549998b8498c10cf5a2369040f4cbd27b08635405858c825d4160cd36661dd781d245569a1febcda57cb694e41715162fe5f4d1bb3db4a7fe96a4b96923e0c08151c72bffce4f8212a9a955cc946010d7567bab002fa9877a0700f881755f9234a563dfe2e33d184bc2d0d34d30ec0a657c663eb085103a4d708d6555f7e6030b28cace1b0a49994e4c2d6179835e78018570f27e7e32f62c28922084d764b0afd0a71f25c2ed820a5eda473491d7e3d5bbac6f9c1f7f065ec8679410e953d61dca2ebe9a38ac616fa49390f96fdad37a7b4313", 0xd8}, {&(0x7f00000002c0)="3b53ea0d2d3c01d76b5e509c58e414554ca6807694406b4c19324ffbae2d66bf51ef69fa4965e39bd6c045ad32cb766519f280ca6d6d342ab7ec60d82e54f9995c175c9c9ddef3f8e9", 0x49}, {&(0x7f0000000340)="807917cff5ad8f901201ec571d841bc0565bc3d2956eaed90d4db3d5db42ea941db867b859a4fc4c1e877a6347598b233e8068df91d15542baf41ca7f54dce0d9d39c056e11a095e5592239d77e3b6bef35c5c6b521881224baf9285567f3998425bd9fad50e09714d154d43", 0x6c}], 0x6, &(0x7f00000004c0)=[@authinfo={0x18, 0x84, 0x6, {0x10000}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x1ff}}, @init={0x18, 0x84, 0x0, {0x3, 0x7, 0x100, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @authinfo={0x18, 0x84, 0x6, {0x74f151ca}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8, 0x3f, 0x2, r2}}], 0xb0, 0x240000c0}, 0x4c004) 19:51:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) sendmsg$rds(r1, &(0x7f0000000d40)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)=""/156, 0x9c}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="580000000000000014010000060000000700000002000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000"], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000015140000000000001f000000000000000000000000000000480000000000000024ffffffffffffff18000000000000001401000002000000070000000800000018000000000000001401000002000000019cf521222307a266eadb67e50f00000009000000480000000000000014010300000000004000000000000100", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/197], @ANYBLOB="c500000000000000", @ANYPTR=&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/59], @ANYBLOB=';\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/173], @ANYBLOB="ad00000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/222], @ANYBLOB="de00000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/248], @ANYBLOB="f800000000000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB='\x00'/136], @ANYBLOB="8800000000000000", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00'/117], @ANYBLOB='u\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB='\x00'/166], @ANYBLOB="a600000000000000", @ANYPTR=&(0x7f0000000800)=ANY=[@ANYBLOB='\x00'/209], @ANYBLOB="d100000000000000", @ANYPTR=&(0x7f0000000900)=ANY=[@ANYBLOB='\x00'/254], @ANYBLOB="fe00000000000000"], @ANYBLOB="090000000000000001000000000000000300000000000000580000000000000014010000090000000200000001000080", @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYBLOB="ff7f000000000000"], @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYBLOB="0300000000000000"], @ANYBLOB="04000000000000002f910000000000000500000000000000010000000000000000000000000000000800000000000000580000000000000014010000070000000500000000000000", @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYBLOB="cf70000000000000"], @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYBLOB="0600000000000000"], @ANYBLOB="070000000000000000000000000000000000000000000000040000000000000040000000000000000800000000000000"], 0x180, 0x40}, 0x4040000) 19:51:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6c00]}}}], 0x0, 0x0, 0x0}) 19:51:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2265, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:20 executing program 0: io_setup(0x800, &(0x7f0000000040)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000001080)='/dev/zero\x00', 0xa000, 0x0) io_cancel(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x7f, r1, &(0x7f0000000080)="fe57e1116d31ec4d74dc387264ff0c6a7a607f8d7805a3838c0e3f4f729f5349162478fd4f8932c5b9c0c843d07fe802164f5ad18ba65bdf5b57f648ce38f00240b8a5513c82ad7693464546b7aa71b4023e9357d1f4c2c53d578d25e04efe507776017d8bde4eb30701da014c57bb84afb5a98c711ff92e80cb7678891476d7249e32c5659d468226a28dcefef0d7b7a61fbe2ca6f40e4fc8f0940f775765f420f5dfb04e5434b414080f64f5477a4f3ef44ceab752a2236e5bf357931c71b53f33c0703dd138633e21b19e43812c103be59a8dc9dec84decfc327890d630e5e845283f5693db168f3b60763d4ef27f9663f15cf5476c13f1cbb8d3fee228d09a13098e8cc1dbd6301983e2b7d837b01375bc2cd83a00cf562a1f6f161ede941817ad0cb273a7d862295fe52d1adf18f948dd314146b179ab1ba8552030f43e20f76d8276ca795fde4cc34f694e6c6d2efa19bab119430f0268a7f1a5f3f7cd23f90434dc793228ced175ac239cae2ff96c0fb65de4885d69cfb9394d119031324bf019c31fa45c0df4016fb28f9cf2c09a9d426cbcdf17993da177d26b96750a1606653fbc886b69479fd3417ef9110323e223285595a7909943395bd3304bb549d35ab7722bb0c7936f0e1d32ecfc8b7259387daf37c53ade6a433e6bcc39064c4195cd52320f75d9255cca1afb838cd8aa65b3d1b59921f6c7fc6b3b13af07159fb16950cc69f490f04ca7077d93f870ef8b2b81e2fef937bbe9cc92401dbf72ceae32440f09d02d5177f29aa7199a25cfe50ad56622f51436dac4f8f94bd51b95ebf5b7083599810355677dfbbc70fc4b3c80280dda18c259f761bb7b6bc50f0b87eb9e67b8ec3bdb0bf1b15e722ea3867c3a7ffcbe370d20e84b77e5c553716a5f4090aa421e311289b93614a6818d1c7bbf1ffeffb4033dcfa7a392dcaa66ebdac51933735dde835822432099b49d6ed75a0281c5c2f76d80223fcf708705a16e0177099ca96a9b8f911758df005fd54579b1a1ab7c3e0cf9229409119abd38bed6c3315d68c7ad683415227358c479e789dca2faff0ae89db4300f1b796c88f9bae886caa1315abd44e58b52a3540056030b743ac4e7e8846818bcbdc6b9e12d5c63e4201fabd6ff6bf8a37b0259ff978cfb92fb0502a5e24e2280905ec3642679e6ebf55e558b7328b6778faec6778a3262caf900515401378f4e95cf7a8bd7fe5cff3df39ba410d0996c8ee0823ce3c2eb6dbee20babf22ad046768adbb039f0e1585fe896f34e022b8fde0e31a3aca6f109555dc78733baad75349dee0f9246387fdd4c7753a61e1311c0d6c4209df4082935dc04d0284c19114492b9d24a518c2b4f9638a4911cd16fc8dd97bcff5389d4726b63a3e8a121488b2bf17899651e0daea07dadbf88bf86caab3800a47bb5dbcb9b093f7fd4ca8b2d895e2ab8a311470c429fdd291cad41123f5b8fb04e4f8f1663e56bb5917431409b77afb7c92fbb3cce34f506b75515472f1ff15edc93291eff8aee146a3731a9c744efcdeabe0a07d52a5f70fc49a60d69092818f72e7f0deb2552f6af3c667fa54e78e0dbfecbbe89f19dfb08b5224605bf05b658e05af875ae8570a310b62c01af306f28d1f43eeb34839e8dd1e9e19c59c1ba0e56044d741e70b846fc7765faa41d9863ae26a3d7601ceeb0b56ae530e92b90bb5413979fa66fb462997ed6d0e14b0c3b5bc11671b710c2daaa8c3fe719360dca4e4b625db720ef080296c33a48f7fd8ffdcbf3a47eec5c1fb5c8c919486d38b8641ec1b2de4d54621b9b31319713c5beae2838aa1e6261c3f56340cbf73685bb25d60a04af1fff69eb1ec818e1ca912758ec3981fe74fccce954329f70bc29696ada377ada2d179ac166af0567dec7220ef191e6acf2232a8cab8a6e412c78a98db90a11bec814a00b651f79f103e2007df9213f46e297dc3a8e0ad3a5a47ceb503990a672760514c472e800e7ec61193d017aa44caef069468bb9850146bd6abbcdf9419116d1c00d6248a4007f3aa0fa4c62a3ff92996ebe8c262c712f4ffa2ea827f42b61547dff4a3a5fbbc029ecba92063344b6404dce285f590cc50df7a91aa4221caa3a922121161b985226ef22ad34f95106231a98e1a5f5ddf49dee995329ba2bb1a70a94e965b729dab37138416a3905856b6873db72f6523407cee8e4043d7b47ae7bd439f5fa9d428712e6756d43a8413cd0d9b3fc60d4e11d1bfcca589c24e7151e14757f23180a224776197bb5289ab6d7218b12e8050c597dfdd98c9a252cc7edb6b934e998fad08af199fba9efe8e4c1e11ea47b08a2513290945c06aafb730b0d7b2a81835d6daba78d07c49b782d5b290ca208f146c9f5425c0104936118289bf053fd74ce317c75c2a324a101131b671bcb51cd1977691f083888f5f541d5d53e3274a4520b4ec5ed321992276a09a04650f96572190a47b308b5b8b55a5103fa290e8a7ceedfece705d8a5ba370c7b02bd70dc52617cf37021536a094d2092fddb491275574c153c2a89d619625c747a1a4ee3b9960884d0e110a9b9e704e74aac54415e70638ffe55bc4e3d22590714210f30ab0cd65e49d22563974a3e679ded4457d1701be7f06ed6898106cbe6de8ec79051c3866538cb59037cfdd27353bda9fbcbcb08a63684abfd87f0bd51f6842c201eb5f561fb9eabc9ef52cfe0aa36864599caaa1eca155b7aa7c75d5f3f1a9b3eacc6d886df08e2f2b313eec1d91109e6b968d7e7d442aef7b68ca5d4255e952aed78be3580d462edb5a11f808694bd54b01af56240477e6b8dd17b64df12d719203e5b875693a48f983b2f7b884637e5c68b560bc1575463a91ea0ddbc802a5548e7a9ade62996ef777b456fc3a7bdf017f35cc9561421e503780cacb8294c79626f86f43d3056eb2a9762a7aed9d60f0ca6519a8b0326c7e907b62c46a4b91a4f56197d3320726788cf437a1e2fb961569a2f839242242b87b2e21f0c92ca39f5c00a6e10aa9a88308c9bb44c96b7a244c2fbc8d071d1de6ee570ade5490fde0399b4edab74fff2ac02c4f647f0226ea7309b6ace3e46ec05c02c83dc0a0b6762b5c77477663a4290c5dcd3df6333a560f33df10195307ca98a357ad3c11616403666b1736f68dabfa3425f090ff68ffa7769583129c44ad176833d25019d60a6e2aa8abf47f179de98dff68e60953587cce5e98e1a2e1dbcf3653b1d90387daebcceb20cc6eab67cd2b99031baf5f986c45c6c500bca970292e2603b1574d76781136402df091727d94d4ade2cce9e84b035732656c37d553437a8f7a83e482816ed05a240bcdb213b0ab156552f35082e4300830cc62c9e954a46378e0b0cc3d38e9fa5e5ad2e79a745e0fa56a5409141d646999981b3eb8d0115ce9b7971384c47cbaae11b8bc673ccbb593a8b6e4e6728b34268c23c15050ad8185621ce7b7e8ee43df4a2de374327c9712162ddd87d9cb7e34ef0bc485bacba61a6f38468e65976bd5a98ad797bfd88377dbce1e249dd9d351f6cf0ca7cf439e4352f1444f0d864f6ddf2b39da1562d74ab46372a5001759f1ac299413cf81f11299e41fc5f52c5f1700de230aab53e4c2777f1e686a3a2f5bbbda04221a6dfefc6e4e27145fadc40b2f87f39221269f5f86a25f15de454ab804a97e9a33d2d5cb645efdce0378b07cbe55bb984afc0ef2f8d05d47e22af5df7a465f9c218c73280aa771cb2db292a19fc3ea8e4040eeef57e23001f9de5b3c6cab1a68554fd0a47cf07af17361477ef84ac4b4d34b0efa4aa86188ae7d2cfd0a804927da013601355dac467e45cd4b5cf4b0b59802807d2b87868aa012027612029911962345c3c5a579ee2ecac627ed62048e410f8501949384763ae29e78f390692ea29e3d2475bc07b96368811351218f38f733b2a07a4d745e05ba7a33ccaf773c92433388013a9ecf2c578dbda5c525e1d0fd88245ceff353a51535b21edb76c65248900633eb8284d3817115e957d448480afeee555df5ada9d2b0604fdc9f6bc60386a935910079ce7a49b9dfa292fc899cc8df2ecccbbc2c9c6a635e8a24e1ec0cd5127ad3cc2a2312f7647ae2038b35349822879313b791e2b35f4b1ffd08b45402363cce6a513839fc4bddef18af4cf3329d8e653b8e48b5c6a3a6cdae083f62c582eedd29c058f89138babca3f9c2ff6688f485e08086868699ae26ee056a0b7b713de7b4bf74aa706d49099d1d6f95d8b027ceb9874298645e332c2ae4af9de93ca8a81848f2f590a031aff7a5ea5831d5db5a927a34979f1d471271efd688b914bd52055d3c4989c461b013b9b9295549a5eec2788a9a9c6cb96a5ae0bd8707f76ca36e58eb00faef3cf66336aee5c06bc45200106ea6e367e4e60f939be64e51dfa9acf323f9409f9b89a6a4dead5e4b1cb8361091186be5d363c6528e7abf52c34e82c0d88ba37b418194d035d0cf5c81994c3654526ea34e8f041de92420f670bea7635565fde2d74eb21e3f43b388d88be4389672f1f0e54c794c8212ce96fc8c334f07092285096265f9043e55be633c151bfb5ec81b8f1a58d5864617713066410e331928165d98a52e5648ead3537de9be8dcfd6ed085361e25d303a45a092c03ce88a176ca8f7d10e2fae8833e50a20c6c61fe29b308ac7d1a71069673377a100c001d2ec01f7c809e266f5d4ac33dca57f4ecfabc70ac1b9ed0efd2aef1fccf14350b279decdf89be03298ac8ae129a94b8989ee7fa61515c4dc0a3617dc0b7378ffca3489641f06c74e86b8af5407a2bdae2d1d3f12c638f802355f75ab8762782ed611bb0945974006af1c32b69227e61e3dc256b847f728c5d70348042e1fb7d578580b12d75c28e8128654665c514615c64dbf76aa8811c5fce929e905a2a2d02cc1a38848f2e94af1ed63c8385fdb716c811f3e4441f5e940d0923f56482ee2b342fd82959e0a1e789f04442de2f0f66863364aa16982587f17a1bdcf21e88a0bb4cc2102bee58fddc8baec2118e2bf3dce3a56f00060e53167010eda89cf57589d57e4749ac10da95ded13f82797469b8102f00d22055dd833cc50f3415fefac08a56418214fb5bf14e9a8a71f89a7aef59609b2a839d97f3154a33a1c9edc29bb8e774c0f7df6b1e590ba46401b080d01470b43f58f7063340aa4a143fc47628ecd52cc7f525d5bdb3e381401fd149b9f7c15ea032e57fe0bbfa11f8d28d0fd7ab8c9eee6ece931ab5558148cc6ab3d5d3e1aa663326749f23ff169804a86a561c7562b7925700109a15ff996bb1ec5f02569dad77da89db52be68900eb8eecae02a40e8a22c535d269ee65baaa9d95f1d201a08ec23b14e94dbbb78348eee94fa1e858e0ad35e147a385f65594da8af101357d84c1a426ca44ee3b2812053447209040043ec6a394a3162ac5e88772d7b7b0ba0ad0d88ed9c43e123b40bf6ce929b82e636af0312ba1a60f711136ccb46c175675618a0b6fb7b9d58fa9a10457ed7707d246b20d543b8569f03c81776a364648f32fd76de55d31cb0641fde41ef91f15266c85550f77e75a1092bbe329999f0ca97e5f784afb0b295752bf9e7a6d74b1da35b6f488ece94a6b06b2bf7d10dddfa3c2f72f497760cb9d7c80dfc6c15d117db1c92fe9463794272e7793e4749d9f138b5acf86a528b271b5812070f97b011aee1cc4d07bce1e6f1f295143665aab275ff9c88dd687fe2d8012e59114a96dc976d4b1695faa0cfd991f3c98b65c707aa69a1f0b20a928a935c1ac2e794a3866cfb3918a9", 0x1000, 0x80000000, 0x0, 0x1, r2}, &(0x7f0000001100)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup2(r3, r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getrandom(&(0x7f0000000080)=""/247, 0xf7, 0x1) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x2f, 'rdma'}, {0x2f, 'cpu'}, {0x2d, 'io'}, {0x2f, 'cpu'}, {0x2b, 'rdma'}]}, 0x1a) 19:51:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7400]}}}], 0x0, 0x0, 0x0}) 19:51:20 executing program 1: accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x80800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @null}, [@rose, @rose, @netrom, @rose, @bcast, @rose, @default, @netrom]}, &(0x7f00000001c0)=0x48, 0x800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000002480)=0xffffffffffff8000, 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup2(r2, r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x380100]}, 0x3c) 19:51:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8080, 0x0) getpeername$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@rose, @remote, @default, @default, @remote, @remote, @default]}, &(0x7f0000000100)=0x48) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000380)=""/99) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000004240), &(0x7f0000004280)=0x4) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000140)="31f089480ec65e2d73279549be1839f9fd1c68617c728869f22ee9d925d29163e35bdeea00568689280f9ea0db4fc276aee2bffa9df137034d34c30405a0f831bd48d861c34f0f31a7cb83c22652b0842f6e6e38523abfb2ef8131d198532b572937990b84fbd04bfb81df7ab04cc1853d") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0004000000c7f441398cce5b67d0abb3007502f5efb76cf008ed820043679308fddbdf250800000008000600ff7f0000030000000800000060a859ce4039"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) 19:51:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7a00]}}}], 0x0, 0x0, 0x0}) 19:51:20 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{0x7, 0x5, 0x2, 0x35, 'syz0\x00', 0xfffffffffffffffb}, 0x5, 0x62, 0x0, r2, 0xa, 0x400, 'syz1\x00', &(0x7f00000000c0)=[',\x00', '&\x00', 'mime_typewlan1\\\x00', '#-mime_type\x00', '\x00', '+ppp1mime_type\x00', 'vmnet1keyringwlan1md5sum\\#ppp0em0:\x00', 'vmnet0*+vboxnet1+keyringselinuxcpuset*,)\'posix_acl_access\x00', 'vboxnet0\x00', 'mime_type-+\x00'], 0xa2, [], [0xffff, 0x0, 0x4, 0x3]}) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3075, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x390100]}, 0x3c) 19:51:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8c33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:20 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x40000) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/227) dup2(r0, r0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)=""/38) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) [ 784.252810] binder_transaction: 21 callbacks suppressed [ 784.252822] binder: 6885:6886 got transaction with invalid offsets size, 3 [ 784.388694] binder: BINDER_SET_CONTEXT_MGR already set 19:51:21 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 784.411684] binder: 6885:6903 got transaction with invalid offsets size, 3 [ 784.428460] binder: 6885:6902 ioctl 40046207 0 returned -16 19:51:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3a0100]}, 0x3c) 19:51:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3400, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:21 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x100000000, 0x800) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x33e49060, 0xc9, "329ab061fbfa13819063d8afa188ad9b909281051525846f0178b2635cfb7530e7842b39fc0e0c40f009a5377dd2721b5002330644b1eca99e2471d721a41776bb33aa479547e6219303f8874dbe03ee1e6c10f54a0ba0c67b5bc63cf55757c73d051c97aca279024baf102b87cbfaf5e8e423941a5ebda4b7c25e8d7b192b115487ae6a5d388f7b4127530cdb50f0b29a5ba4e5413ffe63ac5a0ab522094424614f53c8fb9ee9d699198f59e9300585182c9b8a73be1321a29cbec00a622c83e1f2fc58ad21cf3e7f"}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:21 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)=0x1) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x1000000]}}}], 0x0, 0x0, 0x0}) 19:51:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) fsetxattr$security_selinux(r0, &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:hald_dccm_exec_t:s0\x00', 0x26, 0x1) 19:51:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000000)={0xfffffffffffeffff, 0x1, 0x5}) 19:51:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a98, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3b0100]}, 0x3c) [ 784.769017] binder: 7039:7040 got transaction with invalid offsets size, 3 19:51:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x9801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 784.860765] binder_release_work: 24 callbacks suppressed [ 784.860772] binder: undelivered TRANSACTION_ERROR: 29201 [ 784.878299] audit: type=1400 audit(1555789881.477:322): avc: denied { relabelto } for pid=7159 comm="syz-executor.0" name="HIDP" dev="sockfs" ino=151691 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hald_dccm_exec_t:s0 tclass=socket permissive=1 19:51:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x10001, 0x106000, 0x0, 0x0, 0x2}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x402, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x101]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x26, 0x2, 0x2, 0x80000001, 0x40]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @broadcast}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r3 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 784.921339] binder: 7039:7163 got transaction with invalid offsets size, 3 19:51:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x2000000]}}}], 0x0, 0x0, 0x0}) 19:51:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x117, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r2, 0x80, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}}, 0x118) prctl$PR_SET_FPEXC(0xc, 0x10000) [ 784.968293] binder: undelivered TRANSACTION_ERROR: 29201 19:51:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c02, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3c0100]}, 0x3c) 19:51:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000080)=""/204) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e23, 0x429b, @mcast1, 0x100000001}}, 0x2, 0x1}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x6, 0x0, 0xb0c, 0x1, r3}, &(0x7f00000002c0)=0x10) [ 785.106803] binder: 7177:7179 got transaction with invalid offsets size, 3 [ 785.140743] binder: undelivered TRANSACTION_ERROR: 29201 19:51:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/147) getsockopt$rose(r1, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 785.159303] binder: 7177:7249 got transaction with invalid offsets size, 3 [ 785.183014] binder: undelivered TRANSACTION_ERROR: 29201 19:51:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x983a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:21 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x3000000]}}}], 0x0, 0x0, 0x0}) 19:51:21 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) r2 = getpgrp(0x0) getpgrp(r2) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r2, r3, r4}, 0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 785.383078] binder: 7305:7307 got transaction with invalid offsets size, 3 19:51:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3d0100]}, 0x3c) [ 785.423830] binder: undelivered TRANSACTION_ERROR: 29201 19:51:22 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x41, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x10082, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x4600, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000100)={r1, 0x1, 0x9, r2}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r4 = dup2(r3, r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 785.464618] binder: 7305:7359 got transaction with invalid offsets size, 3 19:51:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x9c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 785.518186] binder: undelivered TRANSACTION_ERROR: 29201 19:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x640, 0x1, 0xcf8, 0x100000001, 0x8, 0x6}}, 0x8) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x4000000]}}}], 0x0, 0x0, 0x0}) 19:51:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3e0100]}, 0x3c) 19:51:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002880)={0x8, 0x4, 0x1f, 0x1, 0x0}, &(0x7f0000002900)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002940)={r2, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f0000002a00)=0x84) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x305, &(0x7f0000000040)}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) r4 = getpid() sendmsg$nl_netfilter(r1, &(0x7f0000002840)={&(0x7f0000000040), 0xc, &(0x7f0000002800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0c005600030000000000000008006c00", @ANYRES32=r1, @ANYBLOB="00112b00dab0906672a9cc25b0b5d7fe7744ee6255c625ee6511a6c7839ae3ba53fe7f88b4f34f269623e28acf17ada27bbbd8fffc79278bdbefd7a9a922ea4973de0e5fdebc916b64ee010bc0af13e60e67cd59d56b43c0d7347fef9bc1c2f1c5bf8213d5ed41eefae7da2aed0b111cc95bccc4967f5933f237766b62a1a293e60e0f19eff708c0ec52381a37fc9084c559368097736b2c17eb0c5ad885a8bad3a097627f21f7ddd239dfdcc87bd89d757ac5ad35516e5d951da0f2a2fa4b7912ef562eab7f1c34bcfc5936575771d480aaa62328594b27af8cacab8534d804f85f11cf9bc0004de9f903db9f60a115f2e41c08006a00", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x2624}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000028c0)={0x1000001, 0x4}) 19:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)=@random={'user.', 'rose'}, &(0x7f0000000300)=""/163, 0xa3) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x0, 0x0) syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0xfffffffffffffff7, 0x10082) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80010, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x3}, @acquire_done={0x40106309, r2, 0x2}], 0x0, 0x0, &(0x7f0000000240)}) getpeername$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@null, @default, @rose, @netrom, @null, @rose, @default, @null]}, &(0x7f0000000180)=0x48) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x20, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x8800) r4 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d3, &(0x7f0000000080)={0xfffffffffffffff9, 0x0}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7, @default, @rose={'rose', 0x0}, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 785.733633] binder: 7448:7449 got transaction with invalid offsets size, 3 19:51:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0xa3, &(0x7f0000000080)}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xa, @raw_data="828d15004a22cf1ebc5defb450649491690a6f07de7d1fbc81bcea59ff100fc48a0eef7e00b6db9a66b76bdbc72f726571263d960e26fd7bb3aed2333ecafbe1f41ffe861950de6b799cf1f24979681daa0e74d54c2f32ec2ee2d288b37f09136e8253783054e6eb42b4b9dc6a6520065d5b7c25491f72a81ad957f44a80ddb5d3545c2bb4060f3235c819ed30b88db7bb8bcc364d69f65ec4c850e888a61714076f363bd7e521e759837a8a6081285586b28967a72bcf6be45f2fdd7e71224880f17565f8f4c9c9"}) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xa001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 785.812287] binder: undelivered TRANSACTION_ERROR: 29201 [ 785.826703] binder: 7448:7601 got transaction with invalid offsets size, 3 [ 785.851040] binder: undelivered TRANSACTION_ERROR: 29201 19:51:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3f0100]}, 0x3c) 19:51:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x5000000]}}}], 0x0, 0x0, 0x0}) 19:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000040)={0x22a, 0x0}) 19:51:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000180)=0xe8) ioprio_set$uid(0x3, r1, 0x4) r2 = dup2(r0, r0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$setown(r2, 0x8, r3) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000001c0), 0x4) 19:51:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) socket$inet6(0xa, 0x4, 0x5) 19:51:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400002]}, 0x3c) [ 786.089901] binder: undelivered TRANSACTION_ERROR: 29201 [ 786.120497] binder: undelivered TRANSACTION_ERROR: 29201 19:51:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x800) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6000000]}}}], 0x0, 0x0, 0x0}) 19:51:22 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xa800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) socket$kcm(0x29, 0x2, 0x0) [ 786.378765] binder: BINDER_SET_CONTEXT_MGR already set [ 786.397291] binder: 7760:7763 ioctl 40046207 0 returned -16 [ 786.416346] binder_transaction: 23 callbacks suppressed 19:51:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400003]}, 0x3c) 19:51:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0xf4, 0x4) [ 786.416364] binder: 7760:7768 transaction failed 29201/-22, size 0-3 line 3005 19:51:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0xc8) getsockname$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000140)={0xfffffffffffffdf0, 0x0}) 19:51:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7000000]}}}], 0x0, 0x0, 0x0}) 19:51:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400004]}, 0x3c) 19:51:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xa801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) getcwd(&(0x7f0000000040)=""/84, 0x54) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f00000000c0)={0x1bacf914c1bae65, &(0x7f0000000080)}) [ 786.746856] binder: 7877:7893 transaction failed 29201/-22, size 0-3 line 3005 [ 786.831832] binder: 7877:7912 transaction failed 29201/-22, size 0-3 line 3005 19:51:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1d, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400005]}, 0x3c) 19:51:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x8000000]}}}], 0x0, 0x0, 0x0}) 19:51:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3}}, 0x28) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000080)={0x0, &(0x7f0000000080)}) 19:51:23 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x22400, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000080)={0x0, 0x100}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xb400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400006]}, 0x3c) [ 787.083914] binder: 8026:8031 transaction failed 29201/-22, size 0-3 line 3005 19:51:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 787.152934] binder: BINDER_SET_CONTEXT_MGR already set [ 787.171441] binder: 8026:8046 ioctl 40046207 0 returned -16 19:51:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup(r0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000040)='./file0\x00', r2, r3, 0x1800) r4 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) 19:51:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000080)="4e637271abd6140ec747f91d91d0ec69b8a973a4b6849f5258bdcc81366f4f31ba1a9c400b1545179d82c586248a2436eb1cb0153a9f38ebc2578f84cbcecef1181e570ce893fa60522235db1a6965b183d82064828f6d71380a8ab147d14acfc84c533a65087b66df75f8f95acf9e515418389dd5f51f3edead4435f2c8c77bd0741ae560a7e980187edf80d3a111921bcd9b1ca64348d5d90a79375c45ca99cb6e5cb92b3f725176feecadf64c7a15b46f0f0716dbf05c51094860f83c77a4716348035e590dc59651bac7739d6f093f61ba585b7c9a0bb806") r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070") dup(r3) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0xffffffffffffffff, 0x8800) ioctl$BLKPG(r1, 0x125f, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) [ 787.202941] binder: 8026:8047 transaction failed 29201/-22, size 0-3 line 3005 19:51:23 executing program 0: r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cpu.weight\x00', 0x2, 0x0) finit_module(r0, &(0x7f0000000580)='\x00', 0x3) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="55c84d0aebd497f8d6ff00000000000000a7b2a3262b2be0ab9122bf03b0526796205a817a15ff0831d9176b2c3fb2f3b28d1204c75339fc53ea665605583c275013717b04a9da8f1de5c6cb6d23da969f64c4702d2886a2f56f52caecf0290581ad4bc5f426663aeacabe7b214fffc8afc870a1e3ad25", 0x77}], 0x1) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4500, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000180)) r2 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000080)={0xffffffffffffff19, 0x0}) 19:51:23 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) r1 = getpgrp(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x5366072ca151f36, 0x3, 0x100, 0x3e50, r1}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0xe68, 0xfffffffffffeffff}, {0x401, 0x14}, {0x9, 0x7}, {0x0, 0x40}, {0x1, 0x4}, {0x10001, 0x9}, {0x3, 0x100000000}]}) r3 = dup2(r2, r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5001, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400007]}, 0x3c) 19:51:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x20000000]}}}], 0x0, 0x0, 0x0}) 19:51:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000440)) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_ifreq(r1, 0x89b4, &(0x7f0000000040)={'nlmon0\x00', @ifru_map={0x30, 0x6, 0x1, 0x3, 0x6dbe58b4, 0x7}}) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:getty_etc_t:s0\x00', 0x21, 0x3) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x81, 0x401}]}, 0xc, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d3, &(0x7f0000000000)={0x0, 0x0}) [ 787.547604] binder: 8176:8183 transaction failed 29201/-22, size 0-3 line 3005 19:51:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400008]}, 0x3c) [ 787.600978] binder: BINDER_SET_CONTEXT_MGR already set 19:51:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 787.656653] binder: 8176:8183 ioctl 40046207 0 returned -16 19:51:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xc800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x48000000]}}}], 0x0, 0x0, 0x0}) 19:51:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:24 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r2 = dup2(r1, r1) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d3, &(0x7f0000000080)={0x0, 0x0}) 19:51:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400009]}, 0x3c) [ 787.946718] binder: 8315:8320 transaction failed 29201/-22, size 0-3 line 3005 19:51:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) 19:51:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0xa3, &(0x7f0000000080)}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xa, @raw_data="828d15004a22cf1ebc5defb450649491690a6f07de7d1fbc81bcea59ff100fc48a0eef7e00b6db9a66b76bdbc72f726571263d960e26fd7bb3aed2333ecafbe1f41ffe861950de6b799cf1f24979681daa0e74d54c2f32ec2ee2d288b37f09136e8253783054e6eb42b4b9dc6a6520065d5b7c25491f72a81ad957f44a80ddb5d3545c2bb4060f3235c819ed30b88db7bb8bcc364d69f65ec4c850e888a61714076f363bd7e521e759837a8a6081285586b28967a72bcf6be45f2fdd7e71224880f17565f8f4c9c9"}) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) [ 788.002480] binder: 8315:8376 transaction failed 29201/-22, size 0-3 line 3005 19:51:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xcc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6522, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:24 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x4c000000]}}}], 0x0, 0x0, 0x0}) 19:51:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000a]}, 0x3c) 19:51:24 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x800, 0x20042) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=0x0, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x63ef, 0x4, 0x1, 0x1, 0x100}, &(0x7f0000000140)=0x14) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup2(r2, r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 19:51:24 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0xa3, &(0x7f0000000080)}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xa, @raw_data="828d15004a22cf1ebc5defb450649491690a6f07de7d1fbc81bcea59ff100fc48a0eef7e00b6db9a66b76bdbc72f726571263d960e26fd7bb3aed2333ecafbe1f41ffe861950de6b799cf1f24979681daa0e74d54c2f32ec2ee2d288b37f09136e8253783054e6eb42b4b9dc6a6520065d5b7c25491f72a81ad957f44a80ddb5d3545c2bb4060f3235c819ed30b88db7bb8bcc364d69f65ec4c850e888a61714076f363bd7e521e759837a8a6081285586b28967a72bcf6be45f2fdd7e71224880f17565f8f4c9c9"}) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 788.280495] binder: 8451:8453 transaction failed 29201/-22, size 0-3 line 3005 19:51:24 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "ed520aed64d5170e8a957846e11f7860e91d4d0f"}, 0x15, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80000, 0x0) [ 788.350403] binder: 8451:8504 transaction failed 29201/-22, size 0-3 line 3005 19:51:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xcd1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0xa3, &(0x7f0000000080)}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xa, @raw_data="828d15004a22cf1ebc5defb450649491690a6f07de7d1fbc81bcea59ff100fc48a0eef7e00b6db9a66b76bdbc72f726571263d960e26fd7bb3aed2333ecafbe1f41ffe861950de6b799cf1f24979681daa0e74d54c2f32ec2ee2d288b37f09136e8253783054e6eb42b4b9dc6a6520065d5b7c25491f72a81ad957f44a80ddb5d3545c2bb4060f3235c819ed30b88db7bb8bcc364d69f65ec4c850e888a61714076f363bd7e521e759837a8a6081285586b28967a72bcf6be45f2fdd7e71224880f17565f8f4c9c9"}) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x60000000]}}}], 0x0, 0x0, 0x0}) 19:51:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f21, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000b]}, 0x3c) 19:51:25 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) 19:51:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0xa3, &(0x7f0000000080)}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xa, @raw_data="828d15004a22cf1ebc5defb450649491690a6f07de7d1fbc81bcea59ff100fc48a0eef7e00b6db9a66b76bdbc72f726571263d960e26fd7bb3aed2333ecafbe1f41ffe861950de6b799cf1f24979681daa0e74d54c2f32ec2ee2d288b37f09136e8253783054e6eb42b4b9dc6a6520065d5b7c25491f72a81ad957f44a80ddb5d3545c2bb4060f3235c819ed30b88db7bb8bcc364d69f65ec4c850e888a61714076f363bd7e521e759837a8a6081285586b28967a72bcf6be45f2fdd7e71224880f17565f8f4c9c9"}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) [ 788.631697] binder: BINDER_SET_CONTEXT_MGR already set [ 788.637055] binder: 8578:8590 ioctl 40046207 0 returned -16 19:51:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000c]}, 0x3c) 19:51:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7530, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f21, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0xa3, &(0x7f0000000080)}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x68000000]}}}], 0x0, 0x0, 0x0}) 19:51:25 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000d]}, 0x3c) 19:51:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6c000000]}}}], 0x0, 0x0, 0x0}) 19:51:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7804, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:25 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x74000000]}}}], 0x0, 0x0, 0x0}) 19:51:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:25 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) getsockname$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:25 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x0, 0x10001, 0x9}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f00000000c0)=0xc) 19:51:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000e]}, 0x3c) [ 789.338770] binder_transaction: 19 callbacks suppressed [ 789.338781] binder: 8866:8873 got transaction with invalid offsets size, 3 19:51:26 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 789.440355] binder: BINDER_SET_CONTEXT_MGR already set 19:51:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x0, 0x10001, 0x9}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f00000000c0)=0xc) 19:51:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8801, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 789.492471] binder: 8866:8976 ioctl 40046207 0 returned -16 19:51:26 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40000f]}, 0x3c) 19:51:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7a000000]}}}], 0x0, 0x0, 0x0}) 19:51:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x0, 0x10001, 0x9}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @empty, @loopback}, &(0x7f00000000c0)=0xc) 19:51:26 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400010]}, 0x3c) [ 789.730808] binder: 9066:9067 got transaction with invalid offsets size, 3 19:51:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 789.799059] binder: 9066:9113 got transaction with invalid offsets size, 3 19:51:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x0, 0x10001, 0x9}) 19:51:26 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0xfdfdffff]}}}], 0x0, 0x0, 0x0}) 19:51:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400011]}, 0x3c) 19:51:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) [ 790.039738] binder: 9235:9236 got transaction with invalid offsets size, 3 19:51:26 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:26 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) [ 790.130701] binder_release_work: 20 callbacks suppressed [ 790.130708] binder: undelivered TRANSACTION_ERROR: 29201 [ 790.153636] binder: BINDER_SET_CONTEXT_MGR already set 19:51:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) [ 790.176970] binder: undelivered TRANSACTION_ERROR: 29189 [ 790.183088] binder: 9235:9236 ioctl 40046207 0 returned -16 19:51:26 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9801, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400012]}, 0x3c) 19:51:26 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0xfffffdfd]}}}], 0x0, 0x0, 0x0}) 19:51:26 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) 19:51:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xf401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x983a, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 790.414801] binder: 9376:9377 got transaction with invalid offsets size, 3 19:51:27 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) 19:51:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400013]}, 0x3c) [ 790.495445] binder: undelivered TRANSACTION_ERROR: 29201 [ 790.503329] binder: BINDER_SET_CONTEXT_MGR already set [ 790.530066] binder: 9376:9388 got transaction with invalid offsets size, 3 [ 790.593955] binder: 9376:9387 ioctl 40046207 0 returned -16 [ 790.613634] binder: undelivered TRANSACTION_ERROR: 29201 19:51:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0xffffff7f]}}}], 0x0, 0x0, 0x0}) 19:51:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400014]}, 0x3c) 19:51:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 790.818811] binder: 9509:9515 got transaction with invalid offsets size, 3 [ 790.854200] binder: undelivered TRANSACTION_ERROR: 29201 19:51:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) [ 790.872267] binder: 9509:9525 got transaction with invalid offsets size, 3 [ 790.896480] binder: undelivered TRANSACTION_ERROR: 29201 19:51:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa001, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7ffffffff000]}}}], 0x0, 0x0, 0x0}) 19:51:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400015]}, 0x3c) 19:51:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(0xffffffffffffffff, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 791.057711] binder: 9645:9646 got transaction with invalid offsets size, 3 19:51:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) [ 791.134566] binder: undelivered TRANSACTION_ERROR: 29201 [ 791.143184] binder: BINDER_SET_CONTEXT_MGR already set [ 791.169215] binder: undelivered TRANSACTION_ERROR: 29189 [ 791.176077] binder: 9645:9646 ioctl 40046207 0 returned -16 19:51:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) r1 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) 19:51:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa800, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400016]}, 0x3c) 19:51:27 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0xf0ffffff7f0000]}}}], 0x0, 0x0, 0x0}) 19:51:27 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:28 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x69d0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 791.413562] binder: 9776:9777 got transaction with invalid offsets size, 3 19:51:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400017]}, 0x3c) 19:51:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa801, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 791.464041] binder_transaction: 17 callbacks suppressed [ 791.464060] binder: 9776:9777 transaction failed 29201/-22, size 0-3 line 3005 19:51:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:28 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 791.571283] binder: undelivered TRANSACTION_ERROR: 29201 [ 791.603677] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 19:51:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:28 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb400, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 791.709088] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 791.759055] CPU: 0 PID: 9776 Comm: syz-executor.4 Not tainted 4.19.36 #4 [ 791.765956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.775322] Call Trace: [ 791.777930] dump_stack+0x172/0x1f0 [ 791.781577] dump_header+0x15e/0x929 [ 791.785308] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 791.790431] ? ___ratelimit+0x60/0x595 [ 791.794339] ? do_raw_spin_unlock+0x57/0x270 [ 791.798790] oom_kill_process.cold+0x10/0x6f5 [ 791.803325] ? task_will_free_mem+0x139/0x6e0 [ 791.807835] ? find_held_lock+0x35/0x130 [ 791.811927] out_of_memory+0x936/0x12d0 [ 791.815906] ? lock_downgrade+0x810/0x810 [ 791.820052] ? oom_killer_disable+0x280/0x280 [ 791.824555] ? find_held_lock+0x35/0x130 [ 791.828617] mem_cgroup_out_of_memory+0x1d2/0x240 [ 791.833456] ? memcg_event_wake+0x230/0x230 [ 791.837859] ? do_raw_spin_unlock+0x57/0x270 [ 791.842259] ? _raw_spin_unlock+0x2d/0x50 [ 791.846424] try_charge+0x1028/0x15b0 [ 791.850214] ? find_held_lock+0x35/0x130 [ 791.854363] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 791.859285] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 791.864125] ? find_held_lock+0x35/0x130 [ 791.868202] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 791.873048] memcg_kmem_charge_memcg+0x7c/0x130 [ 791.877713] ? memcg_kmem_put_cache+0xb0/0xb0 [ 791.882208] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 791.887077] memcg_kmem_charge+0x136/0x300 [ 791.891309] __alloc_pages_nodemask+0x3c6/0x760 [ 791.896075] ? __alloc_pages_slowpath+0x2870/0x2870 [ 791.901112] ? lockdep_hardirqs_on+0x415/0x5d0 [ 791.905690] ? trace_hardirqs_on+0x67/0x230 [ 791.910352] ? kasan_check_read+0x11/0x20 [ 791.914502] copy_process.part.0+0x3e0/0x7970 [ 791.918995] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 791.924104] ? delayacct_end+0x5c/0x100 [ 791.928078] ? __delayacct_freepages_end+0xe0/0x140 [ 791.933093] ? __lock_acquire+0x6eb/0x48f0 [ 791.937328] ? __cleanup_sighand+0x70/0x70 [ 791.941564] ? mark_held_locks+0x100/0x100 [ 791.945812] _do_fork+0x257/0xfe0 [ 791.949266] ? fork_idle+0x1d0/0x1d0 [ 791.953246] ? blkcg_print_stat+0xb90/0xb90 [ 791.957565] ? kasan_check_read+0x11/0x20 [ 791.961905] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 791.966669] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 791.971422] ? do_syscall_64+0x26/0x610 [ 791.975391] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 791.980761] ? do_syscall_64+0x26/0x610 [ 791.984821] __x64_sys_clone+0xbf/0x150 [ 791.988817] do_syscall_64+0x103/0x610 [ 791.992727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 791.997915] RIP: 0033:0x45b5f9 [ 792.001455] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 792.020347] RSP: 002b:00007fffee5670b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 792.028049] RAX: ffffffffffffffda RBX: 00007f28ef771700 RCX: 000000000045b5f9 [ 792.035331] RDX: 00007f28ef7719d0 RSI: 00007f28ef770db0 RDI: 00000000003d0f00 [ 792.043028] RBP: 00007fffee5672c0 R08: 00007f28ef771700 R09: 00007f28ef771700 [ 792.050394] R10: 00007f28ef7719d0 R11: 0000000000000202 R12: 0000000000000000 [ 792.057666] R13: 00007fffee56716f R14: 00007f28ef7719c0 R15: 000000000073c04c [ 792.114169] Task in /syz4 killed as a result of limit of /syz4 [ 792.125652] memory: usage 307196kB, limit 307200kB, failcnt 3276 [ 792.132463] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 792.157008] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 792.177572] Memory cgroup stats for /syz4: cache:36KB rss:250180KB rss_huge:223232KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:250184KB inactive_file:0KB active_file:0KB unevictable:0KB 19:51:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x100000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:28 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400018]}, 0x3c) 19:51:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc004, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 792.200441] Memory cgroup out of memory: Kill process 9776 (syz-executor.4) score 1117 or sacrifice child [ 792.211376] Killed process 9776 (syz-executor.4) total-vm:72716kB, anon-rss:4184kB, file-rss:34880kB, shmem-rss:0kB [ 792.224464] oom_reaper: reaped process 9776 (syz-executor.4), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 19:51:28 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x640000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:29 executing program 1: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400019]}, 0x3c) [ 792.422431] binder: 10057:10058 transaction failed 29201/-22, size 0-3 line 3005 19:51:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc800, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:29 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 792.497942] binder: undelivered TRANSACTION_ERROR: 29201 [ 792.509691] binder: 10057:10069 transaction failed 29201/-22, size 0-3 line 3005 19:51:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) 19:51:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x200000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40001a]}, 0x3c) 19:51:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x6b6b6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:29 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) [ 792.790638] binder: 10187:10191 transaction failed 29201/-22, size 0-3 line 3005 19:51:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40001b]}, 0x3c) [ 792.857695] binder: 10187:10201 transaction failed 29201/-22, size 0-3 line 3005 19:51:29 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) 19:51:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x300000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:29 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x0, 0x0}) 19:51:29 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40001c]}, 0x3c) [ 793.103154] binder: 10326:10327 transaction failed 29201/-22, size 0-3 line 3005 19:51:29 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 793.209982] binder: 10326:10340 transaction failed 29201/-22, size 0-3 line 3005 19:51:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe710, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x400000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:29 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x0, 0x0}) 19:51:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x13165f6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 793.366288] binder: 10451:10453 transaction failed 29201/-22, size 0-3 line 3005 19:51:30 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40001d]}, 0x3c) [ 793.440489] binder: 10451:10468 transaction failed 29201/-22, size 0-3 line 3005 19:51:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe800, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x0, 0x0}) 19:51:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x500000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:30 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40001e]}, 0x3c) [ 793.717812] binder: 10602:10603 transaction failed 29201/-22, size 0-3 line 3005 19:51:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x2, &(0x7f0000000100)=[{}, {}]}) 19:51:30 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe803, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x600000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:30 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{}]}) 19:51:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400021]}, 0x3c) 19:51:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x700000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:30 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf001, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x0, &(0x7f0000000100)}) 19:51:30 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400022]}, 0x3c) 19:51:30 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:30 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x800000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:30 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:30 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x0, &(0x7f0000000100)}) 19:51:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf401, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:31 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 794.471949] binder_transaction: 14 callbacks suppressed [ 794.471961] binder: 10892:10896 got transaction with invalid offsets size, 3 19:51:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400023]}, 0x3c) 19:51:31 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x0, &(0x7f0000000100)}) [ 794.523797] binder: 10892:10905 got transaction with invalid offsets size, 3 19:51:31 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x2000000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x4010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 794.703176] binder: 11021:11024 got transaction with invalid offsets size, 3 19:51:31 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400024]}, 0x3c) [ 794.756597] binder: 11021:11030 got transaction with invalid offsets size, 3 19:51:31 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x4800000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:31 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc800, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 795.038327] binder: 11152:11153 got transaction with invalid offsets size, 3 19:51:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400025]}, 0x3c) 19:51:31 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 795.116780] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 [ 795.161451] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 795.166933] CPU: 1 PID: 11152 Comm: syz-executor.4 Not tainted 4.19.36 #4 [ 795.173882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.183251] Call Trace: [ 795.185863] dump_stack+0x172/0x1f0 [ 795.189523] dump_header+0x15e/0x929 [ 795.193263] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 795.198383] ? ___ratelimit+0x60/0x595 [ 795.198398] ? do_raw_spin_unlock+0x57/0x270 [ 795.198430] oom_kill_process.cold+0x10/0x6f5 [ 795.211657] ? task_will_free_mem+0x139/0x6e0 [ 795.216177] ? find_held_lock+0x35/0x130 [ 795.216199] out_of_memory+0x936/0x12d0 [ 795.216216] ? lock_downgrade+0x810/0x810 [ 795.228490] ? oom_killer_disable+0x280/0x280 [ 795.233005] ? find_held_lock+0x35/0x130 [ 795.237102] mem_cgroup_out_of_memory+0x1d2/0x240 [ 795.241971] ? memcg_event_wake+0x230/0x230 [ 795.246339] ? do_raw_spin_unlock+0x57/0x270 [ 795.250767] ? _raw_spin_unlock+0x2d/0x50 [ 795.256165] try_charge+0x1028/0x15b0 [ 795.259972] ? find_held_lock+0x35/0x130 [ 795.264050] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 795.268894] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 795.273740] ? find_held_lock+0x35/0x130 [ 795.277799] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 795.282651] memcg_kmem_charge_memcg+0x7c/0x130 [ 795.287327] ? memcg_kmem_put_cache+0xb0/0xb0 [ 795.291833] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 795.296761] memcg_kmem_charge+0x136/0x300 [ 795.300992] __alloc_pages_nodemask+0x3c6/0x760 [ 795.305656] ? __alloc_pages_slowpath+0x2870/0x2870 [ 795.310673] ? lockdep_hardirqs_on+0x415/0x5d0 [ 795.315266] ? trace_hardirqs_on+0x67/0x230 [ 795.319678] ? kasan_check_read+0x11/0x20 [ 795.323914] copy_process.part.0+0x3e0/0x7970 [ 795.328433] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 795.333533] ? delayacct_end+0x5c/0x100 [ 795.337540] ? __delayacct_freepages_end+0xe0/0x140 [ 795.342557] ? __lock_acquire+0x6eb/0x48f0 [ 795.346792] ? __cleanup_sighand+0x70/0x70 [ 795.351198] ? mark_held_locks+0x100/0x100 [ 795.355646] _do_fork+0x257/0xfe0 [ 795.359110] ? fork_idle+0x1d0/0x1d0 [ 795.362834] ? blkcg_print_stat+0xb90/0xb90 [ 795.367151] ? kasan_check_read+0x11/0x20 [ 795.371318] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 795.376156] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 795.380922] ? do_syscall_64+0x26/0x610 [ 795.384909] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 795.390294] ? do_syscall_64+0x26/0x610 [ 795.394271] __x64_sys_clone+0xbf/0x150 [ 795.398244] do_syscall_64+0x103/0x610 [ 795.402145] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 795.407332] RIP: 0033:0x45b5f9 [ 795.410523] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 795.429595] RSP: 002b:00007fffee5670b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 795.437395] RAX: ffffffffffffffda RBX: 00007f28ef771700 RCX: 000000000045b5f9 [ 795.444664] RDX: 00007f28ef7719d0 RSI: 00007f28ef770db0 RDI: 00000000003d0f00 [ 795.451953] RBP: 00007fffee5672c0 R08: 00007f28ef771700 R09: 00007f28ef771700 19:51:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5429c, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) [ 795.459217] R10: 00007f28ef7719d0 R11: 0000000000000202 R12: 0000000000000000 [ 795.466477] R13: 00007fffee56716f R14: 00007f28ef7719c0 R15: 000000000073c04c 19:51:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:32 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 795.699834] Task in /syz4 killed as a result of limit of /syz4 [ 795.707757] memory: usage 307184kB, limit 307200kB, failcnt 3305 [ 795.716216] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 795.724733] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 795.732700] Memory cgroup stats for /syz4: cache:36KB rss:250152KB rss_huge:223232KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:250184KB inactive_file:0KB active_file:0KB unevictable:0KB [ 795.755924] Memory cgroup out of memory: Kill process 11152 (syz-executor.4) score 1117 or sacrifice child [ 795.798965] Killed process 11152 (syz-executor.4) total-vm:72716kB, anon-rss:4184kB, file-rss:34880kB, shmem-rss:0kB 19:51:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) 19:51:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400026]}, 0x3c) 19:51:32 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x4c00000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x640000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 795.843555] oom_reaper: reaped process 11152 (syz-executor.4), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 19:51:32 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) [ 795.992371] binder: 11422:11424 got transaction with invalid offsets size, 3 19:51:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400027]}, 0x3c) 19:51:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b6b6b, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 796.055636] binder_release_work: 18 callbacks suppressed [ 796.055644] binder: undelivered TRANSACTION_ERROR: 29201 19:51:32 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) [ 796.120675] syz-executor.4 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=1000 19:51:32 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) 19:51:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:32 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400028]}, 0x3c) [ 796.242426] syz-executor.4 cpuset=syz4 mems_allowed=0-1 [ 796.266340] CPU: 1 PID: 11422 Comm: syz-executor.4 Not tainted 4.19.36 #4 [ 796.273421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.282794] Call Trace: [ 796.285451] dump_stack+0x172/0x1f0 [ 796.289109] dump_header+0x15e/0x929 [ 796.293023] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 796.298154] ? ___ratelimit+0x60/0x595 [ 796.302057] ? do_raw_spin_unlock+0x57/0x270 [ 796.307095] oom_kill_process.cold+0x10/0x6f5 [ 796.311705] ? task_will_free_mem+0x139/0x6e0 [ 796.311722] ? find_held_lock+0x35/0x130 [ 796.311739] out_of_memory+0x936/0x12d0 [ 796.311754] ? lock_downgrade+0x810/0x810 [ 796.311770] ? oom_killer_disable+0x280/0x280 [ 796.311782] ? find_held_lock+0x35/0x130 [ 796.311805] mem_cgroup_out_of_memory+0x1d2/0x240 [ 796.311820] ? memcg_event_wake+0x230/0x230 [ 796.320385] ? do_raw_spin_unlock+0x57/0x270 [ 796.320403] ? _raw_spin_unlock+0x2d/0x50 [ 796.320423] try_charge+0x1028/0x15b0 [ 796.320440] ? find_held_lock+0x35/0x130 [ 796.363131] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 796.367970] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 796.372834] ? find_held_lock+0x35/0x130 [ 796.377011] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 796.381896] memcg_kmem_charge_memcg+0x7c/0x130 [ 796.386567] ? memcg_kmem_put_cache+0xb0/0xb0 [ 796.391062] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 796.395909] memcg_kmem_charge+0x136/0x300 [ 796.400153] __alloc_pages_nodemask+0x3c6/0x760 [ 796.404998] ? __alloc_pages_slowpath+0x2870/0x2870 [ 796.410014] ? lockdep_hardirqs_on+0x415/0x5d0 [ 796.414593] ? trace_hardirqs_on+0x67/0x230 [ 796.418920] ? kasan_check_read+0x11/0x20 [ 796.423081] copy_process.part.0+0x3e0/0x7970 [ 796.427591] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 796.432721] ? delayacct_end+0x5c/0x100 [ 796.436693] ? __delayacct_freepages_end+0xe0/0x140 [ 796.441822] ? __lock_acquire+0x6eb/0x48f0 [ 796.446072] ? __cleanup_sighand+0x70/0x70 [ 796.450319] ? mark_held_locks+0x100/0x100 [ 796.454556] _do_fork+0x257/0xfe0 [ 796.458017] ? fork_idle+0x1d0/0x1d0 [ 796.461735] ? blkcg_print_stat+0xb90/0xb90 [ 796.466052] ? kasan_check_read+0x11/0x20 [ 796.470202] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 796.474965] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 796.479731] ? do_syscall_64+0x26/0x610 [ 796.483726] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.489094] ? do_syscall_64+0x26/0x610 [ 796.493071] __x64_sys_clone+0xbf/0x150 [ 796.497140] do_syscall_64+0x103/0x610 [ 796.501040] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.506228] RIP: 0033:0x45b5f9 [ 796.509637] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 796.531340] RSP: 002b:00007fffee5670b8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 19:51:33 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) [ 796.539050] RAX: ffffffffffffffda RBX: 00007f28ef771700 RCX: 000000000045b5f9 [ 796.546328] RDX: 00007f28ef7719d0 RSI: 00007f28ef770db0 RDI: 00000000003d0f00 [ 796.553676] RBP: 00007fffee5672c0 R08: 00007f28ef771700 R09: 00007f28ef771700 [ 796.560946] R10: 00007f28ef7719d0 R11: 0000000000000202 R12: 0000000000000000 [ 796.568229] R13: 00007fffee56716f R14: 00007f28ef7719c0 R15: 000000000073c04c 19:51:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) [ 796.698038] Task in /syz4 killed as a result of limit of /syz4 [ 796.710915] memory: usage 307184kB, limit 307200kB, failcnt 3320 [ 796.720519] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 796.728238] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 796.737908] Memory cgroup stats for /syz4: cache:36KB rss:250164KB rss_huge:223232KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:250184KB inactive_file:0KB active_file:0KB unevictable:0KB [ 796.771967] Memory cgroup out of memory: Kill process 11422 (syz-executor.4) score 1117 or sacrifice child [ 796.785270] Killed process 11422 (syz-executor.4) total-vm:72716kB, anon-rss:4184kB, file-rss:34880kB, shmem-rss:0kB 19:51:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400029]}, 0x3c) 19:51:33 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r2 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r2, 0x0) 19:51:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6000000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 796.817283] oom_reaper: reaped process 11422 (syz-executor.4), now anon-rss:0kB, file-rss:33920kB, shmem-rss:0kB 19:51:33 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 796.966085] binder: 11692:11694 got transaction with invalid offsets size, 3 [ 796.986619] binder_transaction: 11 callbacks suppressed [ 796.986636] binder: 11692:11694 transaction failed 29201/-22, size 0-3 line 3005 19:51:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40002a]}, 0x3c) [ 797.011623] binder: undelivered TRANSACTION_ERROR: 29201 [ 797.029066] binder: 11692:11742 got transaction with invalid offsets size, 3 19:51:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11bf1cd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 797.063089] binder: 11692:11742 transaction failed 29201/-22, size 0-3 line 3005 19:51:33 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 797.131344] binder: undelivered TRANSACTION_ERROR: 29201 19:51:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6800000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:33 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40002b]}, 0x3c) 19:51:33 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 797.290165] binder: 11826:11829 got transaction with invalid offsets size, 3 [ 797.313192] binder: 11826:11829 transaction failed 29201/-22, size 0-3 line 3005 19:51:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x400448c9, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 797.368956] binder: undelivered TRANSACTION_ERROR: 29201 [ 797.388079] binder: 11826:11868 got transaction with invalid offsets size, 3 19:51:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40002c]}, 0x3c) [ 797.440236] binder: 11826:11868 transaction failed 29201/-22, size 0-3 line 3005 [ 797.468881] binder: undelivered TRANSACTION_ERROR: 29201 19:51:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xe9d0600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:34 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x6c00000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:34 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup2(r0, r0) r1 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r1, 0x0) 19:51:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 797.648151] binder: 11960:11961 transaction failed 29201/-22, size 0-3 line 3005 19:51:34 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40002d]}, 0x3c) [ 797.702258] binder: undelivered TRANSACTION_ERROR: 29201 [ 797.713309] binder: BINDER_SET_CONTEXT_MGR already set [ 797.718671] binder: 11960:11983 ioctl 40046207 0 returned -16 [ 797.724541] binder: 11960:11988 transaction failed 29201/-22, size 0-3 line 3005 19:51:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0xf0010b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:34 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:34 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 797.858353] binder: undelivered TRANSACTION_ERROR: 29201 19:51:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7400000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40002e]}, 0x3c) 19:51:34 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 798.063732] binder: 12095:12126 transaction failed 29201/-22, size 0-3 line 3005 19:51:34 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 798.109930] binder: undelivered TRANSACTION_ERROR: 29201 [ 798.136333] binder: 12095:12208 transaction failed 29201/-22, size 0-3 line 3005 19:51:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 798.179573] binder: undelivered TRANSACTION_ERROR: 29201 19:51:34 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x7a00000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:34 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:51:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40002f]}, 0x3c) [ 798.382920] binder: 12261:12266 transaction failed 29201/-22, size 0-3 line 3005 [ 798.422110] binder: undelivered TRANSACTION_ERROR: 29201 19:51:35 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x10040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 798.439455] binder: 12261:12338 transaction failed 29201/-22, size 0-3 line 3005 19:51:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = dup2(r0, r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000002c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 19:51:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400030]}, 0x3c) 19:51:35 executing program 0: r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x8000000000000000]}}}], 0x0, 0x0, 0x0}) 19:51:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0xfdfdffff00000000]}}}], 0x0, 0x0, 0x0}) 19:51:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400031]}, 0x3c) 19:51:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0xffffff7f00000000]}}}], 0x0, 0x0, 0x0}) 19:51:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x12001080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xcdf11b0100000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400032]}, 0x3c) 19:51:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:35 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0xffffffff00000000]}}}], 0x0, 0x0, 0x0}) 19:51:35 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400033]}, 0x3c) 19:51:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x2}}], 0x0, 0x0, 0x0}) 19:51:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x120010b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:36 executing program 1 (fault-call:2 fault-nth:0): r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 799.679470] binder_transaction: 13 callbacks suppressed [ 799.679484] binder: 12771:12775 got transaction with invalid offsets size, 3 19:51:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400034]}, 0x3c) [ 799.744633] FAULT_INJECTION: forcing a failure. [ 799.744633] name failslab, interval 1, probability 0, space 0, times 0 [ 799.766541] binder: 12771:12801 got transaction with invalid offsets size, 3 [ 799.784255] CPU: 0 PID: 12783 Comm: syz-executor.1 Not tainted 4.19.36 #4 [ 799.791242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.791250] Call Trace: [ 799.791275] dump_stack+0x172/0x1f0 [ 799.791298] should_fail.cold+0xa/0x1b [ 799.791319] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 799.791339] ? lock_downgrade+0x810/0x810 [ 799.791358] ? ___might_sleep+0x163/0x280 [ 799.824218] __should_failslab+0x121/0x190 [ 799.828481] should_failslab+0x9/0x14 [ 799.832304] kmem_cache_alloc_trace+0x2cf/0x760 [ 799.837016] ? kasan_check_read+0x11/0x20 [ 799.841208] perf_event_alloc.part.0+0xc0/0x2e00 [ 799.846013] ? _raw_spin_unlock+0x2d/0x50 [ 799.850371] ? __perf_event_read+0xe10/0xe10 [ 799.854821] __do_sys_perf_event_open+0x842/0x2730 [ 799.859868] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 799.864747] ? check_preemption_disabled+0x48/0x290 [ 799.869866] ? perf_event_set_output+0x4e0/0x4e0 [ 799.874640] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 799.879489] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 799.884251] ? do_syscall_64+0x26/0x610 [ 799.888258] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.893619] ? do_syscall_64+0x26/0x610 [ 799.897606] __x64_sys_perf_event_open+0xbe/0x150 [ 799.902880] do_syscall_64+0x103/0x610 [ 799.906795] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.911992] RIP: 0033:0x458c29 [ 799.915201] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.934111] RSP: 002b:00007f0b9fe66c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a 19:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 799.941828] RAX: ffffffffffffffda RBX: 00007f0b9fe66c90 RCX: 0000000000458c29 [ 799.949294] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00000000200000c0 [ 799.956597] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 799.963863] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f0b9fe676d4 [ 799.971157] R13: 00000000004c54b5 R14: 00000000004d9698 R15: 0000000000000005 19:51:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x3}}], 0x0, 0x0, 0x0}) 19:51:36 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x120010d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400035]}, 0x3c) 19:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 800.063994] binder: 12907:12908 got transaction with invalid offsets size, 3 [ 800.074609] binder: 12907:12909 got transaction with invalid offsets size, 3 19:51:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x4}}], 0x0, 0x0, 0x0}) 19:51:36 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 800.245483] binder: 12927:12943 got transaction with invalid offsets size, 3 [ 800.290240] binder: 12927:13039 got transaction with invalid offsets size, 3 19:51:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:37 executing program 1 (fault-call:2 fault-nth:1): r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x13001080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400036]}, 0x3c) 19:51:37 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x5}}], 0x0, 0x0, 0x0}) [ 800.481035] FAULT_INJECTION: forcing a failure. [ 800.481035] name failslab, interval 1, probability 0, space 0, times 0 [ 800.483312] binder: 13055:13060 got transaction with invalid offsets size, 3 [ 800.528414] CPU: 1 PID: 13065 Comm: syz-executor.1 Not tainted 4.19.36 #4 [ 800.535419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.544789] Call Trace: [ 800.547380] dump_stack+0x172/0x1f0 [ 800.551020] should_fail.cold+0xa/0x1b [ 800.554915] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 800.560029] ? lock_downgrade+0x810/0x810 [ 800.564525] ? ___might_sleep+0x163/0x280 [ 800.568672] __should_failslab+0x121/0x190 [ 800.572932] should_failslab+0x9/0x14 [ 800.576732] kmem_cache_alloc+0x2b1/0x700 [ 800.580876] ? perf_event_alloc.part.0+0xfb1/0x2e00 [ 800.585898] __d_alloc+0x2e/0x9d0 [ 800.589403] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 800.595043] d_alloc_pseudo+0x1e/0x30 [ 800.598899] alloc_file_pseudo+0xe2/0x280 [ 800.603051] ? alloc_file+0x4d0/0x4d0 [ 800.606869] ? find_get_context.isra.0+0x30f/0x5c0 [ 800.611801] anon_inode_getfile+0xda/0x200 [ 800.616035] __do_sys_perf_event_open+0x1090/0x2730 [ 800.621053] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 800.625905] ? perf_event_set_output+0x4e0/0x4e0 [ 800.630673] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 800.635426] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 800.640178] ? do_syscall_64+0x26/0x610 [ 800.644236] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.649684] ? do_syscall_64+0x26/0x610 [ 800.653655] __x64_sys_perf_event_open+0xbe/0x150 [ 800.658510] do_syscall_64+0x103/0x610 [ 800.662486] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.667673] RIP: 0033:0x458c29 [ 800.670861] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.689763] RSP: 002b:00007f0b9fe66c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 800.697473] RAX: ffffffffffffffda RBX: 00007f0b9fe66c90 RCX: 0000000000458c29 [ 800.704759] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00000000200000c0 [ 800.712042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 800.719306] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f0b9fe676d4 19:51:37 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400037]}, 0x3c) [ 800.726569] R13: 00000000004c54b5 R14: 00000000004d9698 R15: 0000000000000005 [ 800.740061] binder: 13055:13070 got transaction with invalid offsets size, 3 19:51:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x130010b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x6}}], 0x0, 0x0, 0x0}) 19:51:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 800.937521] binder: BINDER_SET_CONTEXT_MGR already set [ 800.947214] binder: 13186:13190 ioctl 40046207 0 returned -16 [ 800.958160] binder_alloc: 13055: binder_alloc_buf, no vma [ 800.970119] binder: BINDER_SET_CONTEXT_MGR already set [ 800.979386] binder_alloc: 13055: binder_alloc_buf, no vma 19:51:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400038]}, 0x3c) 19:51:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0010b0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 800.987274] binder: 13186:13190 ioctl 40046207 0 returned -16 [ 801.068151] binder_release_work: 16 callbacks suppressed [ 801.068159] binder: undelivered TRANSACTION_ERROR: 29189 [ 801.087098] binder: undelivered TRANSACTION_ERROR: 29189 [ 801.100422] binder: undelivered TRANSACTION_ERROR: 29201 19:51:37 executing program 1 (fault-call:2 fault-nth:2): r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x7}}], 0x0, 0x0, 0x0}) 19:51:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x130010d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:37 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:37 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400039]}, 0x3c) [ 801.232258] binder: 13311:13312 got transaction with invalid offsets size, 3 [ 801.287129] FAULT_INJECTION: forcing a failure. [ 801.287129] name failslab, interval 1, probability 0, space 0, times 0 [ 801.292515] binder: undelivered TRANSACTION_ERROR: 29201 [ 801.308794] CPU: 1 PID: 13320 Comm: syz-executor.1 Not tainted 4.19.36 #4 [ 801.315900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.325296] Call Trace: [ 801.327938] dump_stack+0x172/0x1f0 [ 801.331602] should_fail.cold+0xa/0x1b [ 801.335617] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 801.340756] ? lock_downgrade+0x810/0x810 [ 801.345121] ? ___might_sleep+0x163/0x280 [ 801.349339] __should_failslab+0x121/0x190 [ 801.353613] should_failslab+0x9/0x14 [ 801.357445] kmem_cache_alloc+0x2b1/0x700 [ 801.361615] __alloc_file+0x27/0x300 [ 801.365361] alloc_empty_file+0x72/0x170 [ 801.369444] alloc_file+0x5e/0x4d0 [ 801.373000] alloc_file_pseudo+0x189/0x280 [ 801.377255] ? alloc_file+0x4d0/0x4d0 [ 801.381077] ? find_get_context.isra.0+0x30f/0x5c0 [ 801.383525] binder: BINDER_SET_CONTEXT_MGR already set [ 801.386032] anon_inode_getfile+0xda/0x200 [ 801.395555] __do_sys_perf_event_open+0x1090/0x2730 [ 801.400573] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 801.405424] ? perf_event_set_output+0x4e0/0x4e0 [ 801.410208] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 801.414965] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 801.419718] ? do_syscall_64+0x26/0x610 [ 801.423710] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.429071] ? do_syscall_64+0x26/0x610 [ 801.433048] __x64_sys_perf_event_open+0xbe/0x150 [ 801.437904] do_syscall_64+0x103/0x610 [ 801.441969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.447159] RIP: 0033:0x458c29 [ 801.450346] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.469250] RSP: 002b:00007f0b9fe66c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 801.476959] RAX: ffffffffffffffda RBX: 00007f0b9fe66c90 RCX: 0000000000458c29 19:51:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40003a]}, 0x3c) 19:51:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x15000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 801.484223] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00000000200000c0 [ 801.491499] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 801.498763] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f0b9fe676d4 [ 801.506037] R13: 00000000004c54b5 R14: 00000000004d9698 R15: 0000000000000005 [ 801.521248] binder: 13311:13312 ioctl 40046207 0 returned -16 19:51:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x8}}], 0x0, 0x0, 0x0}) [ 801.584569] binder: undelivered TRANSACTION_ERROR: 29189 19:51:38 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40003b]}, 0x3c) 19:51:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 801.784391] binder: 13445:13465 got transaction with invalid offsets size, 3 [ 801.818662] binder: undelivered TRANSACTION_ERROR: 29201 [ 801.852824] binder: undelivered TRANSACTION_ERROR: 29189 19:51:38 executing program 1 (fault-call:2 fault-nth:3): r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40003c]}, 0x3c) 19:51:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12001080, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:38 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1c010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x48}}], 0x0, 0x0, 0x0}) 19:51:38 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40003d]}, 0x3c) 19:51:38 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120010b0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 802.098683] FAULT_INJECTION: forcing a failure. [ 802.098683] name failslab, interval 1, probability 0, space 0, times 0 [ 802.120233] binder_transaction: 22 callbacks suppressed [ 802.120251] binder: 13573:13582 transaction failed 29201/-22, size 0-3 line 3005 [ 802.187373] binder: undelivered TRANSACTION_ERROR: 29201 [ 802.193182] CPU: 0 PID: 13604 Comm: syz-executor.1 Not tainted 4.19.36 #4 [ 802.200139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.209600] Call Trace: [ 802.212214] dump_stack+0x172/0x1f0 [ 802.215869] should_fail.cold+0xa/0x1b [ 802.220264] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 802.225400] ? lock_downgrade+0x810/0x810 [ 802.229571] ? ___might_sleep+0x163/0x280 [ 802.233736] __should_failslab+0x121/0x190 [ 802.238001] should_failslab+0x9/0x14 [ 802.241822] kmem_cache_alloc+0x2b1/0x700 [ 802.246063] ? rcu_read_lock_sched_held+0x110/0x130 [ 802.251181] selinux_file_alloc_security+0xb4/0x190 [ 802.256198] security_file_alloc+0x69/0xb0 [ 802.260446] __alloc_file+0x9d/0x300 [ 802.264157] alloc_empty_file+0x72/0x170 [ 802.268221] alloc_file+0x5e/0x4d0 [ 802.271883] alloc_file_pseudo+0x189/0x280 [ 802.276143] ? alloc_file+0x4d0/0x4d0 [ 802.279958] ? find_get_context.isra.0+0x30f/0x5c0 [ 802.284988] anon_inode_getfile+0xda/0x200 [ 802.289231] __do_sys_perf_event_open+0x1090/0x2730 [ 802.294266] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 802.299117] ? perf_event_set_output+0x4e0/0x4e0 [ 802.303883] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.308660] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 802.313427] ? do_syscall_64+0x26/0x610 [ 802.317401] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.322773] ? do_syscall_64+0x26/0x610 [ 802.326749] __x64_sys_perf_event_open+0xbe/0x150 [ 802.331602] do_syscall_64+0x103/0x610 [ 802.335492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.340673] RIP: 0033:0x458c29 [ 802.343879] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.362982] RSP: 002b:00007f0b9fe66c78 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 802.370712] RAX: ffffffffffffffda RBX: 00007f0b9fe66c90 RCX: 0000000000458c29 [ 802.377979] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00000000200000c0 19:51:39 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 802.385249] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 802.392532] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f0b9fe676d4 [ 802.399893] R13: 00000000004c54b5 R14: 00000000004d9698 R15: 0000000000000005 19:51:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x1ecd0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:39 executing program 1 (fault-call:2 fault-nth:4): r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 802.473699] binder: 13573:13701 transaction failed 29201/-22, size 0-3 line 3005 19:51:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120010d0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:39 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 802.529710] binder: undelivered TRANSACTION_ERROR: 29201 19:51:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x40003e]}, 0x3c) 19:51:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x4c}}], 0x0, 0x0, 0x0}) 19:51:39 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 802.725687] binder: 13738:13759 transaction failed 29201/-22, size 0-3 line 3005 19:51:39 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x2c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) [ 802.768491] binder: undelivered TRANSACTION_ERROR: 29201 [ 802.790288] binder: 13738:13828 transaction failed 29201/-22, size 0-3 line 3005 19:51:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400041]}, 0x3c) 19:51:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13001080, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:39 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x20000130, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x60}}], 0x0, 0x0, 0x0}) 19:51:39 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:39 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 803.011885] binder: 13844:13845 transaction failed 29201/-22, size 0-3 line 3005 19:51:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130010b0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) [ 803.080072] binder: 13844:13914 transaction failed 29201/-22, size 0-3 line 3005 19:51:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400042]}, 0x3c) 19:51:39 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:39 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x30750000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:39 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x68}}], 0x0, 0x0, 0x0}) 19:51:39 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x130010d0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:39 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400043]}, 0x3c) [ 803.393954] binder: 13974:13975 transaction failed 29201/-22, size 0-3 line 3005 19:51:40 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 803.466821] binder: 13974:14069 transaction failed 29201/-22, size 0-3 line 3005 19:51:40 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x34000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x6c}}], 0x0, 0x0, 0x0}) 19:51:40 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400044]}, 0x3c) [ 803.704621] binder: 14105:14110 transaction failed 29201/-22, size 0-3 line 3005 [ 803.765119] binder: 14105:14169 transaction failed 29201/-22, size 0-3 line 3005 19:51:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c010000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3c020000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:40 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x74}}], 0x0, 0x0, 0x0}) 19:51:40 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22650000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400045]}, 0x3c) 19:51:40 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x7a}}], 0x0, 0x0, 0x0}) 19:51:40 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:40 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400046]}, 0x3c) 19:51:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x300}}], 0x0, 0x0, 0x0}) 19:51:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30750000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:41 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x20000000007ffd, 0x7d, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x400047]}, 0x3c) 19:51:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x15f) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x163, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], [], [], [], []]}, 0x578) 19:51:41 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x101, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) 19:51:41 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000600)=[0x0]}, 0x500}}], 0x0, 0x0, 0x0}) 19:51:41 executing program 0: r0 = perf_event_open(&(0x7f0000000280)={0x2000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, r0, 0x0) [ 804.695234] binder_transaction: 16 callbacks suppressed [ 804.695247] binder: 14506:14507 got transaction with invalid offsets size, 3 [ 804.728129] WARNING: CPU: 0 PID: 14508 at kernel/events/core.c:1833 perf_group_attach+0x3fd/0x4d0 [ 804.738103] Kernel panic - not syncing: panic_on_warn set ... [ 804.738103] [ 804.745485] CPU: 0 PID: 14508 Comm: syz-executor.3 Not tainted 4.19.36 #4 [ 804.753447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.763063] Call Trace: [ 804.765654] [ 804.767997] dump_stack+0x172/0x1f0 [ 804.772073] panic+0x263/0x51d [ 804.775280] ? __warn_printk+0xf3/0xf3 [ 804.779168] ? perf_group_attach+0x3fd/0x4d0 [ 804.783758] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 804.789464] ? __warn.cold+0x5/0x54 [ 804.793087] ? __warn+0xe8/0x1d0 [ 804.796453] ? perf_group_attach+0x3fd/0x4d0 [ 804.800965] __warn.cold+0x20/0x54 [ 804.804499] ? perf_group_attach+0x3fd/0x4d0 [ 804.808917] report_bug+0x263/0x2b0 [ 804.812647] do_error_trap+0x204/0x360 [ 804.816536] ? math_error+0x340/0x340 [ 804.820346] ? mark_held_locks+0x100/0x100 [ 804.824892] ? error_entry+0x76/0xd0 [ 804.828616] ? trace_hardirqs_off_caller+0x65/0x220 [ 804.833652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 804.838586] do_invalid_op+0x1b/0x20 [ 804.842294] invalid_op+0x14/0x20 [ 804.845750] RIP: 0010:perf_group_attach+0x3fd/0x4d0 [ 804.850862] Code: ff 48 8d 7b 10 48 89 f8 48 c1 e8 03 42 80 3c 28 00 75 57 48 8b 5b 10 48 83 eb 10 49 39 dc 75 d4 e9 20 ff ff ff e8 63 44 ec ff <0f> 0b e9 55 fd ff ff 48 c7 c7 60 9e b0 88 e8 a0 a5 22 00 e9 5b fc [ 804.870017] RSP: 0018:ffff8880ae807ea8 EFLAGS: 00010006 [ 804.875378] RAX: ffff88805d1dc700 RBX: ffff8880952ee280 RCX: ffffffff817efd88 [ 804.882741] RDX: 0000000000010000 RSI: ffffffff817f00ad RDI: ffff8880952ee498 [ 804.890008] RBP: ffff8880ae807ed8 R08: ffff88805d1dc700 R09: ffffed1015d06402 [ 804.897357] R10: ffffed1015d06401 R11: ffff8880ae83200b R12: ffff8880952eeb00 [ 804.905057] R13: ffffe8ffffc13eb8 R14: 0000000000000000 R15: ffff8880ae832008 [ 804.912359] ? perf_group_attach+0xd8/0x4d0 [ 804.916764] ? perf_group_attach+0x3fd/0x4d0 [ 804.921199] ? perf_group_attach+0x3fd/0x4d0 [ 804.925835] __perf_install_in_context+0x4b5/0x960 [ 804.930771] ? kvm_clock_read+0x18/0x30 [ 804.934756] ? __perf_event_enable+0x920/0x920 [ 804.939350] remote_function+0x12b/0x1a0 [ 804.943412] flush_smp_call_function_queue+0x14a/0x500 [ 804.948699] ? perf_duration_warn+0x40/0x40 [ 804.953036] generic_smp_call_function_single_interrupt+0x13/0x2b [ 804.959445] smp_call_function_single_interrupt+0xa3/0x460 [ 804.965078] call_function_single_interrupt+0xf/0x20 [ 804.970170] [ 804.972408] RIP: 0010:_raw_spin_unlock_irq+0x54/0x90 [ 804.977852] Code: c0 18 33 72 88 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 75 33 48 83 3d ed 6c 83 01 00 74 20 fb 66 0f 1f 44 00 00 01 00 00 00 e8 a2 a1 5a fa 65 8b 05 8b 27 13 79 85 c0 74 06 41 [ 804.996918] RSP: 0018:ffff888050d877e0 EFLAGS: 00000282 ORIG_RAX: ffffffffffffff04 [ 805.004633] RAX: 1ffffffff10e4663 RBX: ffff88805d1dc700 RCX: 0000000000000000 [ 805.011894] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff88805d1dcf7c [ 805.019156] RBP: ffff888050d877e8 R08: ffff88805d1dc700 R09: 0000000000000000 [ 805.026425] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880ae82cd80 [ 805.033693] R13: ffff88805c05c500 R14: 0000000000000000 R15: 0000000000000001 [ 805.041070] finish_task_switch+0x146/0x790 [ 805.045389] ? finish_task_switch+0x118/0x790 [ 805.049876] ? __switch_to_asm+0x34/0x70 [ 805.053947] ? __switch_to_asm+0x40/0x70 [ 805.058007] __schedule+0x81b/0x1d00 [ 805.061723] ? check_preemption_disabled+0x48/0x290 [ 805.066752] ? pci_mmcfg_check_reserved+0x170/0x170 [ 805.071770] ? try_to_wake_up+0xcc/0xf60 [ 805.075826] ? preempt_schedule+0x4b/0x60 [ 805.079970] preempt_schedule_common+0x4f/0xe0 [ 805.084553] preempt_schedule+0x4b/0x60 [ 805.088542] ___preempt_schedule+0x16/0x18 [ 805.092787] _raw_spin_unlock_irqrestore+0xbd/0xe0 [ 805.097711] try_to_wake_up+0xcc/0xf60 [ 805.101596] ? migrate_swap_stop+0x920/0x920 [ 805.106017] ? lock_downgrade+0x810/0x810 [ 805.110185] wake_up_q+0x99/0x100 [ 805.113634] futex_wake+0x429/0x4d0 [ 805.117255] ? get_futex_key+0x1690/0x1690 [ 805.121778] do_futex+0x34c/0x1d50 [ 805.125329] ? __might_fault+0x12b/0x1e0 [ 805.129391] ? exit_robust_list+0x2c0/0x2c0 [ 805.133724] ? kasan_check_read+0x11/0x20 [ 805.137872] ? _copy_to_user+0xc9/0x120 [ 805.141869] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 805.147428] __x64_sys_futex+0x400/0x590 [ 805.151490] ? do_futex+0x1d50/0x1d50 [ 805.155477] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 805.160341] ? do_syscall_64+0x26/0x610 [ 805.164311] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.169762] ? do_syscall_64+0x26/0x610 [ 805.173759] ? lockdep_hardirqs_on+0x415/0x5d0 [ 805.178623] ? trace_hardirqs_on+0x67/0x230 [ 805.183043] do_syscall_64+0x103/0x610 [ 805.186948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.192162] RIP: 0033:0x458c29 [ 805.195353] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.214647] RSP: 002b:00007f2da6ae4cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 805.222355] RAX: ffffffffffffffda RBX: 000000000073bf08 RCX: 0000000000458c29 [ 805.229621] RDX: 00000000004c7347 RSI: 0000000000000081 RDI: 000000000073bf0c [ 805.236893] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 805.244269] R10: 0000000000000003 R11: 0000000000000246 R12: 000000000073bf0c [ 805.251555] R13: 00007fff3faaaa6f R14: 00007f2da6ae59c0 R15: 000000000073bf0c [ 805.260549] Kernel Offset: disabled [ 805.264659] Rebooting in 86400 seconds..