f) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip6_flowlabel\x00') write(r2, &(0x7f0000000280)="77e821ab81ab769cb5948bae45dd07458b7dbaa71e6969637a787dd2b4c304c2a943ce8d111279a1937a09e15fe5e0d97fef2943a7e03accfe509065db9da6a804d833214695079ea4b1f4f1163fb0ded732465f8972160c53d3392b1963dc64a0d3e2", 0x63) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="bf8b9b449af5f9dabbe57bbf9d8dda3d64ab6cf38d85ee3850a6dbefa5a8650a9478e869888976e4ef", 0x29, 0xfffffffffffffffa) keyctl$describe(0x6, r3, &(0x7f00000001c0)=""/189, 0xbd) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2], 0x12}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1d2, 0x400000000000) 06:13:34 executing program 3: syz_genetlink_get_family_id$tipc2(0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x9}, {0x6}]}) pipe(&(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:13:34 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x2800, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000400)=0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$inet6(0xa, 0x3, 0xa) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000340)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = add_key$user(&(0x7f0000000600)='user\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="5f15e2b95e8ff27921ecf0a349117ee3ce2d96c6e472679668e952dd", 0x1c, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000580)='^nodevFppp1wlan1system}\x00', &(0x7f0000000200)) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000000000000a004e2400000000ff010000000000000000000000000001000000000000000000000000a6b9ad43ee054704b800000000000000000000000000006000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"/153], 0x90) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") sched_setaffinity(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000700)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000800)='./file0\x00', &(0x7f00000007c0)='./file0\x00') clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) r5 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00634040000000000000001000000001000000000000005c49ecc1f1ebb4f2560e08f14c95bb3f831283e4a0b40e7c7852fda383966e023ca8a586b07f0330ddef87030f1a1abece3443bcbbebb6aa7d476af37704108fe8b8342b10fa82316794794078fa01e59eecc0d6d35bd7a4b9771ffca12e189bd24aced788de7e2a38226db10880525f7a6e0d8df9e5fd0938143bcb16301d15151c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0xfffffdfd, &(0x7f00000000c0)="f2"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)="16", 0x1}], 0x1) 06:13:34 executing program 5: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4002) 06:13:34 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x181) r1 = memfd_create(&(0x7f0000000580)='\xe0\rode\x00\xf5', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) rt_sigtimedwait(&(0x7f0000000080)={0x400}, 0x0, &(0x7f00000000c0)={0x77359400}, 0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000200)=0x6) sendfile(r0, r1, 0x0, 0x800000000000de) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync_file_range(r0, 0x0, 0x80000000, 0x3) r3 = dup3(r0, r1, 0x80000) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000100)={0x101, {{0xa, 0x4e22, 0x8, @remote, 0x1f}}}, 0x88) 06:13:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x40001, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000280)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000380)) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000440)={@mcast2, r2}, 0x264) ioctl(r1, 0x5, &(0x7f0000000540)='\x00'/12) r3 = socket(0x20000000000000a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x24, &(0x7f0000e530e9)=""/16, &(0x7f0000000040)=0x10) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000004c0)=0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0xc8, r4, 0x102, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73dc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d59f64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2120e71c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008811}, 0x48000) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000003c0)) setxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x1) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) 06:13:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r0, &(0x7f00000000c0)=""/49, 0x31) getdents64(r0, &(0x7f0000000000)=""/82, 0x1b) socket$inet6_udp(0xa, 0x2, 0x0) 06:13:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="4f96a5074dec5d8a30f19b6fa0e0978ebb9a2a9c1825e12b7eb7e5512666e5f439df3d575667ab1389de7559c4d48e79db48e143b06241e76a765d2472790c648e274bf19103c0d2ef2937422df0720b8781855d6da2a0f673819fe498d7ad8becaac012da1011731bf888b65551a7", 0x6f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x100000000000000, &(0x7f00000003c0)}) 06:13:34 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = dup2(r0, r0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x81, 0x0, 0x9, 0xd84}]}) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020400000c000000000000a97d8fbc5662b9e84b75cfe879cc11099a025f00000000000200010000000000000000000000000005000600000000000a000000c3000000ff020000ff01000000000000000000010000000000000000030005000000000002000000e0000001000000000000000038"], 0x60}}, 0x0) 06:13:34 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2000, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f00000000c0)) r3 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000000040), 0x40000000000020f, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000340)={0x3b, @remote, 0x4e20, 0x3, 'ovf\x00', 0x11, 0xfe, 0x75}, 0x2c) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") close(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r5, r6, 0x1000) [ 105.602622] audit: type=1401 audit(1556086414.528:19): op=setxattr invalid_context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binder: 3360:3368 transaction failed 29201/-22, size -6853208617416410219--8961040302886613324 line 3137 06:13:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001300)=0x7ff, 0x4) r1 = socket$packet(0x11, 0x4, 0x300) sendto$inet6(r0, 0x0, 0x0, 0xc001, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x80000000, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x37, [], 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000140)=""/55}, &(0x7f0000000200)=0x78) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fe}]}, 0x10) sendto$inet6(r0, &(0x7f0000001340)="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", 0xf89, 0x0, 0x0, 0x0) 06:13:34 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) read(r0, &(0x7f0000000240)=""/228, 0xe4) r1 = gettid() close(r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) memfd_create(&(0x7f0000000040)='/selinux/enforce\x00', 0x5) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) tkill(r1, 0x1004000000013) [ 105.943923] audit: type=1400 audit(1556086414.868:20): avc: denied { transfer } for pid=3378 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 06:13:34 executing program 1: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) fchdir(r0) r1 = socket$unix(0x1, 0x400000002, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x40000) recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x101, 0x0) 06:13:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) uname(&(0x7f00000000c0)=""/76) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x0, 0x3}, @increfs_done={0x40106308, 0x0, 0x1}], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) 06:13:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bd070") r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/create\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0xfffffffffffffffa) write$selinux_create(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:systemd_logind_var_run_t:s0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 00000000000000000001I@@%FD'], 0xffffffffffffff85) [ 105.992320] binder: 3378:3387 ioctl c0306201 20000440 returned -14 [ 106.006988] binder: release 3378:3387 transaction 9 out, still active [ 106.015567] binder: undelivered TRANSACTION_COMPLETE [ 106.024922] binder: 3378:3397 ioctl c0306201 20000440 returned -14 06:13:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="4f96a5074dec5d8a30f19b6fa0e0978ebb9a2a9c1825e12b7eb7e5512666e5f439df3d575667ab1389de7559c4d48e79db48e143b06241e76a765d2472790c648e274bf19103c0d2ef2937422df0720b8781855d6da2a0f673819fe498d7ad8becaac012da1011731bf888b65551a7", 0x6f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x100000000000000, &(0x7f00000003c0)}) 06:13:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', '', [], 0xa, "bfb864080bb3fb6523ffbd47e0ee188fec7190579f997cc051033f8316eea822adbc0d91014c39a2f412e8f774dac7645ad58f70c45fc2883989b8203ac33e7cccbd8b49bc2f449ea48a053083cec1"}, 0x53) 06:13:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') sendfile(r1, r0, 0x0, 0x80000002) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x7f, 0x5, 0x5, 0x4, 0xfffffffffffffff8}, 0x14) [ 106.090448] binder: release 3378:3397 transaction 12 out, still active [ 106.120263] binder: BINDER_SET_CONTEXT_MGR already set [ 106.126983] binder: undelivered TRANSACTION_COMPLETE 06:13:35 executing program 2: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') lsetxattr$security_selinux(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.selinux\x00', &(0x7f0000000340)='system_u:object_r:admin_passwd_exec_t:s0\x00', 0x29, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xac, r1, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x25}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x87}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x12}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x801) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) prctl$PR_SET_KEEPCAPS(0x8, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) [ 106.163370] binder: 3405:3412 ioctl 40046207 0 returned -16 [ 106.187860] binder: 3405:3419 BC_INCREFS_DONE u0000000000000000 no match 06:13:35 executing program 0: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 06:13:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x2) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x0, 0x2, 0x4, 0x17, 0xffffffff, 0x8, 0x100, 0x4, 0x7, 0x7fff, 0x9a}) r1 = syz_open_pts(r0, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000001180)=0x9, 0x4) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000040)=""/123) r3 = dup3(r1, r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x10001, 0x7, 0x10000, 0x1, 0x13, 0x80000000, 0x44b, 0x10001, 0x7, 0x994c, 0x5, 0x20}) write$UHID_INPUT(r3, &(0x7f0000000140)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846ea512a8ccae7a99da8dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1af8ff63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c1829a6030f4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7d12ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6693ee1b9abb5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8217cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057148d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858acd8ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d29428010000000000000062fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006) [ 106.212430] syz-executor.0 (3409) used greatest stack depth: 24016 bytes left [ 106.253582] binder: 3405:3419 BC_INCREFS_DONE u0000000000000000 no match 06:13:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', '', [], 0xa, "bfb864080bb3fb6523ffbd47e0ee188fec7190579f997cc051033f8316eea822adbc0d91014c39a2f412e8f774dac7645ad58f70c45fc2883989b8203ac33e7cccbd8b49bc2f449ea48a053083cec1"}, 0x53) 06:13:35 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) clone(0x13102011ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x100, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x19}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40051}, 0x24008800) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x8) tkill(r0, 0x1c) 06:13:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000200)={{0x2, 0x4e24, @local}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x22, {0x2, 0x4e22, @broadcast}, 'vcan0\x00'}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="12dd32a30c6bb97604136cc3b39597ae5c335f25b63929be822c480393d64a2951488fb748e15ecdf70565536c8ea6c7d45427329528a45579a2337a16a6c899055f81901085010154f45598a146015b9b264b1bece281330a5c3ddcf715e0dbd36e485223b3e92f32d00ef659fb51316b303b1787a7a8a223d7f45184644993b75e6fae46e2c2e930b803306fcfb77b03f7da60fc4c79b906d969313210b568aa68f51674018558598188ef0de40118d6a1cfe71aaa344fdb0637e0b35a7f08f5fa3153856fa25363c4cd82abba4cf0decc9a00ee20e25e619bc3444775bbd5e11843d3ec8c0c60e7cea7298d75ad75f8c495230d66c66a9a7a893498a9d6b0") ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000080)=0x3) [ 106.279553] binder: BINDER_SET_CONTEXT_MGR already set [ 106.285445] binder: 3405:3412 ioctl 40046207 0 returned -16 [ 106.300029] binder: 3405:3419 BC_INCREFS_DONE u0000000000000000 no match 06:13:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) timer_getoverrun(r1) [ 106.337532] binder: 3405:3419 BC_INCREFS_DONE u0000000000000000 no match 06:13:35 executing program 2: r0 = socket$packet(0x11, 0x5, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_flash={0x33, 0x0, "85e3a12a641c45039e517b95b0c80783e2bb632bf01de10cbf2289e2f92385cbde717d7d1c4a118d43e293d6eebe187e96a973238b2d9449071a575e69bfe9318df6688e0bf7d2815a054c3bbaf141b777c32a0cc6d773a78c934b7134721f0b8c23048511ef2654a1c1996a362fea4735cbd1bc588c3ab6abeace8ee29f4b37"}}) 06:13:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000080)="02de1f123c0100319bd070") clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000000)={0x6, 0x80000001, 0xff, 0x6, 0x7, 0x5}) getsockname$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x1) syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') timerfd_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, 0x0) timerfd_create(0xd, 0x80000) fallocate(r2, 0x8, 0xfffffffffffffffc, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) sync_file_range(r1, 0x5, 0xffff, 0x1) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) 06:13:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', '', [], 0xa, "bfb864080bb3fb6523ffbd47e0ee188fec7190579f997cc051033f8316eea822adbc0d91014c39a2f412e8f774dac7645ad58f70c45fc2883989b8203ac33e7cccbd8b49bc2f449ea48a053083cec1"}, 0x53) 06:13:35 executing program 2: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x80, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x8}, 0x1c) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) 06:13:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) getresuid(&(0x7f0000001900), &(0x7f0000001940), &(0x7f00000040c0)) seccomp(0x0, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x20, 0x9, 0x1, 0x80000001}, {0x1, 0x1, 0x6, 0x3}, {0xff, 0xc5, 0xfffffffffffffff7, 0x100}, {0x1, 0x2, 0xdc, 0x5}]}) r1 = dup2(r0, r0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={r2}) 06:13:35 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x280000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x10002, 0x0) write$P9_RFLUSH(r2, &(0x7f00000002c0)={0x7, 0x6d, 0x1}, 0x7) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x300, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x90) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl(r0, 0x9, &(0x7f0000000280)="bcb39d29edbb652faad556ae26d30641ada2401690d2e98a9ee01b4fbd93f6") ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000000c0)) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x17}, 0x3ff}, 0x1c) clone(0x4202200, 0x0, 0x0, 0x0, 0x0) [ 106.588488] binder: BINDER_SET_CONTEXT_MGR already set [ 106.599792] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.616919] binder: 3483:3485 ioctl 40046207 0 returned -16 06:13:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x3}}) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="40980825da03213970748f3bb18590af6428b02b5b92170243d85a79b06dbdc93fe2a8e058782366f86da3ea769a2e3a0aae3e8d00ff3f6ce0d806fe34dd9ed03d6feaf0a832d4919893f605feb732d874478e25907cd81acdd2bc2df8b0c517f2e9eed76afabac75f379e0587060f7eb074c24994702ed29396e9b081ad2eeb2708b2039ebcfa8dae929ef52e90df", 0x8f, 0xfffffffffffffffd) r3 = syz_open_procfs(0x0, &(0x7f0000000640)='net/netfilter\x00') ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000680)={0x5, 0xfffffffffffffffd, 0x9, 0x7}) r4 = request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\\$[*,vboxnet1)}\x00', 0xfffffffffffffffa) r5 = request_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='/dev/snd/timer\x00', 0xfffffffffffffff8) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2, r4, r5}, &(0x7f00000003c0)=""/90, 0x5a, &(0x7f0000000500)={&(0x7f0000000440)={'sha512-ssse3\x00'}, &(0x7f0000000480)="2480f50623efbbbcf82454defca20f88ce90509de8005c8c23d1d3f42f61515d0b39454061a73ae71d9234e8128ba7e564d19784b84af471984e09401fdf06c3c788222d56f21a1b17564bd59389887820dd2a3445433b49d8e88511b28ba21be5745e827b4159e001c56b0fbd82d1fcd7a92d", 0x73}) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000540)=""/162, &(0x7f0000000600)=0xa2) r6 = dup3(r1, r0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, 0x0) 06:13:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) write$binfmt_script(r2, &(0x7f0000000140)={'#! ', '', [], 0xa, "bfb864080bb3fb6523ffbd47e0ee188fec7190579f997cc051033f8316eea822adbc0d91014c39a2f412e8f774dac7645ad58f70c45fc2883989b8203ac33e7cccbd8b49bc2f449ea48a053083cec1"}, 0x53) 06:13:35 executing program 2: setrlimit(0x9, &(0x7f0000000080)) clone(0x20884104, 0x0, 0x0, 0x0, &(0x7f00000004c0)="3084d348a0ce1c4fe5c0db34709b1a65db") 06:13:35 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r2 = openat$cgroup_ro(r1, &(0x7f0000000480)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) fstat(r3, &(0x7f0000000100)) syz_open_procfs$namespace(r4, &(0x7f00000000c0)='ns/pid\x00') ioctl(r3, 0x2, &(0x7f0000000280)="044f161de04a5d9a3e46d701fc185e728267634390ccb3ca4ade18881b0b857e6e380f147f981f4e469b75603e730e80acb41980f53e000ea28ee1795849d846f39bc37ce0ff0d3284e87b75c41ad798099a0ad7504eb54813c4dabf285da40034b450d337859b64d280924e5f3810cdc9bdda9d8533fd58f0120c9bdba9208cfa7ce7fb9d7a530e25316cd800148606f8c76a9fdff8b463312397dcf1197123938d55e8308618cb2fc5a540b840f4b3d9d41492883bc8e5f6b456c00fad7713bd822ef01bf57fbf38f30f3efb470dad5493d1") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'bcsh0\x00', 0x2}, 0x18) write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf}, 0x2000008f) [ 106.646693] binder: 3483:3485 got transaction with fd, 0, but target does not allow fds [ 106.666676] binder: 3483:3485 transaction failed 29201/-1, size 24-8 line 3241 06:13:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r1, &(0x7f0000000000)) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) close(r1) close(r1) [ 106.732493] binder: 3483:3491 got transaction with fd, 0, but target does not allow fds [ 106.749406] binder: 3483:3491 transaction failed 29201/-1, size 24-8 line 3241 06:13:35 executing program 2: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/attr/current\x00', 0x2, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000000040), 0x0, 0x0) readahead(r1, 0x60, 0x1) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) preadv(r1, &(0x7f0000000700), 0x31f, 0x10400003) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2052, r1, 0x0) 06:13:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000040)="d257af97406c7144b922f3d60b4bb9860bd75b87e35dd23a3295c7b366bb49cb38dfdb9f9802f21e419d31016f363a59afd643ebb395da3db48acff77604d6624f0a50cf86f9c94367c39a352cad2af4b0e4e9150cc133f812e44e2e2a8aa64c26071d267539343df86d5f9a78e8541a0cf1efedfa9205b8b88d2d979320f2e2addd7925f2998a7a046e0183eed4393c22c372bdc6192e8cf8820bfba72d3edad1", 0xa1}], 0x1, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="390000001300090468fe07000000065f5085b83f03000000450001070000001404001a000600000000ffffffff00000800005d14dfb51571a4", 0x39}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x1, 0x0) 06:13:35 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 106.780475] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.815165] binder: undelivered TRANSACTION_ERROR: 29201 06:13:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:35 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084503, &(0x7f00000000c0)=""/202) r1 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) chown(&(0x7f0000000000)='./file0\x00', r1, r2) [ 106.838516] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futex(&(0x7f0000000000)=0x2, 0x3, 0x0, &(0x7f0000000100)={r2, r3+10000000}, &(0x7f0000000140), 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xb) ptrace(0x10, r1) wait4(0x0, 0x0, 0x8, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) [ 106.885678] binder: BINDER_SET_CONTEXT_MGR already set [ 106.906513] binder: 3524:3529 ioctl 40046207 0 returned -16 [ 106.935246] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. 06:13:35 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) r2 = inotify_init() r3 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$RTC_PLL_GET(r3, 0x80207011, &(0x7f0000000300)) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000002c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000140)='/dev/keychord\x00', 0x200, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000180)={0x0, 0x5, 0x5, 0x0, 0x0, [{r1, 0x0, 0x2}, {r2}, {r3, 0x0, 0x5}, {r4, 0x0, 0x400}, {r5, 0x0, 0x8}]}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x801, 0x0) write$uinput_user_dev(r6, &(0x7f00000006c0)={'syz0\x00'}, 0x45c) fsetxattr$security_capability(r5, &(0x7f0000000240)='security.capability\x00', &(0x7f0000000280)=@v2={0x2000000, [{0x6, 0xac0}, {0x200, 0x8}]}, 0x14, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, &(0x7f0000000080)) 06:13:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x7}, {0x6}]}, 0x10) 06:13:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x10080, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000280)={0x101, {{0xa, 0x4e24, 0x100, @mcast2, 0x1}}}, 0x88) umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000002) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) r3 = getpid() r4 = inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x100) inotify_rm_watch(r2, r4) fcntl$setown(r2, 0x8, r3) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) fchdir(r0) [ 106.962267] binder: 3524:3539 got transaction with fd, 0, but target does not allow fds [ 107.024807] binder: 3524:3539 transaction failed 29201/-1, size 24-8 line 3241 06:13:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:36 executing program 3: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0xfe}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 107.073490] input: syz0 as /devices/virtual/input/input10 [ 107.107070] binder: undelivered TRANSACTION_ERROR: 29201 [ 107.165050] input: syz0 as /devices/virtual/input/input11 06:13:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_execute_func(&(0x7f0000000000)="40efc4a24dad9349ffed166436f390c4c17c51ed66f0802b4a2e430f004f0564360fba6c9c810f450f01d9d9ebc441f9169f6e000000") setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000280)=0xcf, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @rand_addr=0xfffffffffffffff9}, 0x10) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={r0, 0x0, 0x1, 0x3, 0x1}) 06:13:36 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:36 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x41) r3 = accept(r2, 0x0, 0x0) recvmmsg(r1, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r3, 0x0) 06:13:36 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, r0, r0) keyctl$revoke(0x3, r0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) keyctl$chown(0x4, r0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000140)) 06:13:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='reno\x00', 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e24, @multicast2}, 0x767f5490cc5fb764) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x8fd) 06:13:36 executing program 3: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003ff) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) lseek(r1, 0x0, 0x4) close(r2) [ 107.669640] binder: BINDER_SET_CONTEXT_MGR already set [ 107.676156] binder: 3580:3582 ioctl 40046207 0 returned -16 [ 107.692287] binder: 3580:3582 got transaction with fd, 0, but target does not allow fds 06:13:36 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() clone(0x100000c04007ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x102102001fea, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = memfd_create(&(0x7f0000000e40)='\x00\x00\x00\x00\x00\x00r%\xf7\x83\x80\x80}\xdePS`\x18A\xa0\xd0\xf8+t7HR\xb0\x1f\x12Y\x97b-\xc4\xa5\xe7\x1d,\xe5\xac2\xff\x90\x82O\xa2^Y\a\x04\x89M\xa7@\xf7\xe9\xc0\xff\xb4,5j\x1f([\xfc\x8f\v\x8cor\xef\x15\x1d\xabL\\*Zu\x1f\x04\xbf\xc6\x9a\xc5\xc3\xb5\x16\x8am\x13\xd8&\xb1\xed\fu\'\xd5\x8fT\xad\xc1/\xca\x1f%\xc8\xfc%\x86\xeaM\x90\xf8M\xab\xcd\xec)\x1f\xb7\x80\xa3\x9a\x11}\x12\xb0\x89;\x18 \x98\xdc\xee\xd3;\"*\x1dA7\t\xae5]M)\x7f\xe4,]N\x9d\x8b\xbd\x9d\fp\x9c\xaeG\xe8\x8f\x8a\xa2\xaaP[>\x99[P\x1f\r7S\xcd5\x10\xe8t6a+@\x13\x05\xf3\x16\x17\x7fmMLp\xfd\x9d&!\xc3pz\xd8\x8d\xa7\x85%\x96\xd8\x9aY\xcbtP^gZ\xc6\xeb\xc0?\xaa>\xe9\x98\x89\x17kW\x115\x03\x1a\xfc\x97\xce\xc4]\"\xfdh\xc5\xbd\f\x9d\xce\tby(A\x1b\x83\xf6\x8b\xf7\xbeK!\xfd\xf0\x03<\xf9I\xb8\xa7j\xa6]h\xad\x88Yg\xc2\xcc<-`\xect\xfc\xf5\xde\x16,\x94\xff\xe3\xe1Wu\xc1\xa1\xcf\xd9\x81\x8dL\x17\xa2\xf8\xd0\xa70%8\xf0y\xe7\xb1(\xef\x12<\x8b\xb9\t\x00\x00\x00\x00\x00\x00\x008\x14\xc2\xae\xa8l5\xfb\xf4$Jdc]2\xff\x12\xe4\xdc\xb3\xdfV\xe5\xd5\xd3\x88*\x99\x84\x99?\x8a\x7f\xefr\xd8u\xd2\x1c\x1e;\xb2\xbc>ny\xa2\xb6\xd3\"\xf7\x10\xf07\x8a\xbc \x95\xd3!9\xe3\x9f2#\xdb\x99a0\x92\x95\xe4\xc3\xc8\xe1\xb0\x00\x1d\xd7W\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\xec\xa8\f{\f\x00\x00\x00', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ptrace(0x10, r0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x0, [], [{0x2, 0x1, 0x9, 0x0, 0x80000000, 0xffffffffffffff81}, {0x4, 0x3, 0x58, 0x4, 0x39e, 0x20}], [[]]}) write$P9_RFSYNC(r3, &(0x7f00000001c0)={0x7, 0x33, 0x2}, 0x7) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000080)=0xdf) 06:13:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000480)={0x77359400}, 0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)=""/176, 0xac}], 0x1) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1004000000016) 06:13:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 107.712798] binder: 3580:3582 transaction failed 29201/-1, size 24-8 line 3241 06:13:36 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:36 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @rand_addr=0x7}, {0x2, 0x4e23, @remote}, {0x2, 0x4e20, @empty}, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x66b, 0x8, 0x81}) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/26, 0x2000001a}, {&(0x7f0000000040)=""/27, 0x1b}], 0x2) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/141) [ 107.781773] binder: undelivered TRANSACTION_ERROR: 29201 06:13:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 107.844643] binder: BINDER_SET_CONTEXT_MGR already set 06:13:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') sendmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000040)="9896e536a124310a97461f2b45d505166d921d7c38760a16c844241c09e09f77941085452e9ac9c77ecfa43c9503c4884d188eb29c9a167430a5267cb44aae4271251498d0e35a2b15b63df8ded86cad40b497d1eaf69ee05f09c858", 0x5c}, {&(0x7f0000001240)="d38e1cba8902f57ba1b674876fcd219c5bd50f0fed56939ed2ebe9b3e6fc2c217db48d0ef93d2c8ceb9359746df4a0a029437a02345b97d59def0f5f048e8fec976b0267711e5fce76a85c52feea16832b8407feee6b686c10dc", 0x5a}, {&(0x7f0000000140)="27d161a7dfaf5f77314cd8be75368af0e6ab05970ddfd1a4dbc4f24beba718a5d3883fff30651a1cc0599b5e0001d2ba45aa9bf16cad9635e8b09c0303c9debc840b891e5a4fd5514fbdb6c48dd4dd6f1277bd55b5bc6dc69417da88ba1c096671fcc535504bab7a6270377ef030566e025af1bf1a676abbff39e639751c404dcdde4f7f9de9bd9ac5541a6c577fddd7531cd3062c60b98b7547a84af27093d89269ad6a055de1ba81aeb55b1117104454fbdaf76f2da982fc1bdc09d981c5d1116198a99dce259f2c6f3b619b9563ccff77e9e1d60492ba748da2aa2699190b3c70dfe58ada0a49fbf80b2bd06dd5a5d39226924d1fa20ee36f46bb044ee60bd7acb5668e4769e1a8543f49038f5840145758c42b32a065fc00b9bcfaafed3222b15508b1ec205c8889c60717ea7dee043d5cad46afa0cb0dbddc05177472e4cf6fabb41b21dcdcde86cf2911ab64b89b20ef925192a64f0a4eda35b47c73c8ee066977730ef3c9aee955fa7f499a8111e8d64b427b4236fbdc354ddafb1e80831871a81f7479b9a5921a483baaf479db55dbf1fac233dab9958fc8b356c4954764796c9d11975ab0a6514090119cd9ad987f1afc23d91a308cc47e9f36331924f4736f08f473d71cc6e25bd97ebe5bd5d6e9e5c12b80c23a43e36c06c1111717adba5a07eb9d629dceb9b7606392f8e4a81d1f9921acf43f9ad96b3499c5d8a02e65b4af07a9a4035f10fc308bbeb32d74078b769d34c07446272b33b676546c36d40c523a2cdd9189eb4c156f1ce1d3c2db9982b3207bf35e26b51677ee0b7ef1d5c8b0ae21bf2adb33846169725dfa529b30bc191047454b97ac7c37838c89fcc8cf41b109d79be30d506b3e6c5a74f49e775744b3ce8ea03440a297ee6e0a50e707b05c980290963b364facb6632b1f09de55b5aa616941961e111a67798565733540cf1383986f5a1c9c90c6d70c05ba2e280ad82b728b2f0c5c9a780dd572cdcf65a89d3c8a670bb4aef6a4357416b48dd672b0721103ff577719cb8c39245586cf7fc5451654b03aebe4996534eab3e7bac07712a94618ab28f43b25619212237d7bdb2da2f4f6eb8245dd1ad47a25d5e2588aa5bfe069ea7ef55dcf15c51da4599c3d612fb0a8c3c0968375cc5617ab10e4f4a06a333311e52f7a5951b2a865748dfc1c74fe89f722ec1dc29ea48422e752bc042f709738d348754909b0b9297825fbb89b84949a3bd57897e3e1c1f302e11605d854a007ff58708f0bc9fc4f6377a13b5754a84c2b1f86f3ac66fe2db65128a5bf6c9c52aac19186d3d7d32500319288e8386ba8ca76d2029a75f7c5c7e61f1ed273a50f991059b5dd767d2e3c1bd48615c786ae55f61c89f6acbe104ba8df9918c0b5e5b0cc77284ee6bed3024f2b55052c4b3b026c92a7e214154f48035a7edba61d6391b079e0caad5751f8511b27b9fb86a9bdc4cee9bde0ac0e4657950cba67739621b55f020f48e92dca5630a66ba23b42683d5032a5ffabdfd0d95e77a4121dae85d2ae9a2287b11f96ae47926f24eb947578275f016fd2418720813cb74e69be90e8c4bdf00459332a90f7c063406dc7c491fba3bd103b2fc7ace570ffc3afc851b229e5cdb8ee132e2ebfa78fc4a0b6761c3a4352e6627f0384f3949a7e09bfc41a2b04e5812faedbd7115380f3f1febc1c1e8bd86f088f3f1079d7d47fe5e8e04d035cff62443876d1beba02dfc3114d066bcdaa7bedd472f0ea622749082846436426dadeb36f6de3ab6f3053f604926630a24758c41489acb195979c4a5d5669e5180c5549551e5c86f3ee36c3baf4588786e685dc7f5cd17d8eb3e908e34335d2a45c8bb012b6e4932074c51b218cc6ebd418c4d6bfa07ac841a96bfab25b34ca8956fa867a5f951f74cc544d08931e38e285d66e6cdf0dc0f1d887cf1389b09d88f114924fbc634e2431ad39ec036d03993816d93c8cb436b7a0cc2aebbc21611168dbb595cb040d1521a786705fd427f63be563fff823cf2adbc2d586e5f1758cf6fa4cd70c00a1679323752cabe1dcc9a969a4160198dc40c4182bc4463266273b919980b53ac8155c681a20bd58e5e73ec056461a8dd7960fa3e6c369be967697a7cb514b142c42b6cf963447cc37118cd80c6ac195886adbcca6a1c523ec047a1b7dc5461b359ace024414d4296c808d031b113b3e7b586694455cca4d0e65fd63b3189b305792553a975dd95fbec8501b9bfbbb967dabe029abccee03ef39bad797d80fcccfce6df4a7fd1feedbac9e6b4acf7eb914fa1be9b8dfb90dfe0290dc2767befb357aed5f318dd8589a5a699e23d8a6526f088ba4435ba2627013e22143a492bd5ba159dc0e93280d53071014bb856e2a7cb2273e560b430d6f497ded04f9ad40b53e4ec7574bfe0c5077fbc93cd3f78e3d59b6fde10615709fccce029dcfa7f8583f8131dfef5642d5233777c1612d9babc7d80c316cd2e73db39f2dd48575d935665ab0595ddfa402e85dfa26cfd63fa8c6c1c08e5b4e73d11c92bb87e842d2e8095dccca62bde4aec57382abbcd5bff2091ab3ea2462d7856be2d13c91e3f9f97e382aa59363361bb8e0ea38260885937fdc5e63dea13e8599a6048a09de6605aeffd72d3d331ea636917feb2085c161666ab852fd670406e802e8c1692c04ad0331dea3ac384093e5876c5b83383b89e863f54274c2aafcf6e619b0d9bc3a72e3cea7c6d0228e3689d7b8e1e41e5afe040d548f6ac8f296aa02968e1a1b8e9e48077447e9297bf0f41fec59e4066e318ec61edbe1fb9c95418b8e18f83745b36e07efeae574190ad7e2a83e2a84ddaff80cab1c9c10b8533dffec0c8d663ab0cc6f5f7c9040fade7998022ccda84503102930373e4e5530f9e3aad133cf78a63cea36ed3a3c2a3c7b8636d288801e13ac2189911194230bea570d0360f79ed44f7234d4a77c47bfc42c3918571eba9008211fed0f52f9adb360ac3c843a35c84a4e7292ababd84f1272b26e4c9e67d0e07ba578f3611f2320510f44313bbb5b2f69aecd2626d38593eb1df9fda7a75d1497763b6efa46a590493b85f7b490cddf23fb521cd481724d1182156b703ae6520d7a74b5d311c7f1606f91f1b0ee296cf9b451ae58a49f35164c660cd43089ba32bf5400f6287e81d0475317df3ce91fedf7abb33996f6ffdfae67bf4ba64e3f134b4b8c48e42decf9264cd1e7df7f09d51b3f45a964bf6451ba727bb7e2edd80ac56abf9db0435b679dfcda0d5e8452d8817b364b9ecc2cc21f7dc9c10cd15c3acb3d03aadcf70b7d24057a81d85e94de0178e85369474362196e30fca266ad5ba3a0a78fbafb5ef100be8e305320eab97a7ccdb355e10aad867b13c3e3fb890addcee11e7df5e2cef99bb01f87702ead460836d810e597a3fdcc1af12ec575e253d32ffeac3f686527aedcf7a026953e3d0a9ea416ff867b81618e7d470fa93e86d9f35a5a1a19519c8bf4d175e8e5293ab7a7d4794759704c9017b2125493244cb2b9b35f8ca11dd7b592118133ba99d56c8c408a0e05ed2ccb8b5269254c142f6c6d5d358cdd19908824fabd8a1de7d91b6d1a7e6d04a5db0a6a2ce6e38d5e64850838400ec1fbe0d48d09562bf44d52af943b8da46348c08103483fed4a70b36277d2e0e057badb18b50e757bd84c24b1b11db4b3d9b3bc4f895830d16a40fb9e89a0a7a746306ea6d46bad6fd50cd833e1a16d3494611ecd66d334644a1af0b8ca22e34ec4b47fba4b8b6a1fe5c0f8170a0b5bf87b19a1821bcf323492b73e579c5ae4fb3ca4a75dc3b8c57e38aab7fb5077bd706ba17e7fcd9787a947b42c4c5c9751c95f33b8059bc345915e1cd13184cbaa6c8cccc0e92a5ba256638ba12e19c7f79a9969b57dccd30e41bd42f272d98c38f378be17d55d3a6f95cb30d44467d2e61a574073237f1c20484847664b40eed0839e5f2efcf85ee00f97975b8eee7ee270ce7437ccbb595553dd42b012deacd776250d61eda8bd92115db4a152a5bcb90f75aa9bd7613f315eda421c679b0dc9e0c006219a635b5cb48e2397b0f9964aa1adff008e3769d83aa686804047ed5f0bf901a3ea5eb758857a9a7797d191e4c99c315ef8dbc558873ccb96270469ef0f10e432487b585dc75ab1fdfcc2e7026676a01f1b03f42dc713933027aa06a1285d5513d75a661e73d9db4b5e8a0b721c626b5f0daf21b87263c231f9ffb1795c77e6aecbc87ebfcf9c3ceab24f01c08d3b86677108b2ccd103a993d70629ac8e3e9635cf6efb9883241115217185cba0589f6df4ccfe6004d3083a72e97dd26d96d8a202a0c72bca86ce215aa69b09e9d53bea22ce6d47c638d24f026268c53be01a044e7ecdade97829f469c53d397893fcc3f3ff2af14caa33212e9330cabffca175272aca647e730aaf8ac4d19aa6f9518e459520e67a9b673f04cb78034e46880a6aba1d4d65980a0c887988fc2007d9d530f4b4e24dd2cc490bd35f3648115cb361411ab2a2f8f02d0df9e44946caebfce856f1d336137e62af19779bdc1a33efa97334c598080e32b9c751ade858ccfce84207d6f480b10f2cfff840077e8038c5e1e485028d547bfb1ce3ff3e11f6a0fa57329ea48f9554f5beabfa3ca6dc0982403be65e8942013031eb24e933e5f4f9873479d02edb0d66992ef53741d71e3a8b53a7a8b90054960a3b4631a04ede3dc5e6598ae75800a626510896b59524147d71c3ab52da0168c95a035fa49698d0218d0f6b2b6a9ccdf6fd30b137aad1212d6ebfbc7d7e778800794a22ff70c5f5434b13acc6da56f07994543805274d87a4752f7e11f7f62e83ade8d2c37d54c5c30f702aa7481dea3551fe212e68c77eee86c53f02731eefc88c6eabf2ac3415a073788de51457c91bc2c50a4dec865f44b3a56159ab2f5c45631848dc1ac126124b6f6c1e884f79a7265da7e9fcb65a9f9b8c508ff749e1bee4c1dc39dc79138b396cc2cd237b7f640bf31022443e1c52b4f9f8568d9116ddc11170dcc5f80d766e02f9f2ba69ab36d313813f46bc4e60a6a853ac793a98710c4b57a2a0e4ce5b43c50a6beaf954488397bd174e1aa7bc85b5f6c6d10a4fa8e7df431d1d072cc74942c755e6b2089176e842f5da6507cbba10337d418b0d52c29d8951a49e9e1f8e7393c5b8f16005d2e6e1fba27265bd6f159a7be834fd8b827e2974f04a1cf4eb3c685060f9599648e9c9ecc7cbd39271f8e8549cb1e2286eca921ef25cc6a8dfd3707223a1b11f934b6b4d68d45fe005f2ec97949f1c9bb569be5bdb311b7f2a2d41c999b0fad449b25ed1e6857b445fb107772a11c802a3476481bf2caa0f81e95e1cd9031d40f42cd238ec3dba2e3ddc64b2fb317464ae52bdfc1e2c950d25eb0d76b83caa8e789d2ba3cb6e6c413c060b07247331fde4bc6c4d3b2eff56369a2805bca63990b113c9d8db66c5b3e146525ee6e6163748c2a9b4b84871d95a29448b1ac7c8faa223852026a04867ada8cc0a5616e4f3b65f1c28ead3ed3c448b3f0f8aa7253c48f9df6170df2af2c7362c94194ffb9c4c04862fd9df384b16f9fcf27b8e5a4f931934bf9805c78db8978e4351c8c3b39aa88e5f8497ed60a2dd2452f069a7e05820013df0138934689c51eeeaaca22b6ab54bdb125e17aaf4b2b8c6ee8418b0efee6fe6a962d691afa83f38c0c733a7bd1b75dc25ac498bb489594f9415461a01c476cd483d1b31d5c1ebd23bc8cba9afa01f7f6d02de2ea7cac1790ac54c3729b99faa837e7049b38745b8a515810da6c17946", 0x1000}, {&(0x7f0000001300)="b8b1a92593579e1a585b8ba6680496ce9ae2872a204f9d641e528d4ca551eff1ff1fa31476d9664b212b58e4eef2d49b26d3527fd11c30a5890c12004b183317b76aa79a8674024db806379e63e4393393e49738b84a23183187a09b7f453f3a6db7d2a1178d6e977f340a1cd54a809bbd000cbfcefdcb37422ed73651c7c5cc11", 0x81}], 0x4}, 0x4) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) lseek(0xffffffffffffffff, 0x0, 0x1) [ 107.871333] binder: 3613:3614 ioctl 40046207 0 returned -16 [ 107.904947] binder: 3613:3614 got transaction with fd, 0, but target does not allow fds [ 107.924696] binder: 3613:3614 transaction failed 29201/-1, size 24-8 line 3241 [ 107.955650] binder: undelivered TRANSACTION_ERROR: 29201 06:13:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x140012, r1, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8800, 0x0) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000040)) 06:13:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:37 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) write$P9_RSTATu(r1, &(0x7f0000000040)=ANY=[], 0x445144e9) r2 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffffd, 0x4) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) creat(&(0x7f0000000000)='./file1\x00', 0x0) 06:13:37 executing program 3: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x8000000000f) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x4, 0x20000000, 0xf8}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") sched_setparam(r0, &(0x7f0000000080)=0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) [ 108.504673] binder: BINDER_SET_CONTEXT_MGR already set [ 108.524216] binder: 3643:3646 ioctl 40046207 0 returned -16 [ 108.538394] binder: 3643:3646 got transaction with fd, 0, but target does not allow fds [ 108.555249] binder: 3643:3646 transaction failed 29201/-1, size 24-8 line 3241 [ 108.572380] binder: undelivered TRANSACTION_ERROR: 29201 06:13:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r1, 0x29, 0x2000010000004c, &(0x7f0000000040)="2695dc4d", 0x4) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x21) fcntl$setstatus(r0, 0x4, 0x42803) sendto$inet6(r0, &(0x7f00000000c0)="2c0dd7a085751dca341c6aa50b88fc9c70a520b718e44829ee898ea8f01474b9b448983e64450c740a198f643fadea687d69a9b90564e02027739c88c8f190c19d3910ac1fe32be6ad124736e16b2ddd4f168b8ebf11926cbf5f00f770eeedd597b0130af6b7cb9e878040bac91d13a545fd2a32a9055aa43a3dd211129871d04a03ab02d458030ab954bf78778b5365ad91aeadb812dca555720a72a5e2b695294e5a6cfe6d3a3018f888a5b44af59d7860fc650aaa3ce52ef4d0b91f65d7ead7bd430399f26486cba6039685c7afe18ecf53d23a99b47f23b067511a5668125c", 0xe1, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @mcast2, 0x81}, 0x1c) 06:13:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1]}, 0x18) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @rand_addr="a11a7485e49671841b5e68e43426b27b"}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000640)=@dstopts, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:13:39 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:39 executing program 3: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18}, 0x18) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000001640), 0x1000) 06:13:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a32edb84560fa74ecaf974e954e29be8", @ANYRES16=r1, @ANYBLOB="200025bd7000ffdbdf25020000000800040002000000080002000a000000080001454e210000080001004e230000040005000800040001000000080002000200000004000500080002000a000000080001004e240000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000c0) 06:13:39 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x40000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 110.766924] binder: BINDER_SET_CONTEXT_MGR already set [ 110.787771] binder: 3662:3664 ioctl 40046207 0 returned -16 06:13:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:39 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 110.794862] audit: type=1400 audit(1556086419.718:21): avc: denied { bind } for pid=3666 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 110.812285] binder: 3662:3664 got transaction with fd, 0, but target does not allow fds [ 110.812350] binder: 3662:3664 transaction failed 29201/-1, size 24-8 line 3241 [ 110.830890] binder: undelivered TRANSACTION_ERROR: 29201 06:13:39 executing program 2: r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = open(&(0x7f0000b91ff9)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) fallocate(r1, 0x0, 0xffff, 0xa) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) sendfile(r0, r1, 0x0, 0xffff) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)="0d4e63fa8ac65f005b7d6375d539e31ec948fb0600377ae38be231beaa587ec5b00939bae19bd0ab5b7c43c9d127fd55829053ce474f5b5480c9c5ee48bab73e53838f7d44b548c077dcd3b17cc7f0672a1a656054b30ef76a145f1eed22ea6f69d86ccd0bfc30d419c63e105e232738121fcb9704574fa5f51a4503fe6fa526857ae2f4daff9958231910aff8e89dae8bbe2578c77c08776be4de33f7e2f8b3eabe3b572d44c752fdddbd2462975facc22db924a60eeb88de6748720ee963a2cabbd6232e53894ad84e71cf5f3336d044294321c0676f5a9e6a9ef7d49c6dfdff6567") [ 110.893604] binder: BINDER_SET_CONTEXT_MGR already set [ 110.911401] binder: 3685:3686 ioctl 40046207 0 returned -16 06:13:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') iopl(0x3) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x108, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000000)) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0/bus\x00', 0x88040, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) creat(&(0x7f0000000500)='./file0/bus\x00', 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000240)={0x1, 0x7, 0x80000000, 0x74da5a31}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) 06:13:39 executing program 1: syz_open_procfs(0x0, &(0x7f0000000080)='attr/keycreate\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 110.942560] binder: 3685:3686 got transaction with fd, 0, but target does not allow fds [ 110.969427] binder: 3685:3686 transaction failed 29201/-1, size 24-8 line 3241 06:13:39 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:39 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) unlink(&(0x7f0000000200)='./file0\x00') listen(r0, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20072bbd7000fe78c8a0ed08f479cb00030008080500ac1e0001080001000200000008000100030000010000030002000000080004007fffffff"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=@fragment={0x3b, 0x0, 0x1, 0xffff, 0x0, 0x400, 0x65}, 0x8) clone(0x1000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)="c4529109b95b6c7e9ac0a76334db61ce4a75d081fbfde232b362f8b22b1261607bd6ca53c01ac3a570cc5ba0434096d48c", 0x31, r0}, 0x68) r3 = gettid() link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3b) ftruncate(r1, 0x7) [ 111.000060] binder: undelivered TRANSACTION_ERROR: 29201 06:13:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 111.084165] binder: BINDER_SET_CONTEXT_MGR already set [ 111.094244] binder: 3709:3711 ioctl 40046207 0 returned -16 [ 111.105151] binder: 3709:3711 got transaction with fd, 0, but target does not allow fds [ 111.131278] binder: 3709:3711 transaction failed 29201/-1, size 24-8 line 3241 [ 111.157168] binder: undelivered TRANSACTION_ERROR: 29201 06:13:40 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 06:13:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bc070") r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="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", 0x534, 0xc001, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000300)={@remote}, 0x14) sendto$inet6(r1, &(0x7f0000000180)="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", 0x119, 0x4844, 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x4, 0x4) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), 0x4) 06:13:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:40 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:40 executing program 2: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='loginuid\x00') write$P9_RLOCK(r1, 0x0, 0xffffffdf) 06:13:40 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x40000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) sendfile(r1, r2, 0x0, 0x8000fffffffe) 06:13:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:40 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") setitimer(0x1, &(0x7f0000000040)={{}, {0x0, 0x7530}}, 0x0) setitimer(0x1, 0x0, &(0x7f00000001c0)) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req={0x4, 0x61, 0x2, 0x2}, 0x1a0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), 0xfffffffffffffef2) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="bb9793112625bf3d02d8e437d6148208", 0x10) 06:13:40 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x40000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) sendfile(r1, r2, 0x0, 0x8000fffffffe) 06:13:40 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xb69db3f1ad44c8e3, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = timerfd_create(0xffffffefffffffff, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timerfd_gettime(r1, 0x0) read(r1, &(0x7f0000000080)=""/4096, 0x1000) 06:13:40 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x3, 0xfffffffffffffffc}, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) [ 111.628787] binder: BINDER_SET_CONTEXT_MGR already set [ 111.653069] binder: 3732:3736 ioctl 40046207 0 returned -16 06:13:40 executing program 4: creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x40000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080), 0x4) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 111.690770] binder: 3732:3736 got transaction with fd, 0, but target does not allow fds [ 111.701088] binder: 3732:3736 transaction failed 29201/-1, size 24-8 line 3241 06:13:40 executing program 3: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='rdma.current\x00', 0x0, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, [], 0x11}, 0x8}, 0x1c) keyctl$setperm(0x5, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000280)=0x1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x30) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f00000001c0)={0x7, 0x40, 0x7}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$FUSE_DIRENT(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="68000000f5ffffff050000000000000000000000030000000100008073797a00000000000500000000000000000200000000000008000000060000006b6562a7696e6700060000000000000001000000000000000000000000800000"], 0x68) ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070") keyctl$set_timeout(0xf, r0, 0x0) 06:13:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:40 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 111.750083] syz-executor.2 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 111.774063] binder: undelivered TRANSACTION_ERROR: 29201 06:13:40 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 111.814279] binder: BINDER_SET_CONTEXT_MGR already set [ 111.828276] binder: 3770:3772 ioctl 40046207 0 returned -16 [ 111.848701] binder: 3770:3772 got transaction with fd, 0, but target does not allow fds 06:13:40 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x20000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/149) ptrace$cont(0x18, r0, 0x4000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x12}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:13:40 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000301ffff720a0000003bc8dc10b70e6ed700150000000000"], 0x1c}}, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000001c0)={0x1d, 0x12, 0x15, 0xa, 0x4, 0x6, 0x3, 0x28, 0xffffffffffffffff}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0xfffffffffffffff8}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000180)=0xc) 06:13:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:40 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 111.877818] binder: BINDER_SET_CONTEXT_MGR already set [ 111.883977] binder: 3770:3772 transaction failed 29201/-1, size 24-8 line 3241 06:13:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) sync() setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x33, @empty, 0x4e20, 0x4, 'lblcr\x00', 0xd, 0x0, 0x48}, 0x2c) [ 111.936767] binder: 3778:3780 ioctl 40046207 0 returned -16 [ 111.937276] binder: undelivered TRANSACTION_ERROR: 29201 [ 111.953845] binder: 3778:3784 got transaction with fd, 0, but target does not allow fds [ 111.968043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.977551] binder: 3778:3784 transaction failed 29201/-1, size 24-8 line 3241 [ 112.007464] binder: 3789:3793 got transaction with fd, 0, but target does not allow fds [ 112.025474] audit: type=1400 audit(1556086420.948:22): avc: denied { getopt } for pid=3788 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 06:13:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:41 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 112.056376] binder: 3789:3793 transaction failed 29201/-1, size 24-8 line 3241 [ 112.071957] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.087526] binder: undelivered TRANSACTION_ERROR: 29201 [ 112.107354] binder: 3802:3805 got transaction with fd, 0, but target does not allow fds [ 112.120367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.147558] binder: 3802:3805 transaction failed 29201/-1, size 24-8 line 3241 [ 112.176601] binder: undelivered TRANSACTION_ERROR: 29201 06:13:41 executing program 4: clone(0x13102401ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x5) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3f, 0x131}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 06:13:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:41 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:41 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:41 executing program 2: clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0xc0000, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000180)={0x40, 0x2, 0x6, 0x658000, 0xa1, 0x5}) r1 = gettid() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r2, r3+10000000}, &(0x7f00000000c0)) futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$peek(0x2, r1, &(0x7f00000001c0)) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="79e43f605c5bf72600b0f9163e7e992cc00cef90323eeb9ff578713298b13e9516000000387625e51695faaa20a43871835bc9ced535853a35"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 06:13:41 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5406, 0x1027) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000000)) 06:13:41 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:41 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 112.438508] binder: 3816:3818 got transaction with fd, 0, but target does not allow fds 06:13:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f00006dc000)=[{0x7844, 0x400000000000000, 0xfffffffffffffffe, 0x8}]}, 0xe) sendto$inet(r0, 0x0, 0x1d, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 112.491056] binder: 3816:3818 transaction failed 29201/-1, size 24-8 line 3241 [ 112.545365] binder: undelivered TRANSACTION_ERROR: 29201 06:13:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f17}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'vd\x7f\x00\x16\x00\xf9=\xdbZ\xdd\x91\x80\xd2{\x00', 0x43732e5398417f1e}) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100000000, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r2, r0) syz_execute_func(&(0x7f00000000c0)="46fa670f1b6446006542f9f6428500408073000ec421056a69f3c4217958f776a43e441cc4218de14ab5") 06:13:44 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:44 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:44 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x88) r2 = dup2(r1, r0) getsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 06:13:44 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 115.492824] binder: 3856:3864 got transaction with fd, 0, but target does not allow fds [ 115.523576] binder: 3856:3864 transaction failed 29201/-1, size 24-8 line 3241 [ 115.549278] binder: undelivered TRANSACTION_ERROR: 29201 06:13:44 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:44 executing program 5: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 115.753649] binder: 3880:3882 got transaction with fd, 0, but target does not allow fds 06:13:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) INIT: Id "2" respawning too fast: disabled for 5 minutes [ 115.811631] binder: 3880:3882 transaction failed 29201/-1, size 24-8 line 3241 INIT: Id "4" respawning too fast: disabled for 5 minutes [ 115.852611] binder: undelivered TRANSACTION_ERROR: 29201 06:13:44 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000000140), 0x41d, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 06:13:44 executing program 5: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc3d063c123f319bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xfff, 0xfffffffffffffffa, 0xfff, 0x368000000000000, 0x2b, 0x3, 0x3e, 0x3, 0xb8, 0x40, 0x336, 0x7, 0xffffffff, 0x38, 0x2, 0x66c, 0x8001, 0x48f}, [{0x3, 0x10001, 0x8, 0x0, 0x4, 0x5, 0x2, 0x1}, {0x70000007, 0x5, 0x73f, 0x4, 0x40, 0x4, 0x4, 0xffff}], "d02d0216a951", [[], [], [], [], [], []]}, 0x6b6) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10000, 0x3ff, 0x2, 0x100, 0xce, 0xf45398c12f28c5cc, r2}) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) INIT: Id "3" respawning too fast: disabled for 5 minutes 06:13:44 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000140)={{}, {r1, r2+30000000}}, &(0x7f0000000180)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r4, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 06:13:44 executing program 5: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes 06:13:45 executing program 3: unshare(0x4000600) r0 = socket$inet(0x10, 0x20000000000002, 0x0) sendto$inet(r0, &(0x7f00000001c0)="4185ce66c89bce9abea8818608c0c110b1d25d0ab333792440c982ab4f38ae611693d4ce93e64a1aef6a207634baa2732b46344a8d7f2afcac43c28f18a80c254198e9dd61a86f65a3da7b7afcdca4f7b14aaab1417ef90dd9e994f243ff70e336426e16288df73d7ed8007e3ef313468c689b08ee3701f2be2d2ffd83c581af4e0773a66eb9a8a8e38a4f0121861b5fdff01984f38459309b174165eb32d5165c7ab384bad24687a38404fea362512924cba7ba41e9d23fced80995b91f4867d10d175d27148a6f", 0xc8, 0x4000000, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="240000002c0007031dfffd946f610500", 0x10}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 06:13:45 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:45 executing program 5: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:45 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0xf0, 0x2434, 0x5, 0x0, 0x101, 0x100, 0x1, 0x1, 0x0, 0x2, 0x4, 0xfff, 0x39, 0x3, 0x78, 0x7, 0xfffffffffffffffb, 0x8, 0x0, 0x80000001, 0x3, 0x9, 0x1372fcb4, 0x1, 0x7ae, 0x8, 0x1000, 0x0, 0xfff, 0x0, 0xfffffffffffffff8, 0x1, 0x2, 0x9, 0x1, 0x0, 0x10e, 0x5, @perf_bp={&(0x7f00000000c0), 0x2}, 0x11000, 0xfff, 0xc17, 0x9, 0x10000, 0x6, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffff9c, 0x1) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x52c023a2426d771d, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x41) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="053fd7a35c7e36466fc75de4836006ce1da4489f5bc113e70f80d2a44d03c841563181b6d365587682ae30ba868cffc86bf7f7306a724d09e1"], 0x39) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r3, 0x0, 0x0) INIT: Id "1" respawning too fast: disabled for 5 minutes 06:13:45 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8a) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x21000000) 06:13:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00\xd3\xc4\x85 B\xfbw\xb3}M&\xf5|\xd8\xdf\xbc\xa8\xf9\x13)\x14\xca|\x1c\xfe\xb7!\x7fH\xc0|\x8e6\xf7\xbfu\xf4>\xd6I\xee\xe2\xb1)\xb7U\x02', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) creat(&(0x7f0000000040)='./file0\x00', 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x8, {{0x2, 0x4e22, @rand_addr=0x8}}}, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000000c0)={@local}, &(0x7f0000000100)=0x14) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x11, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x20) mkdir(&(0x7f0000000240)='./file0\x00', 0x10) 06:13:45 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:45 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) r3 = gettid() sched_rr_get_interval(r3, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000af5000)={0x0, &(0x7f0000000080)}, 0x10) fchdir(r2) sendto$inet(r2, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) read(r2, &(0x7f0000001100)=""/4096, 0x1000) sendto$inet(r2, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x0) sendto$inet(r2, &(0x7f00000001c0)="fc", 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x0, "31540d3abd87e7ea"}) dup2(r0, r2) 06:13:45 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 116.216563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39880 sclass=netlink_route_socket 06:13:45 executing program 3: mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) getdents(r0, &(0x7f0000000280)=""/4096, 0x1000) 06:13:45 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x2420480) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002000)=[{&(0x7f00000001c0)=@abs={0x1}, 0x6e, 0x0}], 0x1, 0x0) syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x20000) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[], 0xfffffe9b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x88, 0x1, 0x5}}, 0x14) openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x1, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x7fffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000027bd7000fedbdf250a000000300003001400020065727370616e3000000000000000000008000800090000000800030002000000080001000300000008000500010000800c00020008000800000400000800040000040000"], 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x40) [ 116.321200] binder: 3940:3943 got transaction with fd, 0, but target does not allow fds [ 116.358666] binder: 3940:3943 transaction failed 29201/-1, size 24-8 line 3241 06:13:45 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:45 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) clone(0x21000a00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl(r0, 0x27, &(0x7f0000000100)="f8bbf8e5bb5a04601d63ec81f5f0ead26d9d37905e289f35b5ea4c33e86eb1cb250a063c77afd553cf313d189234bd7ea2b26d0fa4694223e031cb444af65ab7751089c9a31d3befb431be7c204175023ae5142fb6563b6c1936ef72cdde2d44d6dae478b97e7a78aebf441051155b0811bd4eaeba7995a8bff094ed2afb2f29abaf7767d2a818fc53a20e6ddb4587efabbf84efe792e6e43ab81743d8bfff35c205656909fbee50a27d3297f2b5aba6c55cd0f1466c98486f64f1f946b5fcd1e0d6c05f") write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) creat(&(0x7f0000000000)='./bus\x00', 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000004, 0x100010, r1, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1f3) [ 116.376312] binder: undelivered TRANSACTION_ERROR: 29201 06:13:45 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x20000140, 0x4) r1 = dup2(r0, r0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0xec97) read$FUSE(r1, &(0x7f0000001240), 0xffffff7b) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x800, 0x3f, 0x0, 0x8, 0x0, 0xfffffffffffffff8, 0x100, 0x0, 0x100000000, 0xfffffffffffffff9, 0x3, 0x2, 0x0, 0x4, 0x0, 0x3, 0xfb, 0x3, 0x20, 0x6, 0x6, 0x5, 0x22fa, 0x1, 0x9, 0x34a, 0x7fffffff, 0x4, 0x1, 0x7fffffff, 0x4, 0x40, 0x1, 0x2, 0x6, 0x7, 0x0, 0x6, 0x1, @perf_config_ext={0x80000000, 0x3}, 0x0, 0x926, 0x10000, 0x6, 0x5, 0x2, 0x80}, r2, 0x10, 0xffffffffffffffff, 0x8) write$FUSE_IOCTL(r1, &(0x7f0000000000)={0xfffffffffffffef9}, 0xfffffc34) clone(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0xf0}, 0x4) [ 116.474550] binder: 3956:3961 got transaction with fd, 0, but target does not allow fds [ 116.506569] binder: 3956:3961 transaction failed 29201/-1, size 24-8 line 3241 [ 116.535150] binder: undelivered TRANSACTION_ERROR: 29201 06:13:48 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x1) fcntl$setlease(r0, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), 0x0, 0x8) write$selinux_user(r0, &(0x7f0000000040)={'system_u:object_r:netlabel_mgmt_exec_t:s0', 0x20, 'user_u\x00'}, 0x31) fcntl$setsig(r0, 0xa, 0x15) creat(&(0x7f0000000000)='./file0\x00', 0x0) 06:13:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:48 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0xa0000, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@local}, &(0x7f0000000080)=0x14) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) writev(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="22a033", 0x3}], 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x12000, 0x3ff, 0x1dc}) write(r0, &(0x7f0000000180), 0x0) 06:13:48 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:48 executing program 4: rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f0000000040)=[{0x6, 0x8000, 0x2, 0x5}, {0x3, 0x8, 0x1459, 0x9}, {0x5, 0x8000, 0x7fffffff, 0x800}, {0xb1, 0x76, 0x81, 0x1}]}, 0x10) r1 = gettid() tkill(r1, 0x12) rt_sigsuspend(&(0x7f0000000080), 0x8) 06:13:48 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet(0x10, 0x807, 0xfffffffffffffffe) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1a) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x13, 0x1000, &(0x7f00000001c0)="9157c870fa8559004df77241dd66e847ef01962fe6cd9fe1edad99848affeeca3219f7be6b65a0b46ea479c3610f61afae884ffe2ee2fa1c08360ae08e95c47efc3e058aa28c3378ab78315c2de9ea05264dadb02ec6da24f1906272dba76901a64986848507464dfd84625ef12940f7a9098d5e13c31f7063d463566e47c9ff00a25d9ba2647d748c4a116d042d7d3e2c07983d0b33bc19dd6b2f10bcde4300b4abfcb9f9e34616458050db1f4239db7a04ec1ea4d0061ed789e34a197465540cfb60ebe7f90c70a6e38d5e0b0dbf7a3b44d41a63b232f22ceb826402bcb4c442084d28f298ac195d363873cda57980f602d49946d273244318af19182d111dbf3aedb2810cfa9420fe6612b35f6f1d97aa8db7e2c764874424d157b997e462c09dc1da4037e3fbeafe6be73344798473f10a8bac9660cfde1a53f12a34b879ab012a5d6b0927820cb3f58fd07528aa6336f71dcd7b4c33ae6d7e97c637e5d955c9cbdf48207c86cab7ed33642214024916ae787ecbbc421edd5b22bd7f51ade7c74655d53b47fb4ba84ab7b4011133ee2eca364a613caf1e45f3f75966f279c2b96ab85cee3b7b3c816fcde40565451f6723eca21fcc4009c643f1dff37cacc40982ffad647ea402304951a716b4419eb20eb49900f5ce887a67d4e78ba1424b999721c3686d798178d682059a4741f40f4709f20d751c06c4555e9bd62d9a4ee2248b33f2e5054d954c682468d9ef1abea0f1ce08e07084477815a98d65fe0764da567b23282a00a3ea165ca8851c7eac77c6529b167881f0bc6cf771179b2741f392097622036e6d68dde40c043d35a00617168a27eb0309379da8b2a0b9022ba6f2a2277b9a2a21ae5cfdae7ed5dbebf8b1ade7016933643b783252ec461c41d51add1e802be798a0bd311f2eff3536c67438d0584f315688d84d78800e71f4b86dc37ed9e82850a221e1446c19c76f69987f37122d0c9ff44b754e060b8ea6eca9f3e86dc9c56c24351b1feb25b5526896c2cdd5e1786587b8997016b4e3fc4eb118167582189ae76c0265cace49e4d6a25580824ae5b1889360489afbedf1c940ed3924ba9c56a075a0d5b2a89f3b00c95c3910bd8f31e065dd8abde5eb7aaa88ebdb78865311a683226908a142db7f3e09ae1555158308edd3106dc724ccd5695fffb473aeba63891171f10d9efbdb39657d9b661c1e86800bf529c37723528824111e47e9691beafc18cf37648fe389ba07afc0bffb7868f3e1103f729cc638e990e3ec689f4b6fbcacd75f3826cd81b03dee5e453b89cbf1ea98da016094317e6052640326e6584d7523e345691186e810b18855a6e76858c61dc1e2924fb1b8fcbddde4fad2586d895050223c1f6a75af2b8ca6208ee2b56dcdd2edfca83dd10ac8218ac31d3bbaaba404e2ae33991255c694c80c9141d3f5de8c87b39c339090fbbfcc547e6c98c58eba6310dd6b60b9792e80e0487f681d8177b2223bae2ddade13eed982877c91cc5b98f92f4389e1a90101bae68e0fc3ab543adafd42a7762896cdec050d881b5261d76bd6c777d41bba380418ff603f0c40f0c3870e2b4a83e8fc6986abe9e4e44481181521900581a28f627ec5786216d69c3ee65face332af64aa12d41178fe8eebea6319d4ff0864dc240b43e0d447fea02bb9d7f7d3415dccad186dd7f527ce7b0878aabba64b566e3ac48e0bee2f250fec5bb4ae64abdca90402e416d79bf8addb44fc99ba65f142207205ab59d06d92f757fc88f5da132447ddc001e46d0209b371e00d2a59fa77129b6ab43bba16f99b1cf618ec3deee46a2d72853f0ea5fcf04b1b6ba3be075ec1a0f4bb9fd11c614fbad054ce833e9aa515649f534237c91ab8fe7c03bc577875911cf89346af57e6ab475afe63c29be927e8f3d991f438117c52c329c10d48567f665623163f52a0acc3009b8fb711d879b9d513e8ab7cf18ce3483c081219dcce6436a7cacfbe2ca101fc098cd4b435e5a12e800359b21b7cef0dc13848326c97e6e47e40225ac054c2188973b71f3fae1cb5d1e2e6fa7c651e5493395e7b522e246201b89ff1cd909dbcdaed35c08a25c1a6db2593b5f27515bb5d256ad8216df6c627160e9473142d8c7ca6ce918e8f2fb183b908935f79083a7754204eae13ceaa99bf6e639de5ef40608e5d215e6be9e0d81fff7f0a220407ca749395ccd28539a300f1384ba204172981a20131190d7e0ceff45980b92f80805a2a5f2887cbd16d26303371578a084424461a95b14cc89c98295e8a7fbd9d20932bce2c2bfaddd26618a8d5440de3bee88e62c7c2182ce4dd7a50300c0d7d7ac90f975958e2d6568a9acdb79fbabe264ff7eb9c634bf6020262c9ed6f2ae2a60a8d8f9ac4f464d9d43d33af5e246535580534387a1f0137e0178e3087cb973344abbb373f0f5cc211d2a9828a9069d77c35c702fe180847453ab807ef21a23d7d7d973f4f9e24bdb1c2d29b5121f9ed0d8914eaf57f6ec4b501f9f78ce82c94e182f39cd26f03f9825a334c3670db7cd420ce671bebc4d2683a76db48a1958cb6fc97e6ec77d810fe2eebdbbed069b2a61d9898b1e95cd59baecc7c473cbf7d1bc3c27337c5674e7981ebb07d42255b937f723ce989af3e6f2fe4a45265b4623f9c59b600668782b291c47a8197aadb0e7795fb9fb139ec786209f4f1afb1a1c6474f02bb7eb7fd013fc90a0060dc00b963b5adbdf835188d54b486b51cbe7a7ec86c7db95bde3cb15a497435c9294568a677b683b8cef6ce0d4fb001214d2743a05bb49fd042187733b83bf4886726eb558435f01422446e8dc33565d3cd71e99511966634bfd31604665908ec2a2e1132b37de07e1e271764de4e8a5fe3313540f6acd1dafdaee710c14dbaa5719f4c01c2a1b98840e5df7cd6986b8b0415db4f72fc8b7eec7d7159080778047c83c17687bda79352fda3b32161f17a2e8e1d7e3e058e771073e43021e0aad3b9654cac5251a3e84821560ce164b9b8b9797be12d850b93236fadd3ccc99492c542bf60fac5a0e13fa681329ce67f89611e6ea4436881d8543addb0adacf809d83243c8796810398aa6f15abf833a81e1362b198c3c788f655b49c1c60c10bd60e2c1995d1ec982f8766510e5c931d3eabc7136d3a2b0608a340e77e293bee5e036b5a6671ecccbb52092c763c4497203313683afdd17c66baddf3c4563f024fa1d68d53275e25c36c236dff2d684ea9235bba0cc77724457f3654a143c72f0943c376a7970ccd211dec67641491951d9b64b073802b1164a52b788fe6129d463804aa251711593c532b82961f7291b41fa0059b5d65bcc5104c0754e7282ea683b1831693484fd3cc674dd28aec9d7689be83f4924c1a6e2ca7b895917d594348e9a49484870d0668ba924af146b2a1e7c3f5746e73d78f13dd56d0e5bb7e83c083c063cf552deaef0e8aa2df4e9b787f3f6063bb02e77870328dd0b3cc660dc74b59d5576c628ced58b2d661872c51fa07e1b4f5e845004ab082a8a6761dbaef83407317253ea4d0296186bd3436f86a67d04a9239d83c9b65f5cd264252573bd95eb306dd54ddff90294c2fa7fae9f78e5d552ecd1c199e81d7f5327a0ad30fadc32564f2f413a2601b4fb155ec018d8dd931e18410fea88117eb135d28078c40bcf3c2917d35ab8e07bbe6434f6464c165c39b8a5d466dc361f8369e45449532cb4d795547af368689ec4d9d1661c9e7c0ede3a0e82ac23d7362ae3533b77b49cabe002ac028cc2475222c4a3daa90fdd0d46d3c75d4dd7e5b22c2819e7aee0f3c614ee7a8f7695f0f6ceffd5e57759867a0ccb6c635192210a8bd7c8a31dd3a04857de997698dd100942c4f580da5756e322610ae9977ba957f7fbaa3708df0079e1f040c3f786dea41009f0c3fa1c9d7870b34ba7242bb243c563dc1ca2c96ef66db95c272abb111fdf0de5065c9ed62128a9fc3ba929bac8a0d3b8e091601143f31b6eca38fef8024885fa8a69a131afd507b0b975499de348bafa3ef6cd7f45b2ebe3f62f7c507542fba8d6b1ae47bbac54f082813af425deaf882e13af2249d11b15db969cbb28f50754768a05f4f82b49daac6d59b37cda37ca66a25308f57eaa0c1f61729a188043352cf1c2bcd5ad9118f654444b45b34b99065af4b22f7e5b678d90060146aa55435ae1af3aa99d6fbacc93360b3f6951ea3e21908befae91c8a829c56f49b854af303e0612e96c18857b4114676a2118592a0e74a09f2c93317075419f586c6226c9b4473647601e683100cdf4ecffc7f22dcb3623da6dc291fa970dd5e038ae1b631099cfaaa69c31e42a52991d5ca56dc17b123b2c98eed2ca10345621e01398d880107c61a1786c73754028826aaa61a9839ea9632228f1febc0c6209b78c2981e574d228684f6eadac8fd922d968201b93469a782882a1d07b83ceb6205e5e27a7f9847435a3ddaec3b31c0f5095b4847166384a485b8a15d36f0eae9239f8e23f80e7270dbfb9f6a872f14c4e52c4adf1fc92f9fec46573ae35bf09aae842df537050ece72330ce69c62584b08ea98cae0e63113ef1e9ae34fcd4cf193bb706dc9d9e6929bc1375cc00fc9a2d0c8f26e5dbb1f3ec191a113d88668a2fc4f20339eb81e773f3f07f475af4cb80864ad4a9a70e4a35dbaddfc6f1c3c2ecd5ad6a8652b130a5d925e28cb91760b800513936b0e227894012cac23b5cdbe251264718d2f55e8da2d86a45ba8c4d1c8b4aa0b781895d51e23b64fa53e5398c5b6d5bc6201619166ecf16296f4f276c94a8cc4a536b40e2c5779968beaeb82fbe6e7db96a68c22124bd4af9364c6f8ad83fef88b83c778fa46d15acbcb665944b201e26a2160d52f914005f715256688d77efafbec59912f1b6e973f8e83347f629765c38b73f4def47e7aea35a9eb93217568e75b92208fdffc66b25ef1a8c04043392a2068f5b199e5708e779af07e3a25a5ae5931d1336dc74e766197cde623980e9a1b05f85040f6f5588ce1ad5c8ca4cf7ec1bff42da80808649a19e21c4e02c84e450abb9f0a74115d2312d13d613cefa11415fc16e824fa8fc03d0b56730903f499a4f400ebb54df29a57df43b7b34bcb97121f1bf124dabe512f8b04254fee8eec8e97bb9133c31ee40e4017e883991e9fb83dba8696723ff4f87d688f8b9661afe12dc14aaa2ec01db0b5e9d7fea8ff59601b1f4efce7e50572c8222b1bfff0419def0fc18e355d53f200ff5f4a3bccf06393543f7d10cc17a0ae2920e5c6382e72ee9819f63784c1ac19b6812bcbdf6b1e0c2efbfc26a7c5a7bfc175abe4f13e9efc6e5abc27a87343fb04089769acaed4feae62f71c616960be9ffc5e1db410ca1ddcc2d84e7d8b267cfa2102a7d7b9baf24ea78bea41592780318a81dbd48d8032373a9ea47abce512cca518f3ae7f58f9da39fdc3deaa14a68cbddef6c987a6b1cd4e34f50a49630dd448d156bf03c86685b20f9dc46b3d441e63fb5203ea0e414e23f5aa8a0b1937efa17fea5f638fec52999da2ef4b12cb9aee90e8b4219a05c018af6203b60078727c12e6a48428752efde6cdd48ddbd5c84e598bc845324a3895e35880a9d74b8cdc3694188626ac02b6012373a0ecb7c7d51bac4d3e81da7055a20405ce9e79e8b5f59b0cfc2c9f3601b072127054a7f0ae5cb2626b8d3058039b9f9b6ece4543b06e3768c8b799433fa587f31edc98ad05faf19b0d73f48ffe68ee2196dfe9960ee75a0a0db1f9293b6a07ccf0cfa5ef8196c6335bbe99e6bd22661ffb34b"}) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffead) splice(r1, 0x0, r0, 0x0, 0x9, 0x5) 06:13:48 executing program 2: r0 = socket(0x20000000000000a, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0xa5) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) 06:13:48 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_acct\x00') accept$unix(r2, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000000c0)) r4 = memfd_create(&(0x7f0000000380)='#e\xa7\x82w$\x00\xa6>rH\xaa\xd8\xd3\xc9l\x87\x840\xbe\xa0\x03(\xb2\x8f\xafD\x8d~~K{ooJ\xa4\xe8\xc0\xdf\x8dh]\xbfL\xe3\xfe\xbfn`\xe0#\xc3\xec8\xd7\x98^\xcb\xbc\xcf`\xbf\x1c\xf2\xeb\xacI\x12\x89\xaeD?5\xae\x00B+J\x1d\x05\x05x\xe7x\x99\xcc\xc5%\xc3\xddm\xcf\xd8\xc1}f/\x96\xe7\x8c\xe1\"9\x98\xec\n\xc0\x9b\xcf\xeal\x94\x97)\xb2\xff!\x13\xc5\xbbm\xcb\x8a\xf4\xc5\xfc$b\x13\v\xda\x01\x9e@\x04%\x95\xed\xf4\x95\xec\xd0\xc7\xf5\x7f\xbe\x9c\xff\x05\x06-\x85\xb4\xb8@P\'\xa0\xd1\xf7D\xe5\x82\xf9\xa8^]\x99\x17\x99\r^?\xa3\x8f\t\xb8\xa6\x81\xc2\xb8\x00\a\x04\xda&P\x89s\b\xea\xc7\xf7E\x8e\xb3\x14+}\xdaLC\xaf\x8d\x8e\x98/0\x1f\xba\xb0', 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x7) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) r5 = socket(0x18, 0x0, 0x4) connect(r5, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xe) 06:13:48 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 119.260477] binder: 3980:3986 got transaction with fd, 0, but target does not allow fds [ 119.276851] binder: 3980:3986 transaction failed 29201/-1, size 24-8 line 3241 [ 119.287335] binder: undelivered TRANSACTION_ERROR: 29201 06:13:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000200)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000240)="ce5d7f432631066358cd9f159795cc8949b576e39d88d0239bf117a516c7572981a7ed7e68a9f93e888d7d5829a2cc259e498c9765fdc6451ff808ffb46a8a275bd1e15be9e09c68ffe584f9cc527975ed2759604cec592d94e0c058c143453e88028fb8444b63b074c996b577c21b83d9cd0d02b74338dbf4120f2982beda6207af3eced99778a73da9", 0x8a, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000300)=""/4096) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) [ 119.315894] binder: 3994:3997 got transaction with fd, 0, but target does not allow fds [ 119.344131] binder: 3994:3997 transaction failed 29201/-1, size 24-8 line 3241 06:13:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSCTTY(r1, 0x540e, 0x10000) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x4a, 0x100000000405, 0x0, 0x0, {0xa}, [@nested={0x8, 0x0, [@typed={0x4}]}]}, 0x1c}}, 0x0) write$binfmt_aout(r2, &(0x7f0000000140)={{0x108, 0xfffffffffffeffff, 0x1f, 0x3e5, 0x33a, 0x80000001, 0x295, 0x8000}, "43bec4997dc2e7d400321dcb423f80aacd57915eb4278aab40cb2b3b8828153be4e91fcef8ead08bd1b8133a973041d243342d4884af3ea41fa02ead452d309c9fc8c26a40ae5680786f8926d011951db936fe8c87f9bb602214f0d209f886be4c2ef2a62e9a5c06125b7e74a1f319e4fcd620094294b4b2b5a9f6c55d04c75d99c0836910dbd7d352f8aeb0f2b2098dd8e13d52d8ad", [[], [], [], [], [], [], [], [], [], []]}, 0xab6) [ 119.371863] binder: undelivered TRANSACTION_ERROR: 29201 06:13:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00\xb6\xb4J\xeeN\'\xff\xff\xff\xff\x855\xe9c\x14\xd7g\xc3\xa2c\xb9\xff\x1d>\xcb\xb8\xe2[\x02:\x0e\xd3-wz\xb3T\x17a\xb0\xd2\xa6\xea\x11\x8c+\xb9\nV\xac\xd0\x84\xfd\xf7\x9c\xdb;`\xa4\xe4\xe6', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="ef516d06c4194efacb3a3372f2e66da9a9798f8069424cd5f7d846cd592187bf55f8fc3ef61479471f0c2e6798791716b3853877050538fc69a8da433cf5633a9fe5066049a0e6d86375f43c34b1acce465d85e436ab866d21a62d6affb7abda9f56de40cb4b290f5d66df8669e7d4979a60a056b3a82023201a92c271c674273f6d001557ce4f0799104800839476ad1cdfadf64d4d64aa710c20c34ba882edb5512e371889bdf0f6d22d5a6716d87232a1a0c821a25984", 0xb8, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r2, 0x4, 0x400}, 0x0, &(0x7f0000000240)="c4096634886107c3c57b12476492a891208a235c940e2d631f83d9af7784cf19e51acc32bd461d023dc40d31a28d21dee6cde14008c7c77410444ad3251a780aacfc5fa84b6d779c33df58630ffe71b27c65e20f41e30a6b1ee20d0701fdd61329732c838561d2017cc0917f5dd7e65aa648e332c65bb0bf92b19aac3593263c9c09cda82b10a42477e45ed956ac5900ad05eaba1263ef36a5a90ba396a4f3a75616d7ddb92e0c2d3dd5da5c2c5768ce20f102393b7fd5bc335f84adcc015307f04e41db8c77a9fc49c74f253f6ba05c76aafce2110589beddbcda2a9855aa5e80ab92240fe699a81ad3b9e512780c", &(0x7f0000000340)="ff71053fbb92a112929abe4f755f29392165a843ec63d8debf5fa386bdb2c7ed631f77c21c93edacb59dc259a1bb314505edb50b19d095da18e00bfc91a02d02be113dc40cec15eb935e0a1747fe3faf819e2f83d8e6ead4da5eaf4d5d778397beef77e9664007c061bdc23a0846cb9daa1d503e037cb4c493fab4c5bff29b849e1e584f82ac4c3e1d725fd0548333c21bea533c8e6ce8a4637c584f5304b255f91e1632d5be7271b0990dc89e406e57af634993cc31837ba1e4e963fd142f166ccfdaf7") fallocate(r1, 0x20, 0x0, 0x3) 06:13:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:49 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$P9_RWRITE(r1, &(0x7f0000000480)={0xb}, 0xfd8d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) getuid() ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 06:13:49 executing program 4: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') accept4$inet(r0, 0x0, &(0x7f0000000200), 0x80800) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x100000000}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x90) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffead) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @multicast2}, 0x306, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbb07, 0x8, 0x2}) splice(r1, 0x0, r0, 0x0, 0x80000001, 0xf) 06:13:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x1000001a4}, 0xfffffecd) sendfile(r0, r2, 0x0, 0x800000000024) syz_execute_func(&(0x7f0000000000)="c4c1d1f24d8c64f2aef2ab26660feb9a00e034866666410f6c1d1b5ca85ac4e121c22e5df366dcf5c4e189eeacef0000002064660f133401f080a2f60f000210") 06:13:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, 0x0) [ 120.201323] binder: 4025:4027 got transaction with fd, 0, but target does not allow fds [ 120.230765] binder: 4025:4027 transaction failed 29201/-1, size 24-8 line 3241 06:13:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x1c0c) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80, @mcast1}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x800000000040100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_mreqsrc(r1, 0x0, 0x800000000000f, 0x0, 0x0) ptrace(0x10, r2) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fcntl$setstatus(r0, 0x4, 0x400000000042802) 06:13:49 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 120.259464] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.297680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=105 sclass=netlink_route_socket 06:13:49 executing program 0: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), 0xfffffffffffffcf3) [ 120.332827] binder: 4043:4049 got transaction with fd, 0, but target does not allow fds [ 120.354021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.370433] binder: 4043:4049 transaction failed 29201/-1, size 24-8 line 3241 06:13:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, 0x0) 06:13:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x200000, 0x10) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000980)=""/4, &(0x7f00000009c0)=0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000900), &(0x7f0000000940)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = accept4(r0, 0x0, &(0x7f00000002c0), 0x800) ioctl$KDADDIO(r1, 0x4b34, 0x400) r3 = socket(0x2, 0x2, 0x0) r4 = epoll_create1(0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xe8) r7 = getgid() write$P9_RGETATTR(r5, &(0x7f0000000800)={0xa0, 0x19, 0x2, {0x40, {0x2, 0x1, 0x6}, 0x9, r6, r7, 0x9, 0xb4, 0x0, 0x101, 0xfffffffffffffffb, 0x64, 0x9, 0x3, 0x401, 0x7, 0x2, 0xad9, 0x1, 0xffff, 0xff}}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_wait(r4, &(0x7f0000000640)=[{}], 0x15555555555556c1, 0x10001) shutdown(r3, 0x2) fstatfs(r2, &(0x7f0000000a00)=""/137) clock_gettime(0x0, &(0x7f0000000580)) recvmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000040)=@can, 0x1d, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/142, 0x8e}, {&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f0000000680)=""/99, 0x63}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/178, 0xb2}], 0x5}, 0x7}], 0x1, 0x40000000, &(0x7f00000005c0)) 06:13:49 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 120.389485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.412293] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.444039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 06:13:49 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2cf) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0xfffffffffffffe31) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) sendto$inet(r0, &(0x7f0000000600)='O', 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x100) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0xa7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x7530}}) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x18fdc7b2d187bab5, 0x0, 0x0, 0xffffffffffffffae) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) rmdir(0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="8e", 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00', 0x101}) read(r0, &(0x7f00000001c0)=""/244, 0x4a) 06:13:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x40000800000001}, 0x14}}, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xfeb) [ 120.491956] binder: 4062:4064 got transaction with fd, 0, but target does not allow fds [ 120.510540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.514940] binder: 4062:4064 transaction failed 29201/-1, size 24-8 line 3241 [ 120.519480] binder: undelivered TRANSACTION_ERROR: 29201 [ 120.584483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.603756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.613649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.625730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.635571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.645750] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.655582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.665972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.675803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.685986] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 120.695782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 06:13:49 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$cgroup_procs(r1, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) write$P9_RWRITE(r1, &(0x7f0000000480)={0xb}, 0xfd8d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) r2 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) getuid() ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 121.050715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.060407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.070094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.079787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.090248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.100242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.110040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.119772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.130107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.139819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.149523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.159259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.168844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.178549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.188207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket 06:13:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) tee(r0, r0, 0x5, 0x9) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000180)='./file1\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000001}) fallocate(r0, 0x4, 0x124, 0x0) getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000080), &(0x7f0000000100)=0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)={0x0, 0x8000000000, 0x0, 0x0, 0x43a55b2}) 06:13:50 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$packet_buf(r1, 0x107, 0xc, &(0x7f0000651000)=""/240, &(0x7f0000ca5ffc)=0xf0) 06:13:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, 0x0) 06:13:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x1000001a4}, 0xfffffecd) sendfile(r0, r2, 0x0, 0x800000000024) syz_execute_func(&(0x7f0000000000)="c4c1d1f24d8c64f2aef2ab26660feb9a00e034866666410f6c1d1b5ca85ac4e121c22e5df366dcf5c4e189eeacef0000002064660f133401f080a2f60f000210") [ 121.197959] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 121.238781] binder: 4082:4087 got transaction with fd, 0, but target does not allow fds 06:13:50 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xfffffffffffffff0) 06:13:50 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 121.252662] binder: 4082:4087 transaction failed 29201/-1, size 24-8 line 3241 [ 121.271873] binder: undelivered TRANSACTION_ERROR: 29201 06:13:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x4002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1001, 0x2000000000071, 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x8a4, 0x4) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000001100)) 06:13:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) [ 121.334068] binder: 4096:4099 got transaction with fd, 0, but target does not allow fds [ 121.370823] binder: 4096:4099 transaction failed 29201/-1, size 24-8 line 3241 06:13:50 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:50 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x4002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1001, 0x2000000000071, 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x8a4, 0x4) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000001100)) [ 121.418705] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.508976] binder: 4112:4115 got transaction with fd, 0, but target does not allow fds 06:13:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000800)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000018000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) r2 = syz_open_pts(r1, 0x240) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000580)=0x2) openat$cgroup_procs(r1, &(0x7f0000000540)='cgroup.threads\x00', 0x2, 0x0) fremovexattr(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6f73782e2cb100da0fe3ab6696b08379341790f1d48fa94b9ef8de9d60e8f4daf1af4736fb4c40d3ec1e7fad8c2d1c4c7c48c8a4f60444be2a5f26ba897bfc8403431453e3cab18bd71b422b3c929f"]) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) fchmod(r0, 0x100) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r3, 0x4, &(0x7f0000000500)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffff8, r0, &(0x7f00000000c0)="51df6af7301764c56307990bce7f42e2c7aedc692c15779a74b62358d195b5413acc79608372741675dea0d2710be5b0c1d3baffa169183b0f3a5ae49e69f7c82711d700b4723c1838f38577c3951b83cc3d8ef6d505ccfe663a2d7bce60eaa215af131c14bcd33b9771ddb51f946032628698072113a62ea3b1dbe29c71e0585138edddde228677ca9690d276355ae7ed529d9c4df1b24470825d1b70fe3b318a6945ae11332e3b5d97574ee501b060482cd8d4e10de23fdc44e3860e29ca1f0456eadea4f418cbaab1d483118053ce", 0xd0, 0x2, 0x0, 0x2, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000200)="a63753d63a1d5d16bd6fcef572fef8759e31f331b9eb22d585ff1a25dc13f2d0fdb3ad10487c8ded4cf2674b74c939469e1ac337669110c88ae50ac600753c2cf1f61ae0b83885a8cdb37ab3115bff7049e88a3ac0348ac738726c1b935e880eea5391bcb2587462e22536c33845e3256d89a842e5e13e89e7f9f7d3c4ed9610c6e629ca0f3a62ce131b28c8b7385e97", 0x90, 0x4, 0x0, 0x1, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f0000000300)="de2a5c286bdc7f884751fcbf42c2e10d61adb33b7dfa3a7d56343cb7fd47f48f6a4077cddfe89d88d2b4c363155534a50ff95eb1f99b65faa4f33e33ce30bdca3ef4d500b33807e5ff11e9a31f2ab5a1b590813dae9397281b7eba47d04590a6067ea8621dd2214fae15011b751386ce6bf9f9ba79dfc542ac9b77b9b61483", 0x7f, 0x8a98, 0x0, 0x0, r1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x300000000000000, r0, &(0x7f00000003c0)="267847a58568d7bfe9ae57af7847a353339802d73dc6d6a304d81ff41c2bc9d633a3c3fe472e4bf18afdad8d0337de59133d9a889c4d7c303b08ea24ac8f1bf3130f6e6e39a4ba69987cdf0b4906dc2e978d9ddf2c17ff699f307bbd6ec3d9d3b858bff79fa1da8b8fc9f0534113de0efbf11a43951bf153421d62d5c9fcd0b9b7122dab1a75ab7509dd41d652661164094b3d7c0f3fbc9dbc1c33e725e9ad5c56b9b5280262d57e026b844b8f6cbc0d9becc46b9f97430b7d1a59f8d6f5bcc6039368d4f1bf0baf082656af44b115f3a1da35ba06f9742106505e7549474ee867dc4d38d5fe5d65d36c76ba7c0fa0f32804d3", 0xf3, 0x2, 0x0, 0x0, 0xffffffffffffff9c}]) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000540)) fadvise64(r2, 0x0, 0x6, 0x3) 06:13:50 executing program 2: clone(0x210407d7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYRES16=r0, @ANYRESOCT=r0, @ANYPTR64], @ANYRESOCT=r0, @ANYBLOB="1a7ac103ef24b175b7243d0ff290e140ac8a6cfe98d01c6a50f3fdd106d90df9f4114fecf2993e5c6188ced05ae925125335b813129cc48719f4cff397a39307184f91b6fd3e88801d1b62a51be5fdd2b9e1f4fd37e5421ac4e692f0e72cd45143486dd915f742f3099a4661d04a30b5ce7bb36f96d9341325b84f6c1325c0bb5dae47a996cc29fcd2da89196bcd6c3d75edc7c06ff94b12ea90b67771cd1e464650c03186e6d7c3b790bc1f8d44e2bb360bbf96f760390da5a4008c6cf7ee1275c84373d49f3ef2a5031b8136a1321be381bf7b152e81679f97bf2ef1c2"]], 0xfffffffffffffed8) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x9) 06:13:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_genetlink_get_family_id$nbd(0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 06:13:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x401000008912, &(0x7f0000000100)="0a0000123c123f319bc070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) close(r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x6100, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040)=0xff, 0x4) 06:13:50 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 121.552920] binder: 4112:4115 transaction failed 29201/-1, size 24-8 line 3241 [ 121.580195] binder: undelivered TRANSACTION_ERROR: 29201 [ 121.643497] binder: 4123:4128 got transaction with fd, 0, but target does not allow fds [ 121.680485] binder: 4123:4128 transaction failed 29201/-1, size 24-8 line 3241 [ 121.700583] binder: undelivered TRANSACTION_ERROR: 29201 06:13:50 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x1000001a4}, 0xfffffecd) sendfile(r0, r2, 0x0, 0x800000000024) syz_execute_func(&(0x7f0000000000)="c4c1d1f24d8c64f2aef2ab26660feb9a00e034866666410f6c1d1b5ca85ac4e121c22e5df366dcf5c4e189eeacef0000002064660f133401f080a2f60f000210") 06:13:50 executing program 2: r0 = epoll_create1(0x3) r1 = epoll_create1(0xa24864d2768d767e) fcntl$lock(r1, 0x7, &(0x7f0000000000)) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f00000000c0)) ioctl$void(r0, 0x5450) 06:13:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x7, 0x2e}) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x7ff, 0x6}) ioctl$TCGETS(r0, 0x5401, 0x0) 06:13:50 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1000000000000004) writev(r0, &(0x7f000072eff0)=[{&(0x7f0000000180)="480000001400050009004b01fcfc8c860a881700f217e0062000e30000e5ffffbb5603000000000000000000ffff5bf109000000ed5e000000006203005b00"/72, 0x48}], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x86}, {0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x0, [0x3, 0x1, 0x7f, 0x100, 0x1f, 0x7ae0, 0x800, 0x8001]}, 0x5c) 06:13:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:51 executing program 0: clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x240000, 0x100) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x80) unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x200) r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x20) ioctl$TIOCSBRK(r2, 0x5427) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0xffffffffffffffff) ioctl$HDIO_GETGEO(r4, 0x301, 0x0) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[], 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000400)=""/238) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='security.apparmor\x00') 06:13:51 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) prctl$PR_GET_NAME(0x10, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @local}, &(0x7f0000000040)=0x20) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, 0x0) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback, 0x8000000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x18, &(0x7f00000001c0), 0x4) bind$unix(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r4 = open(&(0x7f00000034c0)='./bus\x00', 0x100000141042, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ftruncate(r4, 0x10099b7) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r2, r4, 0x0, 0x8000fffffffe) seccomp(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 06:13:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000100)="b666765dcbe714b3bf82e85de3712348e5b9a950612461846f1a55d6333babea16e114c00e697b13ae69088e4c8e48eea7b34101faa05a6e83587c5cf648d897ce66495df39b25393452ffca59d5621451028e5c027a9bec1dec13782e8851b08e11a228c301d0a31b8096c2a66f5c379fdea33bc58e7f09") r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) syncfs(r2) io_setup(0xffffffff, &(0x7f0000000000)=0x0) io_destroy(r3) [ 122.100508] binder: 4146:4155 got transaction with fd, 0, but target does not allow fds 06:13:51 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f00000000c0)=[@request_death={0x400c630e, 0x0, 0x1}], 0x22, 0x0, &(0x7f0000000100)="c57aaf78a8b431ad4ac12c75c184e66afe75f64c4694dcd1c6d8aab80d3adf46eab2"}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:51 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 122.145656] binder: 4146:4155 transaction failed 29201/-1, size 24-8 line 3241 [ 122.177459] binder: undelivered TRANSACTION_ERROR: 29201 06:13:51 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) flistxattr(r0, &(0x7f0000000a00)=""/112, 0x70) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7ff, 0x9, 0x1f, 0x1000, 0x2, 0x7, 0x7, 0x5b, 0x40, 0x268, 0x7fff, 0x400000000, 0x38, 0x1, 0x2, 0x4, 0x7}, [{0x60000007, 0x57f, 0x3, 0x2, 0x14d, 0x200, 0x6, 0x9}, {0x5, 0x0, 0x6, 0x401, 0x8, 0x7fff, 0x100000001, 0xfffffffffffffffe}], "5a82e73241bc2d469f74644858891bf4ff88bd177ba93c80dfc968473eae1d9d0a4b38097dafcb53f7c4d7154c142aeb295a621f9dc558a8272ee87d91e17de7134f5fb99a3ab2894ba2ec072af435", [[], [], [], [], [], [], [], []]}, 0x8ff) [ 122.264042] binder: 4175:4178 got transaction with fd, 0, but target does not allow fds [ 122.282150] audit: type=1326 audit(1556086431.208:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4161 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba9a code=0x0 [ 122.334069] binder: 4175:4178 transaction failed 29201/-1, size 24-8 line 3241 [ 122.371797] binder: undelivered TRANSACTION_ERROR: 29201 06:13:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000040)={0x1000001a4}, 0xfffffecd) sendfile(r0, r2, 0x0, 0x800000000024) syz_execute_func(&(0x7f0000000000)="c4c1d1f24d8c64f2aef2ab26660feb9a00e034866666410f6c1d1b5ca85ac4e121c22e5df366dcf5c4e189eeacef0000002064660f133401f080a2f60f000210") 06:13:51 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:51 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) 06:13:51 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:51 executing program 4: socketpair(0xa, 0x1, 0x24c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x57a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) waitid(0x3, 0x0, 0x0, 0xa, 0x0) r3 = socket(0x5, 0x7, 0xb) r4 = signalfd(0xffffffffffffff9c, &(0x7f0000000100)={0x3}, 0x8) splice(r3, &(0x7f0000000000), r4, &(0x7f0000000140)=0x5d, 0x2, 0x3) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x101800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r5, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x18, 0x4, [0xcba, 0x4, 0x968, 0x0, 0x19]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0x9]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x200, 0x7fff, 0x0, 0x37, 0x4]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000005c0)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, r6, 0x110, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040010}, 0x2000c810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) [ 122.938309] binder: 4198:4201 got transaction with fd, 0, but target does not allow fds [ 122.948104] binder: 4197:4204 got transaction with fd, 0, but target does not allow fds [ 122.952469] binder: 4198:4201 transaction failed 29201/-1, size 24-8 line 3241 [ 122.964037] binder: undelivered TRANSACTION_ERROR: 29201 06:13:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x40, @loopback}, 0x1c) r1 = dup2(r0, r0) listen(r0, 0xffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() getsockopt$inet_int(r1, 0x0, 0x100000000000001, 0x0, &(0x7f0000000000)=0x1) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x27) fcntl$setstatus(r0, 0x4, 0x1146800) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000140)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000080)={0x10000, {{0x2, 0x4e21, @remote}}}, 0x88) ioctl$void(r0, 0xc0045c79) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 06:13:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 122.989508] audit: type=1326 audit(1556086431.918:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=4161 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba9a code=0x0 06:13:52 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x7ff}, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x7ff) 06:13:52 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 123.039441] binder: 4197:4204 transaction failed 29201/-1, size 24-8 line 3241 [ 123.072403] binder: undelivered TRANSACTION_ERROR: 29201 06:13:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000080)="d6041ab46f9e8d548f01d753c14cd7efea7c80f3123907af38c01de34aa832abd6ffe4f5cb31e7b43b68f3491665d7c980a72fa0e45ff38385538589fa8af45ab15af103d0998c6fed4e95ec29a18c2e62745efb3f1bcd60653bf9c2df29aac82d02deebca8568282f1f13bed474d627cc50b99e2c1e1c653f04e7650a11808d887e0ce767e2e5f24fcc6fb00d275576d4e97749b70ffae2b95160004c39565238c48152f827a108cd7108479ce012744d5fe3f26d51b998c05e198336cd9e2911b29eafddf5670d8ddf888b453fc28f2fa98a517e50279cd50df377f1f5a36d5dcba37f36e2440d528317b61039e17b111b105e162e523460") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 123.208230] binder: 4223:4236 got transaction with fd, 0, but target does not allow fds [ 123.219117] binder: 4225:4234 got transaction with fd, 0, but target does not allow fds [ 123.243164] binder: 4223:4236 transaction failed 29201/-1, size 24-8 line 3241 [ 123.254173] binder: 4225:4234 transaction failed 29201/-1, size 24-8 line 3241 06:13:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x227, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 123.331122] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.346974] binder: undelivered TRANSACTION_ERROR: 29201 06:13:52 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2) r2 = open(&(0x7f0000000380)='./bus\x00', 0x141046, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x6d0) write$P9_RWSTAT(r1, &(0x7f0000000080)={0x7}, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r3}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x610, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) setxattr$security_evm(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000300)=@sha1={0x1, "bf4a7c6631c6abe5b49c4476779bdfa898ad1e90"}, 0x15, 0x2) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 06:13:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) getpeername$unix(r1, &(0x7f0000000080), &(0x7f0000000100)=0x6e) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) 06:13:52 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:52 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:52 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)='attr/sockcreate\x00&\xa0\xd1\xb8\xf4\xde\xb6\x8dQ\xa0e!\xf0\xf2\x10\xf9\x16E\vv\x0e\x02z\xb6/%\xbdQe\x00\x00\xe6\xce\xd0n\x83\x9b\x01\x00\x8cF\xdf\x84|\x85A\xc8\xe6\r:\\\x1d.\xdb') write$selinux_context(r1, &(0x7f00000000c0)='system_u:object_r:semanage_trans_lock_t:s0\n', 0x2b) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0xfffffffffffffffe, @multicast2}, 0x10) 06:13:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x22000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:52 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001700)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000002a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002ac0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000002b00)={@rand_addr="92e76e4a1f5ded55f063cb896f46c318", r1}, 0x14) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001740)=0x9) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x101000, 0x0) ioctl(r0, 0x100000890f, &(0x7f0000001800)="00001fa75c3d5bb52102000000f1ffffffc313b60800e8437899898c53491c7b90940700") r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000080)=""/191) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001780)=@get={0x1, &(0x7f0000001840)=""/191, 0xe2}) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x1, 0x4) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000280)) connect$netlink(r2, &(0x7f0000000040)=@unspec, 0xc) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) recvmsg(r2, &(0x7f00000016c0)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/189, 0xbd}, {&(0x7f0000000380)=""/109, 0x6d}, {&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/235, 0xeb}, {&(0x7f00000015c0)=""/26, 0x1a}], 0x6, &(0x7f0000001680)=""/12, 0xc}, 0x160) [ 123.839689] binder: 4256:4259 got transaction with fd, 0, but target does not allow fds [ 123.848622] binder: 4254:4260 got transaction with fd, 0, but target does not allow fds [ 123.857753] binder: 4256:4259 transaction failed 29201/-1, size 24-8 line 3241 [ 123.874953] binder: 4254:4260 transaction failed 29201/-1, size 24-8 line 3241 06:13:52 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREAD(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4e00000075020043000000d057d8de5513ee05de60e449f57b9865b70aaeb89783bff534e1c1a25c1e030000005c9a8c8e4eee9916b88b8f4dcf326e2edd07fedcf4064bde33ea2f3560746baf31"], 0x4e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000001180)) 06:13:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = getpgrp(0x0) ptrace$cont(0x3f, r2, 0x800, 0x200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f00000003c0)='&e$\x81XK%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo-\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\xcc\x13\xce\x88\xd7R\x10\x87~\xa5\xff\x1bP\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xecZ\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xcf\x01\\\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4-Q[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\xcf\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\xfe\xcf\x8b,a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xecV2\b\xf1\xd3\xed\xb7\xc1J-\x1d\x9d\xe1\x96\xc7sP\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f00000000c0)=0x6) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) 06:13:52 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) futex(&(0x7f0000000080)=0xfffffffffffffffd, 0x8d, 0x100000000000001, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240)={0x77359400}, &(0x7f0000000100), 0x0) [ 123.889214] binder: undelivered TRANSACTION_ERROR: 29201 [ 123.902921] binder: undelivered TRANSACTION_ERROR: 29201 06:13:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x7, 0x88b, 0x40000000}) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x68) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) open(&(0x7f0000000080)='./file0\x00', 0x218402, 0x20) [ 123.987984] tmpfs: Bad mount option &e$XK%×äœãÁ™Ž/}iRÕ @ZáØè 懓Òa6ZÓAO%ÚÛû$¹Qw.HOo-Ê_Êÿþ…ë$»¥Z@]­t;ó•‰(|ž¸C‰6Û‰ à})Dî’ò‚ãC?ÌΈ×R‡~¥ÿPïqH€ðmìæ34I”h!(.¼­xƒ´˜ãŸ}'Ìõs‚ ¨²Äõ$O,3ìZŽW5ïþ>Ù [ 124.018612] binder: 4275:4282 got transaction with fd, 0, but target does not allow fds 06:13:53 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) lseek(r0, 0x82000003, 0x0) 06:13:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) 06:13:53 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x21000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0xffffffff, 0x6, 0x1970}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x80, 0x101, 0x10001, 0x1ff, 0x16, 0x5b17, 0x2, 0x2, 0x100, 0x8, 0x3, 0xffffffffffffffd5}) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x0, 0x19, 0x6, 0xfffffffffffeffff, 0xffff, 0x3, 0xffffffffffffffff, 0x6, 0x7}) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x2) write$P9_RSTATu(r2, 0x0, 0x1ac) [ 124.031804] tmpfs: Bad mount option &e$XK%×äœãÁ™Ž/}iRÕ @ZáØè 懓Òa6ZÓAO%ÚÛû$¹Qw.HOo-Ê_Êÿþ…ë$»¥Z@]­t;ó•‰(|ž¸C‰6Û‰ à})Dî’ò‚ãC?ÌΈ×R‡~¥ÿPïqH€ðmìæ34I”h!(.¼­xƒ´˜ãŸ}'Ìõs‚ ¨²Äõ$O,3ìZŽW5ïþ>Ù [ 124.035144] binder: 4275:4282 transaction failed 29201/-1, size 24-8 line 3241 [ 124.041892] binder: undelivered TRANSACTION_ERROR: 29201 06:13:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:53 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc5f123c123f319bd070") socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x600002, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x1056, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xd, 0x3, 0x0, 0x200, 0x3, 0xe98, 0x5, 0x3, 0x6fb3, 0xffffffffffffffff, 0x80, 0x4, 0x0, 0x4, 0x0, 0x1, 0x40, 0x1, 0x9, 0x40, 0xd6, 0x1, 0x9d3, 0x2, 0x80000001, 0x80000000, 0xfffffffffffff000, 0x2, 0xb942, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0xc}, 0x1, 0x3, 0x100000001, 0x7, 0x1, 0x2, 0x1}, r2, 0x9, 0xffffffffffffffff, 0xe) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x2, 0x1) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f00000034c0)={@local, @mcast2, @empty, 0x0, 0x40, 0x0, 0x100, 0x40, 0x206}) [ 124.105431] binder: 4298:4299 got transaction with fd, 0, but target does not allow fds 06:13:53 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000340)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='\x00\xcbj\xe3W\xb6\xfa\x1e\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\xd9\xd9\xba\xd1\xc0\x17\xf0\xdc8\xc6-5n\xc8\xa5C\x8a\x0e4J1\x92\xec\x92:.\x91Zi\xc1\xbd\x96>\xf5\v\xf7I\x05U\xf5\xd8\x90\x8b\r\xff?\x99\a-y.w\x1a\x92/\x86|E/N\xab\xd5\xe1\x80\x19^q\x1d\xca\x99\xd6.)\'\'\xb4\xf6\xfa\xaa\x10\xfa\x8e\x1d\f\xdcf0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xd8, 0x2a, 0x100, 0x70bd26, 0x25dfdbfe, {0x9}, [@generic="e731c5af0eb635348ebc09df4fe6ba8fe8cd97b1f913e1caf42529d8c2a7c59c3cc96e3c8e4afb2aa6d5be4e8b3c8acd7a103a38ef683d9112dd6010503944c1dbf0016e21b950c224bc391856f3e210b3483cdcfc1be71afd121827f390a0cfec69e8504bd5f6fa64c00364", @generic="0148fb8fc149855dd8601e6690da", @nested={0x4, 0x78}, @generic="27106ffa01b0632fea310fa378ad3c69e07e2b986f3f61ce7f127dbd67e95b3e83907d8fe237ccf19d9b8b20a2f9292e7c9034", @typed={0x8, 0x50, @pid=r1}, @generic="f9fee7ff1e72863f4276"]}, 0xd8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4001) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xc0, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fchmod(r3, 0x20) [ 124.165109] binder: 4298:4299 transaction failed 29201/-1, size 24-8 line 3241 [ 124.202940] binder: undelivered TRANSACTION_ERROR: 29201 06:13:53 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x6, 0x8, 0xffffffff, 0xfffffffffffffff9}) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "bad5145542ad2e59ead38dfe5071c60701e4ecd5369c0fc5bc78998aec2162a81c71124a11fc6a35c828056913bbc6ad0c6491ba1565c4ba19bfc19829b83b84483b78e11626b298051e5efec9c1f18dd71ba54dcd748a13b40cf0ada47672d2626ec5b3827e7d43cb74e305146919806b8eba5d00e39e086c4b03421eecf33e26ef4ba856f5798d4af95d4722f66531aa1ad162ad442e3738a680d07c9910dfc9c0823dc58bcfb43b39bf"}, 0xaf) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x1f) 06:13:53 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x0, 0x4000000000005) ioctl$LOOP_CHANGE_FD(r0, 0x127f, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101000, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000100)=0x54) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x200, 0x70bd26, 0x9, {}, [@TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x81) [ 124.270986] binder: 4319:4327 got transaction with fd, 0, but target does not allow fds [ 124.280020] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 124.310199] binder: 4319:4327 transaction failed 29201/-1, size 24-8 line 3241 06:13:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:53 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 124.332805] binder: undelivered TRANSACTION_ERROR: 29201 06:13:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000002c0)={'syz1', "8306afef01f3c224f23ea817824af17de9ba1c6fecf47a4edbf2597fe8904bd910a2483d4ab67a17564e3931ddada5ed726a830c08e573189d57f9f251a90c140137a1dfe51dcfc52c5237e6ea6a071329cf184097a659b7107b"}, 0x5e) ioctl$TIOCSSERIAL(r1, 0x541f, &(0x7f0000000140)={0xfffffffffffff709, 0x4, 0x6, 0x69dd, 0x8, 0x7, 0x93, 0x2, 0x422, 0x9, 0xff, 0x80000001, 0x0, 0x1f, &(0x7f0000000380)=""/242, 0xc1d1, 0x8, 0x4}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000000)=""/169, 0xa35d}], 0x1, 0x0) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x25, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0063404000200d0240000040000000002664553a2dd100"], 0x0, 0x0, 0x0}) 06:13:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x15b400000, 0x3}) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3) ptrace$cont(0x3f, r1, 0x0, 0x20000000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x65}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() tkill(r2, 0xd) [ 124.377019] binder: 4343:4345 got transaction with fd, 0, but target does not allow fds 06:13:53 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x400040000000001, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r2 = getpgrp(0x0) waitid(0x3, r2, &(0x7f0000000140), 0x100000e, &(0x7f00000001c0)) bind$unix(r0, &(0x7f0000000040)=@abs={0x1}, 0x6e) 06:13:53 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 124.442738] binder: 4343:4345 transaction failed 29201/-1, size 24-8 line 3241 [ 124.479144] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.560360] binder: 4354:4372 got transaction to invalid handle [ 124.573488] binder: 4354:4372 transaction failed 29201/-22, size 2314914501787543876-4044267787728724000 line 3014 [ 124.589530] binder: 4363:4371 got transaction with fd, 0, but target does not allow fds [ 124.598284] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.607257] binder: 4363:4371 transaction failed 29201/-1, size 24-8 line 3241 [ 124.618206] binder: undelivered TRANSACTION_ERROR: 29201 [ 124.628608] binder: 4354:4377 got transaction to invalid handle [ 124.640720] binder: 4354:4377 transaction failed 29201/-22, size 2314914501787543876-4044267787728724000 line 3014 [ 124.653705] binder: undelivered TRANSACTION_ERROR: 29201 06:13:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0xf2c, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socket(0xa, 0x4, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f00000001c0)=0x1000, 0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, 0x0, &(0x7f0000000080)) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f00000000c0)="c23adc287fce3e0d8afd5105a700f745713283815373b31bccbb0e25e8b90521a9b67fd4599ada4465fba13a556c2173b2c2507cce8e42f2ba4e4004300d65b9a9226b6eeea7cf5a4a9812078b5e2faea5f096f1efe1ac5e6ddddcd806989605418c27c1a6b9aa796c0cea5dbc53b211ea9b903cd3a859299911a7ee2f1eeaa9078ee0a19b0dfc45c95fc73bed298824d47f01c9b6224fac7273fcc2b4", 0x9d) fchmod(r0, 0x8) 06:13:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0), &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x0, @local}, 0x27, 0x0, 0x0, 0x0, 0x8001}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pread64(r1, &(0x7f00000000c0)=""/36, 0x24, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}, 0xa4}) 06:13:54 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x3d, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x66642a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:54 executing program 3: setfsgid(0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e00)=""/58, 0x3a}}], 0x1, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="4161ef31bf56da05100c1965333e5d9e36965074a20c0fdc7c048ea0a82927e037af5ef5badb2dbca91d9d30c97fe2edcd2aa4e15af66361077dbe9c0bba7f6cb92c1dbe7e9b38340f5be574bcec9419312c12b20cd4489ae4d912167397a1454889f700bb4988b8fa43d7059102bdb95e1790f256f2d5b9f1", 0x79}, {&(0x7f0000000180)="1c00aab8fb7b3aa27ac8bfa0f40fc5f6233f431fa6c25381edae0e74790166685421c1afd5bce3bdaf2f5b5b238e6bb2c5a809d04414c3ae272aacb4a5e35cd944dea44a099c95e9122a481f1882e036c68b09d4a2bed9963dc57f175b836c651e7ab8640a6a28e0837fe10690395669406e45047d9853bdb91e44e60a6bff44fbdf07a8269047ba81d732d299ec4da320662318f9e196e7e51777907b2c107293936521e14b1fa83fb2b4cdd91528134fb876f102af875e9d8fc39d8d8ad3ee9c71fbf31ff0612bafdbb27a70e9af507d23eb9022a72999a7823e239424cdff15210ad477c3bf6b79ac744f0d9c673d", 0xf0}, {&(0x7f0000000280)="5c149d74e6c48fa2597f3412f2277b6c03d432703e5a273909f230a44151222afcab619ef143464b783267988b7acd766e80f59e3e9879ef6fd9530b1e8a6fd1da6874a9ac33ea6c3749cde1eadf01783e2a6a7818e955fc7ca16cd0e1f2c8ccc050b33ec7f09a8d6eb2e5cb6780274dc12e25c488853fb9423c4dc1157da1c5a9e2f424445070735c546c2bafe828ff90de8e3a9cfa04d4bffe60b93875d88dad9698facbc68a", 0xa7}, {&(0x7f0000000400)="36444696720f302cfa1937c7ca354656a77e48597dfe6c340a1b38e8d7590d84ea90168d24f19b7ecaedfb990ed3e89ba866b3e6ded7c5908d9d662d8e97a881e70874f53b9c2df212d8e9ef81884e30ad89003d73bf406bc83861778889f0549b3d1066521cde0b73932fc2f24c4c761c64dc710a693a2d7814cb35bd884186b1cdaffcd08ee428c91f1d8d7c7b5bd418dc54770ee7a79b92a7ab13e013d349eb697fb62bb419635f7565f6bba2677b20d273ed9dbbd756ba5dce0bbe0fedee885dede29d80c73b8a55b890af3b817e78dcefa7c346f48382a7b23794b33344a3b516363e509a65c5b1", 0xea}], 0x4) 06:13:54 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000340)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='\x00\xcbj\xe3W\xb6\xfa\x1e\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\xd9\xd9\xba\xd1\xc0\x17\xf0\xdc8\xc6-5n\xc8\xa5C\x8a\x0e4J1\x92\xec\x92:.\x91Zi\xc1\xbd\x96>\xf5\v\xf7I\x05U\xf5\xd8\x90\x8b\r\xff?\x99\a-y.w\x1a\x92/\x86|E/N\xab\xd5\xe1\x80\x19^q\x1d\xca\x99\xd6.)\'\'\xb4\xf6\xfa\xaa\x10\xfa\x8e\x1d\f\xdcf0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000580), &(0x7f00000005c0)=0x8) fcntl$lock(r0, 0x7, &(0x7f0000000540)={0x0, 0x4, 0x1, 0x5, r2}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r3 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x101000, 0x0) write$P9_RRENAME(r3, &(0x7f00000004c0)={0x7, 0x15, 0x2}, 0x7) r4 = open(&(0x7f0000000100)='./file0\x00', 0x400, 0x4) write$UHID_INPUT(r4, &(0x7f0000000c80)={0x8, "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", 0x1000}, 0x1006) sendfile(r4, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0xbc, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYBLOB="ff0700000000000011634840020000000000000003000000000000000000000011000000000000000000000040000000000000004000000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000400000000000000852a747000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000001000000000000000f00000000000000"], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000001800000000000000480000000000000000000000000000007800000000000000480000000000000018000000000000003000000000000000"], @ANYBLOB="000400000000000009631040", @ANYRES64=r5, @ANYBLOB="00000000000000000f630c40010000000300000000000000"], 0x41, 0x0, &(0x7f0000000400)="0405d0f242d13233c0406d16852145b348f225a74841d477c970b89e1e08b86c32892f2fa7bee24c0e577701d76765b937ea1e2046b0ef6d459aba6aa8d7e498ef"}) creat(&(0x7f0000000080)='./bus\x00', 0x0) 06:13:55 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 126.048974] binder: 4462:4468 ioctl c0306201 0 returned -14 [ 126.056601] binder: 4465:4471 got transaction with invalid offsets ptr [ 126.081912] binder: 4465:4471 transaction failed 29201/-14, size 0-8192 line 3164 06:13:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 126.120318] binder: undelivered TRANSACTION_ERROR: 29201 [ 126.131294] binder: 4465:4484 got transaction with invalid offsets ptr [ 126.147463] binder: 4483:4485 ioctl c0306201 0 returned -14 [ 126.155114] binder: 4465:4484 transaction failed 29201/-14, size 0-8192 line 3164 06:13:55 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x337) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) r3 = dup(r2) write$P9_RXATTRWALK(r3, &(0x7f0000000000)={0xf}, 0xf) recvfrom$unix(r0, 0x0, 0x0, 0xc08e, 0x0, 0x0) 06:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000400)="2e57a7eb5a1705609bcd3b7957a89eaab2a924c60613f99a384b556a6b9c7ae95f6f42d6373197ed9b9b7bfd1e9337c3411607bc2df12883f3ee55bf4c8cfa96c0df81bce13b55f3321fc9a09e1c48da9e678465b5ea8205db65d78c427cd0c61cba88289d0eedcb8a4a8d81", 0x6c, 0xfffffffffffffffa) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000340)="127aa4462e588423bc594ede7279d40eb0ef5b35047af7f04b2d8ab3d8d4bb985bd0c6f69550361f872dfebf4a60da760e13085c308fd6c42a5bffd72d19098a431bd6a7f16da561e21cd722aa8717877ed1c80c0e4a081c951fcc3f2049be113d63bf666733e7a0b386573840fd0265636837453d8020ce6b904ac6a42e084f5ad339516713698e84669877b18981724f49c11ab539fb2754fedc1e9b5830617085dc2a55352c", 0xa7) socket$inet(0x2, 0x2, 0x80) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) write$apparmor_exec(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="65786563203a7d776c616e3180"], 0xd) socket$inet_udplite(0x2, 0x2, 0x88) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) rename(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000480)='./file0\x00') bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_FP_MODE(0x2e) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) write(r3, &(0x7f0000000580)="abb58d5b952f819b2b96b004544333ef3a644831061e02f6150d971ffe58b4ce45e1e8119e658c6724adb71f44fe7d86eab9a429fb7fbd1564a6f1c7cbb01100560879168e494d976ce83c7cc77e8ce05742c6aaaac278a03b4a9586cc1b23a4dd5bafb76a05fce8c376efcdceee3a1f3d48e58d000000", 0x77) recvfrom$inet6(r3, &(0x7f0000000240)=""/31, 0xfffffe0e, 0x100, &(0x7f00000000c0), 0xfffffffffffffe4a) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/create\x00', 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x18}, 0x1c) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 06:13:55 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 126.172770] binder: undelivered TRANSACTION_ERROR: 29201 06:13:55 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0x4) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0x800) r2 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r2, 0x10099b7) r3 = geteuid() setuid(r3) sendfile(r0, r2, 0x0, 0x8000fffffffe) 06:13:55 executing program 3: r0 = gettid() timer_create(0x7, &(0x7f0000000040)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000180)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/4\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0x2b7}], 0x1, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) close(r1) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 06:13:55 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0x6, 0x7f}}, 0x28) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 06:13:55 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000080)={0x3, 0x0, 0x2}) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) 06:13:55 executing program 0: inotify_init() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x4}) r1 = syz_open_pts(r0, 0x40000000002) fcntl$dupfd(r0, 0x0, r1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x7417}) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000140)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846ea512a8ccae7a99da8dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1af8ff63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c1829a6030f4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7d12ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6693ee1b9abb5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8217cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057148d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858acd8ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d29428010000000000000062fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006) ioctl$TCFLSH(r1, 0x540b, 0x0) write$P9_RMKNOD(r2, &(0x7f0000000000)={0x14, 0x13, 0x1, {0x8, 0x2, 0xd9}}, 0x14) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) readv(r1, &(0x7f0000000080)=[{&(0x7f0000001180)=""/150, 0x96}], 0x1) 06:13:55 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:13:55 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:13:55 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) write$UHID_INPUT(r0, &(0x7f00000001c0)={0x8, "c7fe146072d3c43328b348f6fee253f6a0e76860f4bf0ece9a4d942b744480b6412d64fc936e8bd4540ff9e75f4c3626cb214d6a5bf81ec58ded7ec3930f3554efaa76cc8b6bbde6e4374aad41c2f98a44b78618622114b6184d144bc10f75c636361349131195cd2b051ed3da3ae0ce451855c5481d4be1423e940acd13138197ba1f0df87431de71ea15d08323b7280153ab4d84def4db90a394cd137d59d36d66de55b83545e7f257d8d17c63ad19dd5a9b7ea33f64c3ef0264c493318bb695d81ac919c9089332265870e88d9aa772053e791031fb00aa50432c8de7f62f1fb3fc35440d7780d5f5b2a51e1810cb5b0d2b179a8385f1c66c7cdc9b4be4589c507876a553cac09444cbf3222147155fbaed6a1fbf5fbfc9e893cab3e01ea9e9d307320092dc56a939b41890292f03bc1d923b88d6eb5b9a71c9810ffd5a24f2566cdbec9f1a3216e5e38fe70f0ef97c269526bd4092a779b8e6808ec4671e3e7491f2be86d8038a418c0f71d1fb375afdfb1d29cf1a924eabced21431245273fb5aef072a67a328c2d9ace8e47a76018f73b8ced679109690732dc32a8f60db65f6d6ad7eba8f06a82cac060f0b272e6d0d6c9c77f325105b201a1d8ace9b6b740d7c56e6abcb6505265a99d89da4c7993ceb124dccb9a9a21b493d7133254cc60643294077761d6af34def46fd1c5a6809cf92671b9ff2da42360e4b1ac5ff4bb299e1b7b272e87d5a2e102cd156f4bbf879ac4c94ca67462db15529e74b466e0b0a6e84fc82ab4f8a1fa9dd9f36d8e49dbd01e2bd20602a91c61562ea04e37e4dab24ffb3f8683336dd33d0ac0f01edffa11275701ee7034ad6e5d4ebd5f8908607f98273bb5bc1aee563e2ba0805a6d485b2cc5473501e6d0054f2883d64bff98f8bb4a36ea147922e1f4b58f074c066b5e825f0f490a7856dbc1d396921785bff248cbd5d48e13db5f0bcb5d318627e59f8c234d3dc1bf4eebb7bd6415e41b7217e32441e2b2f2ffb55fd5814b4c03a5599a2c7ee0af90ff36ead59355fe6a6355f432b3da3bf739e6df49a3478f8148a221d1c071ab23706ca491a6b8239bec104d74f0df6cbabbe9abb64f7209aca56d8467aa1754d42ed609ce3672e0f851243b4dfc6f1c0b7153ff0d05a5085e71c3b6985a7d3ee7c18079f0dbfe9d41ae1ca7963931613d0b0de252e46120f96e72eaaf07965e40fd229172949607964a5f4dd350562b3f76cf72dea4a90e5fba5c759413da3ee8b62c6818ca4db0dd9d5188e23feac0536fd2a83f5445bf7fa8165770f3ddf6bc9a22c79704a46e09c5254035707d974366d7ccb17b58fb69f183fb63336162f62cb7958daf347aa553cdfd0c5be15682b65c0b7b3313e595ee0f098c592cafa02442d7950cb100fb041800145efb0e4a6f7d8e8245bc4d29f750cd953c2cd17ec36c8fd55759a6ecfc108ddac23b0475e3d16d57048d88fa55b39f8fd606917e6c9496857cf6c2d17213c8411dfa69ba8dbc6fd40ab006bfb975f0f6e88690c09f48772161c2157c9115db2e0a211c63b6c5e04bc6827f3a3ac49e619566e5849dffbf8eb2d91c5a8779fe11dd9f7bf1320fffb6d1e0558f210f189a89d4b90654c96df7831b89bef692ac3dbec8d2d0e353f66b8648979cadab8d6af83293ecb4c601488d9c2a8a21f80187078711649fd72d88971374582afc8c5213f0b244b1c4267a00f4615be989ab2718ff8c515c5ae3460e09a1c300708344316dd82697f5848f417f037e9ea95930767da5d2821908569c58c76c4986671f5d69736516215125246d41fd1c301c9379ca30bccddf37ed16dd718c8c7843db0893ea43519b9ed16ce8990b0248d7d16288f99123bc7a17d0c8fa683b1c304721cd9b68f16891f329f92a7a05bda8b4c1147dcab77e821a78e1535e2eb2f79bafa5449cd06b678703ea1e5b4a88498f410211a17e39a5ff00bc85c1b81bd1982922739ad74bce2629c2d8a6b35c5d050995d02a5a43d663ac9b6a0b82bd3af6baedb094615d54d25a138a35b95541b6ac596f9eea9728f5a9be95890d1c97192d55c81e873149c21e9ea9bea768dfeca84f3029142492db230f542bb85f2dcf0157d8427db473ad83ced73f248962b32f01b148093034d8c500febb94e61a4d0e6d2a3ff549a00cfb0a629c9199cbd79cf4acda4ce2d2cc8e1fd7338107a35ff4ecb05d74635cd7118172c54a7974afcc6f16a0af5d16c1e5528e770a0bc5310e02291dd3fb5186d8d1b40e804b209f422007fad67ffae7bf671311cad342e4d1a29341373753e9741fde4f7ebc8dc9c6a42b287e3dc26c049cd4741eea081f85e2707e3604cf22f5c39df7d5805cff9292ed0157371fd8e63082922ca453359b9a567f72d1753835b217fb215deb4517c751675a41a91b54d94dc50a57b6d71d81de0d9eaa25dbcec6091d02fb3e64b8a9470a1e76f82ba2742ddacdc00359b1614584f2722c25e6bcce5abe549cec97d438cb96742ff9e61b6b74eab1f45af5b2fe660e1a78c274ff8b20a3a67d11c42fd1ca0722d247207f528d891dfbefd84f395e9e636ce3c0ff7bb0cd3c3ebc4f713e0cb857a95ae0c3547345ddbdb60d9485be9623ec5840f8d11d10634c3baeb3d4bb36ec51eddfa04e0d94e76a7df8b5952e1c37a51f44f1643f51d766ccaf026f51106f246ab6e5ac5ab7b297965db0e77cc40d0f2f54ad97e6bce6cb6aa88f73a42ab02c9febf03bd90405c77ecd3dfbde69f93a49c210aa884fd569244a19651dee04ebee29890036ae18f98afa6c5421d2b1d8acf57324984d43d707d93f335c4744a926984487c128e49367873c342e45ecad21fe8b1ad1371ac50cef819bafc8c8e5c8b150c85107f95b47da48789a28eb467a1d704114ca2c6890b46551d90d270022810a88884d4abf9a779c3e68fb50e4f0d5da3e09f6590aa42f08684d83314e8ff3251b341feb0b301417b3abc12bf52d29b802790cb890dcc7ceec9eeedb0cb1594fa466033aa05aa8c8e3da04e6f94cf8424cef9750cef772a59fd210fef4233f1c34f536f5276ba96f6fd3b47d4635fc39baf6c42c625405745196d9dadef481e314a1f27217c97cc1ad57af7c3705719ffecc2424a519aed528d25e64d0e9b0e532656b82ba3ac6ed5aac5531ee500df7d88ef33be2c02f1584c26f952ddd39d9e7437255535cea49ad695106679efa264c5d4185d435fa743d9b5565b59352712d37858a4060a745f10e714e011b7ac94be9aee33e630f2bbfc2ebc206ab436b355b7c80f386228262e0832302cee88a278b837baf7843bea65cefe38c976503b4fbc9f9b2bc05748d6acfbf57253cb17fd998acd793144ce35a2fe125eb48853ced2b0103968fb634faa967ad71b0e460580c705c747a7a92eafcd72e19cc5adfd60d93309736abf42e457dd2c512aadcf23165b166ecd76c282b5dc8270940bd00d481e26ff89b22f7bac6331fed530035054ebdb67d518cd443f16a16b5bf9d83a38ea29ddf34034509f37425eb2524843cc25f694d263e7b1b79aca545ba5280418ad24081168258df7ec4828ad1c0a42a4dc00bec6dfdc8198da6438f260f406318f4a163f652a7848faf87a3fd096d0ceeae9a7a0c53ef035d2c2aa48b0ffa02a87e28cf634d8284b47efc2e77f3729f4388ccb555deaa252c499b13705b506016d336a487dcec399d057b228fd4ec069f06a23d91145633a5781886051287c2e3f4a1db8cd70c45766b435b99a9f7199391c7fbd19f3211a98a2e8c397cbd92cc1ac410a8e38e4be1c7f3f3fa54d63f08376fafaef9876f83fdd5ea3deeeced3ca5c58e90833d44208af1ef1bc9c9b9655eaa3ed52a01d2b7779c5f81b9036fb599568f612b81bb3d4e5258f29f34d4727615436f1614340e26b342102a5b89643df8c8ad09f2e851bf98df00a126bca3ded7b4e2ad6c33ae6346759f73b32642073ccd89b59d44508317d38df223750822a3768cc8a10c6579606cd66264ffc7297577c4b8a920e1bd3a227d09f335f5689d3e5425ad27b291b8d615bb75d7f2a0631662cf3fb08ccb33b16fcd9cd6444cddaad2133241ef2067fc4fb76a7656ffade83e9f859434c0f2e1d1eec17af15703cd9b5fb2de4c11aeae80e516880d29c44a5ec21265147872b8a3c4f02932445e82b705c371c8893cf7a8e62edfe1b43ce43d09b936b6b93a976a077799b4cfca0261faa31e7a1bc3771bf8e4caccfbee6063dfc37980392870cfe9c583bc2a03d1125c2858d9570aad38c89cc81519acc1479d5b8216d3496e1f125bc13acb1ad024c53550b088b8d99c1175a89f13d762d7ea582266ce40a975d478f1d408849e5a5df98eae6738d7710195a227a5f1e779d1c2a4808b5485916aaf374f2066abb63fc412cd8702e4750d4b8e1835e9b3c0bcf51bec451c8a96b9e5b397fe8cd1142ae8bd56c05a69b0b020a5dae5b0c3fd79a7b1f166d464f5bcc44924f169ba4c1d92e2c06f658de1dbf169e92a26670b1de4774d484026a203846a00d9df2a28f8e74ebeaf9be303f425170c78e8d65f933f508743abbcdc94fcbdd683f1cdf8833d6ebedf3f3fa9e1ca5b8e56ab46e96e301979bd676d211312886c84f7c00fa5e17d03aeb561fd8d7c919e704abcb4a0981a20dd4b05020ef794ff84b95bbacefcdf8fecbd774d0bff9876f059ab53621955eba267c49355caeb074942bc9ce9bd1faa031dd25279343e9b3a97f5c9dc1936dd00c03b66a5e618183ce960fd8e15d0db33cd74bfece4036547f913a5a92815d256661385abb9ff6cefeacc513ce0a38f32babc0e59d037cac4cc1686a17f39407ea3d85bd42538d87e6c3d8cae860d2b61d3bac76aac8b729a693e62f54e84a00a91e287e501e6d286588a9cb8359709061e55e217db770a73f031e968b97409f260fbb090da7963da13caf991e51e70ef4ffb64371b53bd747c306d8e27722fa1b1012e6b5ccba2822436a6ac4c7c3b285bf842479b1fa220df4692120b05f576576926eda6bed5fcf2f1b2782260935dd4f3fb20dee9593c68f65573f5b388ca74177eb4a5b4683102cb9606709361af2983cd882097e6e5b9a68c50533d48d273edcc27fcf068af0bba41f224f28de7adf8f4037e0b21c4fe20fe49103ca42491ec870bbe1ede70182de8db09d8ae8b3ff2250b4459033452c2a6b96f5761cfdc2080875bb4305f63167480302d90894624e9f1864cdeda55d61f5f5306988ff7651566a1ebbbd9462f7e27180c0bb2ff06efd3731a1cbc3a293791d421ec1590b51fc7db73759745046cc2261044646c21abe146a56f14ae11349143e675554445a838803045272eb84e0070f7e1852fa2dd1fd545e5c8f93f548b1389b47b5efe0bc6a19bf9815b084f7960c9b581696b6d5c04b327bed35294f1d8b9b44f0ab188f7eeb56d5b0a617992d2a482c80a2e094900240b0377fc39d61ffa50d91c4a96d0008d2cdeb5b94c7ddd66ec0e34716b38b99b70a36bc06aea0c55cfd8ecb007fba86d9feb10b8fffb289019519beef876a4251f282b6b800230e58b065fc357ffe64b9245f0efbc63d9095a8fa23ea9c4b5e6eed8452ce28db70d2e50b4bccad019ae89c83b536425203e4a65f4a742096a0733b4fcebd8963cea6271c684a299c2d00a07889b561835636496c19f1effffa63841addbb5ebfb668ee83cc805d11a1f23cb422acfbaae7f4849001ba054c402dabe5581bd9c8511027377b787ef06a7cc4e4385e79a221c9fd2d13115e74dac1fe9b33470f8fd7abc168d29f", 0x1000}, 0x1006) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0xc025}) uname(&(0x7f00000000c0)=""/89) r1 = socket(0x9, 0x5, 0x7) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x1) 06:13:55 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:13:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a300b6f610c6201d581cc9f518e4bd610b90724f4df3e6cc784acc76ceaf896fb39dbb45d4cafc13bba3c47f9653c0e77a294aa3d870bf162762af295b2f26293d1b10c9b2838e474d71ff451aae814491f6dea0bca2519eedb6fc5349e2d70a1364c8354499ff929f3bed3dd396884490fff8665d2ba7c582118a587db06d270a4728f7a032cec3d89b3a60cdc89890602c3f2e3bd5d46efb631080f875a00"/175], 0xbc) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x202, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) creat(&(0x7f0000000180)='./file0\x00', 0x12a) 06:13:55 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x400, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') getuid() umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) 06:13:56 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:13:56 executing program 4: r0 = socket(0x10, 0x2, 0xc) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f00000000c0)=0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000080)="1f0000000104fffffd3b54c007110000f30001000b000200000010c4c028d3", 0xeba00fc2) 06:13:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETX(r1, 0x5433, &(0x7f0000000280)={0x1, 0x59a0, [0xffffffffffff7fff, 0x6, 0x0, 0x5, 0x18], 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='#\x00', 0xfffffffffffffff8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x7, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040841}, 0x4000000) [ 127.343259] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.368591] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 06:13:56 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0x6, 0x7f}}, 0x28) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 06:13:56 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:13:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x41fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)={0x0, 0x46}) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000200)) ptrace$cont(0x9, r1, 0x0, 0x0) 06:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a8c9512d7703f319bd070") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20000000003f) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@ipv4={[], [], @empty}, @loopback, @dev, 0x0, 0x0, 0x0, 0x800000000110}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') write$cgroup_pid(r2, &(0x7f0000000300)=r1, 0x12) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, r3, 0x700, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x26}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xa3, @rand_addr="7a9446de6f1393cbb68500c302b5e9e4", 0x167}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4800}, 0x20000800) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 06:13:56 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000312000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xe, 0x0, &(0x7f0000000100)=0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000040)={{0x3, 0x3, 0x8001, 0x3, 0x4a02787e}, 0x3642000000000000, 0x8000, 0x4}) 06:13:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x6, 0x0, [], [{0x7, 0x7, 0xfffffffffffffffc, 0x1, 0x8, 0xfffffffffffffffd}, {0xfffffffffffffff8, 0xbf, 0x7, 0x3e00000000000, 0x3, 0x5}], [[], [], [], [], [], []]}) fchdir(r0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141046, 0x0) fallocate(r2, 0x0, 0x0, 0x80006cf) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) timerfd_create(0x1, 0x80000) 06:13:56 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:56 executing program 4: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r0, &(0x7f0000000040)={'unconfined_u:system_r:insmod_t:s0-s0:c0,c1023', 0x20, 'sqsau\x00'}, 0x34) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) 06:13:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) vmsplice(r0, &(0x7f0000001240)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="981bc3dd80bcfd0c10877718feb4e9e6e051a9aeaa670fbbe5c623fbc02da222ca309920e8ae24b134339e5b8cedff9144f906166905c7365f28b9fada022d75628b7d8cb0b9527d78f70f71d3e62b6c3a899ea1d0e571941d01ae60830719cfb414d1f84e650e4413160744a44c99650924ecd0bf5121018af0153450c8477d6012319be5d94628855d49e7cb71ce838951776ad4849c62b913c5fe531f3f4f5d1717f7eb16f1e9cf368e8dc59cbd88ab2efaeae431bd8b12508a96a1f630d7075504c636bc3e1a1e9b2f91090b88f54cece9ec03586c9bbdb93caa6bfa48fb025fd6", 0xe3}, {&(0x7f0000001180)="9dc5894cd60f5d3eb56eaf9c1be77cb4e9d7a38f6f85ff2f478e03c3bf369845b88b99f17a6158368d1d3469fac91dd56d5bea7efb2e3abfac4f8461bf2a59718e73b0c86125e942e9d57a073795fc09e13f5359853176e39837ece5e79c483f674dac94707a57c10f1a9dec04ca93aad3ce4dbeaf1d8461eab0911be5dbb7f513547547c47216ec33a60729d5680b5ecc548ca5ec83d00f49a9b69252", 0x9d}], 0x3, 0x9) 06:13:56 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r1, 0x10, 0x0, 0x2) r2 = open(&(0x7f0000000140)='./bus\x00', 0x800, 0xffffffffffffffff) lseek(r2, 0x0, 0x4) 06:13:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8, &(0x7f0000000400)="470cdc3c2df4170a310aad48eb5320a0b22e506660b20e06cad5c892deeaa83dc7c415d60778c60221dbc31ca59581e489a6788778d2dada3d3079ee11880cda60ae8c4e427ef935c925") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x802, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000340)={0x8, 0x0, {0x57, 0x6, 0x5, {0x4, 0xfffffffffffffffe}, {0xffffffffffffff00, 0x9}, @rumble={0x8}}, {0x52, 0x0, 0x81, {0x1ff, 0x80}, {0x1, 0x640000000000000}, @period={0x5a, 0x5, 0x2567b38f, 0x7df7d573, 0x40000000000000, {0x2, 0xfffffffffffffff8, 0x9, 0x8}, 0x4, &(0x7f0000000100)=[0xfe, 0x7fffffff, 0x0, 0x503f]}}}) r2 = epoll_create1(0x0) ustat(0x84, &(0x7f00000003c0)) r3 = timerfd_create(0x0, 0x0) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') epoll_create1(0x80000) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000240)=""/187, &(0x7f00000000c0)=0xbb) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [], 0x8, &(0x7f0000000040)=[{}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}]}, 0xf8) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffffa, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000021ff4)={0x2001}) [ 127.980448] binder: 4593:4597 got transaction with invalid offset (0, min 0 max 0) or object. 06:13:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x14, &(0x7f0000000200)="45553477fb99be6d914e42549fd3e40067cb9ef847c8fe8dba045ddf8862d13e4d720531c0a4ca06f67f571c00a386e47729b3113ad4df551ec78fca38eaaf35c2b8daf33f80de28c2e4a5e946647cf57d78f7c3290da9b6b98d4a717131ea4d078e515da52bdf0ed2225e5590a361603678b839589025b67d5b896f51d54378fc505757b0434c118f4e952eeb731d4937d94a7a7d77") getsockopt$inet_tcp_int(r1, 0x6, 0x5, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) [ 128.030731] binder: 4593:4597 transaction failed 29201/-22, size 0-8 line 3199 [ 128.070687] binder: undelivered TRANSACTION_ERROR: 29201 06:13:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) prctl$PR_GET_TIMERSLACK(0x1e) 06:13:57 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 128.468155] binder: release 4622:4624 transaction 61 out, still active [ 128.478576] binder: undelivered TRANSACTION_COMPLETE 06:13:57 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xb, 0x3, 0xd25}) inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x40000000002) fcntl$dupfd(r1, 0x0, r2) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x7417}) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) ioctl$TCFLSH(r2, 0x540b, 0x0) r4 = gettid() ptrace(0xffffffffffffffff, r4) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000001180)=""/150, 0x96}], 0x1) 06:13:57 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:57 executing program 4: r0 = creat(&(0x7f0000000000)='.\x00', 0x70) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634040000000008a404b4b9bdd7d68377cdc06f70000000000000000000000000000000011"], 0x0, 0x0, 0x0}) 06:13:57 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, r1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000280)={'irlan0\x00', {0x2, 0x4e23, @broadcast}}) getsockopt$inet_tcp_int(r1, 0x6, 0x18, 0x0, &(0x7f0000000040)=0xffffffffffffffe8) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000180)) 06:13:57 executing program 2: pause() 06:13:57 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:13:57 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 128.723617] binder: 4637:4641 got transaction with invalid offset (0, min 0 max 0) or object. [ 128.732561] binder: release 4639:4642 transaction 63 out, still active [ 128.754562] binder: 4638:4643 got transaction with invalid data ptr [ 128.761163] binder: undelivered TRANSACTION_COMPLETE [ 128.767007] binder: 4638:4643 transaction failed 29201/-14, size 4352-0 line 3155 [ 128.779540] binder: 4637:4641 transaction failed 29201/-22, size 0-8 line 3199 [ 128.791996] binder: undelivered TRANSACTION_ERROR: 29201 [ 128.800641] binder: release 4646:4649 transaction 65 out, still active 06:13:57 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 06:13:57 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0, 0x0) syz_execute_func(&(0x7f0000000340)="2e2ef34a0f2c91001000024b99846e4189ea6c5b035b034094418e660f3a0c6fcbef2e07b200dc0001b6b60fe9f5660f3829efc4617a6fa2fd000000c4e1c1e16ea1") r0 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@pptp, &(0x7f0000000380)=0x80, 0x80800) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x412, r2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) futimesat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) syz_open_procfs(r3, &(0x7f0000000140)='net/ip_mr_cache\x00') 06:13:57 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 128.823065] binder: 4638:4652 got transaction with invalid data ptr [ 128.849877] binder: 4638:4652 transaction failed 29201/-14, size 4352-0 line 3155 [ 128.867836] binder: undelivered TRANSACTION_COMPLETE 06:13:57 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 06:13:57 executing program 4: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x220141042, 0x0) ftruncate(r2, 0x280080) sendfile(r1, r2, 0x0, 0x2008000fffffffe) ppoll(&(0x7f0000000000)=[{r1, 0x1}], 0x1, &(0x7f0000000240)={0x77359400}, 0x0, 0x0) [ 128.887769] binder: 4660:4662 got transaction with invalid offset (0, min 0 max 0) or object. [ 128.897867] binder: release 4658:4661 transaction 67 out, still active [ 128.952764] binder: undelivered TRANSACTION_COMPLETE [ 128.962482] binder: 4660:4662 transaction failed 29201/-22, size 0-8 line 3199 [ 128.983226] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.027865] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.051427] binder: release 4667:4670 transaction 69 out, still active [ 129.074779] binder: undelivered TRANSACTION_COMPLETE [ 129.088644] binder: undelivered TRANSACTION_ERROR: 29201 06:13:58 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xb, 0x3, 0xd25}) inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x40000000002) fcntl$dupfd(r1, 0x0, r2) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x7417}) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) ioctl$TCFLSH(r2, 0x540b, 0x0) r4 = gettid() ptrace(0xffffffffffffffff, r4) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000001180)=""/150, 0x96}], 0x1) 06:13:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000000c0)=""/229) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000e90000/0x2000)=nil, 0x2000, 0x2000005, 0x12, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 06:13:58 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 06:13:58 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 129.190094] binder: 4676:4680 got transaction with invalid offset (0, min 0 max 0) or object. [ 129.199954] binder: release 4677:4681 transaction 71 out, still active [ 129.209284] binder: undelivered TRANSACTION_COMPLETE [ 129.243927] binder: 4676:4680 transaction failed 29201/-22, size 0-8 line 3199 [ 129.275316] binder: undelivered TRANSACTION_ERROR: 29201 06:13:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12000000013, &(0x7f0000d06000)=0x1, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) ftruncate(0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r4, 0x0) mremap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x4) r5 = fcntl$dupfd(r1, 0x0, r1) sendto$inet(r5, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 06:13:58 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") flock(r1, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="114d007816438ac747afe5d2755c030000000000000000"]], 0x0, 0x0, 0x0}) 06:13:58 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 06:13:58 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$netlink(r1, &(0x7f0000000040)=@unspec, 0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000140)) [ 129.579213] binder: 4690:4694 ioctl 81009431 200000c0 returned -22 [ 129.585879] binder: 4692:4695 got transaction with invalid offset (0, min 0 max 0) or object. [ 129.617196] binder: 4690:4694 got transaction with invalid offset (-4068365549594194671, min 0 max 0) or object. 06:13:58 executing program 1: r0 = socket$inet(0x2, 0xf, 0xd91) sendto(r0, &(0x7f0000000200)="01eb325ac8be6dd3c492a404d243185c65cdbd76ff04be2d2a69e8565fa91850fcdb06d3e88bb58ce8b69d0e064c971944ca4cccf7ccf8704c85f481f8648260e77acbdfb2f0b12c32acd2db12efc1b331ec5cb4e01e0d995920aef409d014c1866f22caf226f2d8cfd3481fe4152b21b52caa5e666b4abf9b85f936cbab4a5b6e27d94dc134edd7f0abc7ba67b6674fa02f73ca9cb03c503c85f8a7c73993d8d6ba3921f57a0e9a", 0xa8, 0x20000000, &(0x7f00000002c0)=@generic={0x4, "58e4b259eeb7806f2bb339f93aeb1b0e47673a73db4f46d1b9d9e116fe11603f7bb6678363995cafa1c073d56f1ca0f706d170d9214b5d353d0378f40e3240f94fc328eba6285e2734e95e2c6ac4127fe4edb6b9d189bf0e48253069eb868ceb68c5950d1d82a9d413d3ca435ddd3e8d178da67bd6e699a05162824ec9e6"}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) dup2(r1, r2) 06:13:58 executing program 2: r0 = dup(0xffffffffffffff9c) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000000)=0x4) r1 = socket$inet(0x10, 0x2000000000000002, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2f0000001d0005c5ffffff000d0000000200001f01000000000002c9130001000000000050800000d18e1092e0c875", 0x2f}], 0x1}, 0x0) [ 129.677347] binder: 4692:4695 transaction failed 29201/-22, size 0-8 line 3199 [ 129.689967] binder: 4690:4694 transaction failed 29201/-22, size 0-8 line 3199 [ 129.713260] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.742172] binder: undelivered TRANSACTION_ERROR: 29201 [ 129.751337] binder: 4690:4712 ioctl 81009431 200000c0 returned -22 [ 129.790041] binder: 4690:4712 got transaction with invalid offset (-4068365549594194671, min 0 max 0) or object. 06:13:58 executing program 4: syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40000) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0xc000, 0x4a) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080), 0x0) [ 129.832727] binder: 4690:4712 transaction failed 29201/-22, size 0-8 line 3199 [ 129.858248] binder: undelivered TRANSACTION_ERROR: 29201 06:13:58 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xb, 0x3, 0xd25}) inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x40000000002) fcntl$dupfd(r1, 0x0, r2) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x7417}) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) ioctl$TCFLSH(r2, 0x540b, 0x0) r4 = gettid() ptrace(0xffffffffffffffff, r4) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000001180)=""/150, 0x96}], 0x1) 06:13:58 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:58 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup\x00\x00\x00\x00\x00\xdb\x88yt\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\ah1\x03\xcfHQo\xd9`c`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x89\xd6\xa5\xd8n\xeao\xc6j\xdcl\x927\x8dI', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x410805, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 06:13:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) 06:13:58 executing program 5: r0 = getpgrp(0x0) ptrace$pokeuser(0x6, r0, 0x97, 0x3) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="084fcff8fcdf7b7759fe2e7c09333a8af236a6f1b000ee0e06a39d6b5d2723071e643192a1ba8500146738b405000000000000000000000060"], 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x20100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000180)={{0x2, 0x1, 0x7, 0x0, 0x9}, 0x7, 0x1}) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r2, 0x0, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KDENABIO(r3, 0x4b36) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="744bddd8ad219782b32cf404bffe1561b0e5f5a923b0814313277cff690be8cd70ac77026f6b0b74a997b43d10bb1da652408670c10f01d6f633e103ab197a27fe768ffc89277f842adaa5fbd8f42eb3b3820a5089dfb45a0dbc0e12532755fee33f389c27c703970e6b5e662c27e4077ac26d89e60f136412cf01dbd3c4e03c5bbab7508fbcce3f12d024190742e04e57ddabdec08af7cc7bf083199e601501e15b6a5717f04eab2601c6b76bb0e6bb5837cb7ad59662be9843b504830a653819a35b71659538d1c57cc97e6e7d80006fa2db87cd23c1466a58e27b79f022c696e7f6eca5500af32df676be1e3bd7fe0cd121695b"], 0xfffffffffffffd4c, 0x0, 0x0}) 06:13:58 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREAD(r2, &(0x7f0000000200)=ANY=[], 0x87) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000080)={0x18, 0x0, 0x3, {0x6}}, 0x18) 06:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f610500020000000543000000000000421ba3a20400ff7e280000001100ff5613d3475bb65f64000000000004000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x8001, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000180)) [ 130.022711] binder: 4726:4734 got transaction with invalid offset (0, min 0 max 0) or object. [ 130.036703] binder: 4736:4736 unknown command -656585868 06:13:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x40100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(r0, 0x0, 0x8000003) write$P9_RLOCK(r1, 0x0, 0x340) r2 = inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2) inotify_rm_watch(r1, r2) 06:13:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000280)={0x7, 0x15, 0x2}, 0x7) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf4, 0xa, 0xb, 0x200, 0x70bd25, 0x25dfdbfc, {0x3}, [@nested={0xe0, 0x7d, [@typed={0x8, 0x68, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x20, 0x57, @str='wlan1selinux^vboxnet1wlan1/\x00'}, @typed={0x8, 0x45, @pid=r3}, @generic="c543fa2e5edb97e6b9c1df7e5d653dd86df01e16e6cc825b2d06b45d985a68511904176166a2df525e4029d458168e835214d64caf207c31913db01a771ff68a9148a9e7ac28174e1779f2caa343634aa244772dd89fd4394794a60031d5c8e22fa5faf9cbff9a9103d04ab5cc9a2539ede18e6ecbf9b71c240536", @typed={0x8, 0x8d, @str='\x00'}, @typed={0x20, 0x30, @str='posix_acl_accesssystemem0&-\x00'}, @typed={0x8, 0xc, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 130.065139] binder: 4726:4734 transaction failed 29201/-22, size 0-8 line 3199 [ 130.072801] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.073242] binder: 4736:4736 ioctl c0306201 20000440 returned -22 [ 130.075432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 06:13:59 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 130.118205] binder: undelivered TRANSACTION_ERROR: 29201 06:13:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x401, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:13:59 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 130.163576] binder: 4757:4761 got transaction with invalid offset (0, min 0 max 0) or object. [ 130.189814] binder: 4757:4761 transaction failed 29201/-22, size 0-8 line 3199 [ 130.202092] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.269365] binder: 4768:4770 got transaction with invalid offset (0, min 0 max 0) or object. [ 130.278329] binder: 4768:4770 transaction failed 29201/-22, size 0-8 line 3199 [ 130.287098] binder: undelivered TRANSACTION_ERROR: 29201 06:13:59 executing program 0: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x4000, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000040)={0xb, 0x3, 0xd25}) inotify_init() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x40000000002) fcntl$dupfd(r1, 0x0, r2) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x7417}) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) ioctl$TCFLSH(r2, 0x540b, 0x0) r4 = gettid() ptrace(0xffffffffffffffff, r4) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x3}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000001180)=""/150, 0x96}], 0x1) 06:13:59 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:13:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffffa) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x38000, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/file0\x00', 0x40, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x801) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x2) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000180)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x47, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x400000) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x46100, 0x40) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000044af7961798634d487409dc0a810ea24b32b9ddab9b055182de6ec8fae5034c401094e426446031bdb58c59b8a6b2a2e076d764afeeb40eff1e1fd98f0df5028355036fae33977ee04f05f66fefd2e759383964d61dc79bb8c4f7785cf1efa4d5d6f", @ANYRES16=r6, @ANYBLOB="000226bd7000ffdbdf2501000000000000000c410000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f00000000c0)) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000440)={0x0, 0xc7, &(0x7f0000000340)="da679bde00200f0b5698d14f2aa44d2a46b1d990090186c77cb0b7c46d6039e1a01a3cdeda669627ac3f1da95b85437b37bc60e9a363420c02b122f0e86d98f30765b5c8339ade9a405b18c986f746387e71c62e3b711f28e2c9ae676e4590faa96143fce2baa4875ca6cc8bd9790e6a3ed603aadf34e78eb5207acb03cd249eab209fff5fbc387b8525f4bc290ee6b7d6dce76a2dc34a4167d2fc73322a1ad39611067bc965fa9fac92b149b1a3388279688e286b63b95ddb001be3f629f72bbe4c5189538af5"}) 06:13:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000080)=""/4096) [ 130.867323] binder: 4776:4779 got transaction with invalid offset (0, min 0 max 0) or object. [ 130.885770] binder: 4776:4779 transaction failed 29201/-22, size 0-8 line 3199 [ 130.895283] binder: undelivered TRANSACTION_ERROR: 29201 [ 130.899293] input: syz0 as /devices/virtual/input/input14 [ 131.073712] input: syz0 as /devices/virtual/input/input15 06:14:01 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:01 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cg\x00\x00up.net\x00\x01\xd5\xfc\xf9h\x8ek\x94\xc1\xf4\x03\x01\a \xee$\xabq\xf6{\xfcL\xb8[\x82\x8e\xa1\xf3_\xe3F\r\xee\xd7vW?#.`~\xce\xe8;\x84\xdb\r\xaf\x03\xa3\xad(\x8bk\xc2\xb9f\xbcc\x9a>\xc6\xcef1/\x1d)1\xfcRZ:\x86\xa8\x97\xc0=-\xb7\xa7i\x03\x01C\x18\x03\x18\xa0\f\xee\xd7\xb7[\f\xe2\x12r\x9fn\xb7\x8b\xd2\x14\xec\xcej\xc5,\x1d\xe9j\xf5j\x88\xe4\x17\x00\x7f-p\x00'/145, 0x200002, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) fchdir(r0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x400000088) fallocate(r2, 0x0, 0x0, 0x4003ff) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40100, 0x0) setsockopt$inet6_int(r1, 0x29, 0x5e, &(0x7f0000000000)=0x400000000, 0x4) lseek(r3, 0x0, 0x4) 06:14:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x2, 0x3, 0x7, 0x21, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9, 0x4, 0x4}, @sadb_key={0x5, 0x9, 0xe0, 0x0, "575cc6f5ae05c7ee79fe24d9f4de397bef7c1b2b5af83f1da987b4f3"}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x3f}, @sadb_key={0x13, 0x8, 0x458, 0x0, "c8e2f3d296143e53cec5718dd1ecc42351bbf556a19635800b2de791a1f056512929e3015bf4bfe499b3ab0666259c53b6a0b2dff54851cf71b6e589d9fa4890a8d99269340fcc0519c7909ca704c2f6422c0b3e99889b7da44218a94b3eda6b150c030a789e191f4f6dd2f5769ed98bcf4c0137948591e7509dd3099b514cea774a614324f0db55c19d74"}]}, 0x108}}, 0x2400c0c0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xfffffffffffffdc5) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r1, 0x6, &(0x7f0000000180)="bfe5be8957c9cde1752d3c9f12eb62b84c9cf440cb4019057f227d32fd1f321eee08fe3f93e0c7f8355c") quotactl(0xfffffffffffffffc, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000140)="29ab42f282c21096feae") 06:14:01 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x401, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:01 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x10, 0x4, @thr={&(0x7f0000000100)="044e4dc59b8c038db4b6377e939ac7451c452ec427bb3002848874bd2d5c6d27edb759273fb8ff6f2c6145cca3f54b57f973330c752266aa43005ab68126be6098befd51d26c98c2df8f989a1618a22c1370f3fbe157252308fdc10ddd3a8c5a890d3f18a579b0b09236406678b17cbbc0e322097e0f8f", &(0x7f0000000000)="354fe2006970931df1848390b42ed347d3b6cce6e3860859eed49e2a788d480c358a1d97860a8f68785d6a6485e9bfa8baf5e9"}}, &(0x7f0000000280)) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = dup3(r1, r1, 0x80000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001500)={@initdev, @dev, 0x0}, &(0x7f0000001540)=0xc) rt_sigtimedwait(&(0x7f00000015c0)={0xf1b}, &(0x7f0000001600), &(0x7f0000001680), 0x8) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001580)={@rand_addr, @dev={0xac, 0x14, 0x14, 0x1a}, r3}, 0xc) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1, 0x0) r4 = accept(0xffffffffffffff9c, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000240)=0x80) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f0000001440)=[{{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x3, 0x3, 0x1, 0x3, {0xa, 0x4e23, 0x100, @loopback, 0x5}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000500)="01dd18c51a468a67b368420d924c5147b25eecb4af257253760b2b752d7f7b7f9e1c565cbfb7642950c053c76932dceca26d57f7116ec5183184ac85aa012f337ec9491d7f6d32aa7b124dd0586ba510b9cf3d7002eec597434c90ca679e5b01b12aa763cf16ddb032aeca1bda35d2f20a503cfa6d0f8a79304e130a41bf1fd982a0bd04e0a2562010fcf662c791cb7a8ceaef8fa376b8baf3f28ea5f65fd81ab69ff3d6e954f066838df254628cbd89fd9a7a2c0b472dfddd2e74d755dbeb6cd4fe170aafc8ccc626ac848bab4106ad003192d4", 0xd4}, {&(0x7f0000000600)="bc62bd81c5a0c2df1f065428d44d87856787559fcb693e9dd1da34d0f8142fcfeb3b0c14ee0806ee053c0878baefa9e9fea995710038adbbb10e4dab96d48896a5074080a5dcec3867f18af096ed92d537b59547429537daa5cae7be2b144834383e0f8827c86344faa989443c617dbfae78daae1e7622067e814465d5210d22e9e1faa5e7989d88ea3f7ef7f9a004724e0b007aec378e8c125bd8695f623e423ff5fe51bf66312f452517c55e6118538ad3e6cf39c9", 0xb6}, {&(0x7f00000006c0)="d6d3732a9ca282e5b8aa120f04f4a53b6e88cc46b4c77eb57c00d0c83250e9e559ce456d8699e626a7e905a4d11e4da0ab07188abc20f361332d117440c66e085e5981a8bede9c139adc786b6f31495f9cd5d0bd4c7ce9c3f1ecda184baa51479764bf8d5a37462e217d3e8966283e0a39f5e1a24b500e622bcc526002ca1a8449a6f4c3302cfbdde566f912014c1da99cf4b30792cd4dbc6f4de63135d69050fe3d4217d029b73634977721bbb5e7415fdad9ce01d4a47ef7af6318d99fcc16fcad87cead66a01cce948985302df6075b9a09801cac74d55224083834ea", 0xde}], 0x3, &(0x7f00000007c0)=[{0x40, 0x119, 0x8000000, "2eb1342917c66793ff49c6bbf2431dd1b37c0ed7cc2731840e806b7a3bf8d5d7a820f1f297cf4dfef8067b"}, {0x20, 0x13f, 0x3f, "cb37678d519a0f0031148364"}, {0x108, 0xff, 0x6c, "e7018699469924b046375233609ff1a91c5d624b14feac0f913e40fd3aacd64a8b6474340437ddb67f92d17824c507e78b3ba8e24a9dc9bb13d1a11623b23ca4b322ede9794eeb919fa4a83ced37ef8361b0a48cfcf3218a6af1a45407f91edb2fc9a2a94989b079f01386f314f696a526118f9e56903e8bd362e05f5887c1762fd2edfdd1bfe08b0b9d6c1fc8a4081f7467767896644ab13f94c132ecdf05550630dd08b3517b16d2cae5256c52d5c53ac1203af4490d7ea1790cdf4658d912eddd48724bfea5a388718e1e373dc65af7b970558cd6a95ebd9fe29c4176571b0df512ffb9b82ff89eed1408029444dd02"}, {0x110, 0x103, 0x8, "02c6f3a0ac7279609453c5a33f1726316b1108e9366fb746639eedd06d0b808001f48c3e75c41c46fa05cdf9b75722a04335a2761a5e16d2183bb3bab4de8648c52261091fd62cf8c241c87044b2c1b8a3c063c45d43bd3ede0edddb8219a214e56eaaf5954804096f8228108efe02d661d69d6795f3acec151f930c7b9d54085f31455c8dfb64b46cc6e484b2bbca5dc8099d63c0b658d21e3e0b33ebacdd6c9f36394ceeaf133898a3747449b1ab51960d50967bfa080ec3ab566fc1c8fc04ffbbb5bd50120751924af12a7ea4f5c334c2c688b8b3ebbbde1d16caf65506a04a2eea4d3a74e1c666d6f5a8a43de742cf109249d2f1258d12"}, {0x110, 0x117, 0x3, "ec3ddd6f11a9c3aa2a9122a1392465b5d51ecf5ea7a2775bbb59a388dee123ae2ed99db37d8e138bcf71dfed77fabbf9c963e795b50eddc952cbf1bdd28c1aed3a0181c756e407929a75bdc1a9bdb05274fc181f08417b268be245b6b7a19147d1bbb5454543d825a8018bc951f447450d9c9eb1a567548381d5201f3c43d39b8274b1215720201a5770c2fb2f258083f74c4419370d96b764ad40c58d6b73ebbbd90774d845bb988df7c48b5085a88c6d28d04f60b8c5959796feb4a24fa69e076f71abc3aab70d3406e9b1db83f714b24c62772497efe8da2fb65206d6228d4988fee886d9b9afdcf65501f272c013d2f36cafdc583ffd3a405ae3d2a9"}, {0xa8, 0x0, 0x3, "c511efa4dd1ee6fb8e50c203173131e3b8f43710c41a4604ac0eae31bc3cf015c25a61fd2cfa6cff5becf534956dede4a06179d09c8d5a96fd70207ff48bc80e978281c48fabe7951d817edf836cefb6b05b043839baab84a4f3216e92809c9541c9caf96be723b29931072b6c8ba8e2c5f6150c0b4952e9d4848360baf89f6c227d382c42c0807875119dd2c8f3705cd4d50b4e4943"}, {0xc0, 0x109, 0xab0, "60017e302cd6b0181dc4b2b75498730f10679f35f353810370d459cf3aeea52594018a032543069d631e97d8ca4a19b0a33dba3bb53d703f47c72b915ed36d8cea80afcfdfc0f0093e57baa518c5e3c8a3326d91a9f960c1a280e874fbb37183f1053569b6c6526b92a7e7e5aeed34d2b8a1e21da2b04ca1d50a69c37bd4e273dc06874f09cb34c6621d781b0d2b8d50b603cc459beaa92669155cd3c3d94805b7b7df5d6a29464312"}, {0xe0, 0xa9, 0x7, "e6815b5feef02d309ae1417ea5725e1f6159c3c27f1635f8f8509b6d53d84d0bd2e173cfbba8fb9f33b237d6038405054cb2386b1816c8d669beee6ff6ffcfda6db276936429acfb03f64992ccf806f447bbdea5362bb28c1fda416e5f18a20f77fd92655e62088adcfc9affd8625ce77b00ef1fb5153cae53bbc3c645d1445d9fa7b7b8bebb3eb8f321bbdcabd3633abeac8ab5587fd4c149c281ad5277ec22ba9a99f77e179d763da5bca853f4b8161e172130100338ad0993496f389455db07bd36c41655529ff2e3f31e84"}, {0xc0, 0x119, 0xffffffffffff0001, "560498c5e2dca9dc525333aee9f632cbe922e252a8768c586dde16d6456d9bd1fe1aa3e98a60551959c2e51c34a718629971cb6bf3ab615b37445e761f2111e88f185142c0b962cc7008f47fbc064aba52b198994d454c66bed6a7642896e03f952b077390de9c02bdd3b760a4ded76deb3fb2ffa1e664f8ee315517d11963ab5ffb82cc86a48a983add4c37b6c848cee9a53bd9463c55a9a904bdd2e90beb50d211a70a22b445bb008350"}], 0x690}, 0xfffffffffffff1da}, {{&(0x7f0000000e80)=@x25={0x9, @null=' \x00'}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000480)="9a8cc92c0925efc8ab1c4ac2ad266a782420716ce2afd0a718f96bb3b6bc30cef10fb1b5cd10f22aab699f", 0x2b}, {&(0x7f0000000f00)="6ad2739baf", 0x5}], 0x2, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x4a8}, 0x5}], 0x2, 0x4004000) ptrace$setopts(0x4206, r0, 0x0, 0x0) r6 = gettid() tkill(r6, 0x1000000000016) keyctl$set_reqkey_keyring(0xe, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000014c0)='/selinux/avc/cache_stats\x00') [ 133.011932] binder: 4797:4798 ioctl 8912 20000000 returned -22 [ 133.018513] binder: 4797:4798 got transaction with invalid offset (0, min 0 max 0) or object. [ 133.029331] binder: 4797:4798 transaction failed 29201/-22, size 0-8 line 3199 06:14:02 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 133.058021] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.070389] binder: 4800:4809 got transaction with invalid offset (0, min 0 max 0) or object. [ 133.079920] binder: 4797:4798 ioctl 8912 20000000 returned -22 [ 133.080597] binder: 4800:4809 transaction failed 29201/-22, size 0-8 line 3199 [ 133.081329] binder: undelivered TRANSACTION_ERROR: 29201 06:14:02 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:02 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)="39000000100009e3f8ca1b00810800000700fd9816000011450001070000001419001a0004009b000f000200000809c99183a8a50002000000", 0x39}], 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) getpgid(r1) [ 133.109825] binder: 4797:4807 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x20, 0x0, 0x27, 0x7}) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000000c0)='/selinux/policy\x00', &(0x7f0000000140)='/selinux/policy\x00', &(0x7f0000000180)='/selinux/policy\x00', &(0x7f00000001c0)='selinux%(userproc\x00', &(0x7f0000000200)='/selinux/policy\x00', &(0x7f0000000240)='!em0eth1ppp1\x00', &(0x7f0000000280)='-,-lo]ppp0\x00', &(0x7f00000002c0)='!vmnet0}}em1\xd1selinux*md5sumcgroup)\x00', &(0x7f0000000300)=',\x00'], &(0x7f0000000400)=[&(0x7f00000003c0)='!\fvmnet1\x00'], 0x1000) r2 = gettid() setpriority(0x0, r2, 0x7fffffff) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:02 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x8000bd, @local, 0x4e24, 0x0, 'dh\x00', 0x2, 0x6, 0x4f}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x4e23, 0x12003, 0x2, 0x0, 0x100}}, 0x44) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x240000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 133.195744] binder: 4797:4807 transaction failed 29201/-22, size 0-8 line 3199 [ 133.212865] binder: 4822:4830 got transaction with invalid offset (0, min 0 max 0) or object. [ 133.232538] binder: undelivered TRANSACTION_ERROR: 29201 06:14:02 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000002000000"]], 0x0, 0x0, 0x0}) [ 133.242418] binder: 4822:4830 transaction failed 29201/-22, size 0-8 line 3199 [ 133.265332] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.287451] binder: 4833:4835 got transaction with invalid offset (8589934592, min 0 max 0) or object. [ 133.318100] binder: BINDER_SET_CONTEXT_MGR already set [ 133.319222] binder: 4833:4835 transaction failed 29201/-22, size 0-8 line 3199 [ 133.335889] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.341746] binder: 4833:4841 got transaction with invalid offset (8589934592, min 0 max 0) or object. [ 133.342907] binder: 4836:4838 ioctl 40046207 0 returned -16 [ 133.349769] binder: BINDER_SET_CONTEXT_MGR already set [ 133.349778] binder: 4836:4838 ioctl 40046207 0 returned -16 [ 133.386953] binder: release 4836:4838 transaction 85 out, still active [ 133.393747] binder: undelivered TRANSACTION_COMPLETE [ 133.399246] binder: 4833:4841 transaction failed 29201/-22, size 0-8 line 3199 [ 133.406688] binder: undelivered TRANSACTION_ERROR: 29201 06:14:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x61) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000000)) fgetxattr(r2, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f00000000c0)=""/50, 0x32) 06:14:02 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:02 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) 06:14:02 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) getpeername$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c) ftruncate(r0, 0x2081fc) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") fcntl$setstatus(r1, 0x4, 0x40400) write$FUSE_WRITE(r1, &(0x7f0000000080)={0x18}, 0x18) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000200)="dff0cc35370c3b5d8a9199d4104dbf3a6ac11162d82c00b942e18a36473f60f6709a97316de81519f9a348c75e765541c3153cdd9a931ef3881e339e954c4ca9dc4f5c035be55e8761b389bf2ab9f301bc56795226d89a53252037fef892693c459fa0795ea1cfd5b31464543511420cd5f3f36215edf9f405fbbd58db618a7dd74bb03228f078c4a4c832765dfc6646c8dd559a5a74ab59c7385fe2a8189a754bde9f", 0xa3) ioctl(r0, 0x97, &(0x7f0000000140)="4177698426557f830e466ce4ece124eb1c69d007b294f4159f44b58be735150535bc32d50a41ebda9bdc29512b78560715465036531e96ff56bd0fd0781f18d9fd95a0488aac23a500db3c8c6a5d52a3bc2e3d96dc") madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) 06:14:02 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="00290100000000000b4638778cbafcadd546e0f0366633fd70d6710403586f89dc2a224e83206a57c42a1c47f705d1c12c569144f0dd5a4b81b563cddff777d0b3de32db3cbad929c7fa54a6cd9b3c61e85133fb7128d0082ee67006bec113f7b09182580eb71568"]], 0x0, 0x0, 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 06:14:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) 06:14:02 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 133.466681] binder: 4847:4851 got transaction with invalid offset (76032, min 0 max 0) or object. [ 133.474160] binder: 4846:4854 got transaction with invalid offset (0, min 0 max 0) or object. [ 133.474236] binder: 4846:4854 transaction failed 29201/-22, size 0-8 line 3199 [ 133.492383] binder: undelivered TRANSACTION_ERROR: 29201 06:14:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x8, {0xffffffff, 0x4, 0x3, 0x1ff}}, 0x20) getsockopt$inet_tcp_int(r0, 0x6, 0x10000000000016, 0x0, &(0x7f0000000140)=0x1d1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x401, 0x3f}, {0x0, 0x6}], r2}, 0x18, 0x2) 06:14:02 executing program 4: clone(0x13102001fef, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x25) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x133}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 06:14:02 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 133.523954] binder: 4847:4851 transaction failed 29201/-22, size 0-8 line 3199 [ 133.566477] binder: undelivered TRANSACTION_ERROR: 29201 06:14:02 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x404000, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1004, &(0x7f0000000480)="0adc3f123c123f29d5ea84a15c84d9ac4ff34e319bd002002117998fb8e5b9e0dcad4c70d320473f31f0466fd541a3b4a3046f1bcc2216b339bc36db7ed0778f593a249828ad1b5231884416bd2bcb76a8693fea1f4bdc725f90d47eaf17dfc16b3391655c1c40f2a206f3d2f91af62d8cd9a0f8a6d59eff74d62a0ec54d37b4fa3bfdf2751b0e1ee7e088336b9a989e759c11c3cdf0b645a05755f0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xfffffffffffffd16, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000ffee00000000000000000000080000000000000000000000000000000000000000000000000000a4ef3db06da36782fc06ec92b8a65c7bcee4d9c7411d71ccba789833f02d6a624ee7f4255b9f6855fa16ab9776d8e15b6bc8b70385026ec1e867e63f44463157a41ef7ac5a5cd77f469b8159b80dc3a03ef73e28e8a19a2a47677c72f8", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0ade1f123c123f319bc070") r1 = gettid() waitid(0x3, r1, &(0x7f00000000c0), 0x1000000, &(0x7f0000000200)) socket$inet(0x10, 0x4, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffdf, &(0x7f0000000040), 0x1000000000000131, 0x0, 0x526}, 0xc000) truncate(&(0x7f0000000080)='./file0\x00', 0x8) timer_create(0x4, &(0x7f0000000000)={0x0, 0x2f, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r2) 06:14:02 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00') open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$security_ima(r0, &(0x7f0000000180)='security.ima\x00', &(0x7f00000002c0)=@v1={0x2, "ea"}, 0x2, 0x1) clone(0x40000, &(0x7f0000000080)="b27bfa9e4d3c55027c12a6e720c57ce9998fcd8c92ab11976628a228570f7d2186d745b225296ee0e5dc4f59f1179937f7a3ed16ecb4e4708284cfe6852fba0a", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)="a73ffc0b55359789a6551dbb6df99789814ffbdb4b6bfe325d4c363648eaa161565b20b4e3e0e1280f90a506a31dd38970403dc663d7cf7a6f58b7630cea62e63360de9a4c78ba0408f59757b97e75fdf447dbff42ed6289c2689ddfc374496bf1620d63cc97fb2bcf7cae9c038bf2f091d7167085") execve(&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0) 06:14:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000cb0000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0) ioctl$TCSETX(r1, 0x5433, &(0x7f00000013c0)={0x0, 0xffffffffffff0001, [0x0, 0x0, 0x9cc, 0x0, 0xfffffffffffffff8], 0xeb}) io_cancel(r2, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x6, 0x89f, r1, &(0x7f0000001280)="32f9e9a1bbec35f40366aa3250fb548cd39db8aa30b22efe4e2391985b39467d8f397a862bf7db33ae54a797a6d18771fa18081d86161ecbd65186f05a0d09c7e93e6ce7b0fe9e70c7a3a26b6cd70e87c5c34c8ae827418dcf8551badb7cc650723672f6ec6840dc748152c58ff1368399840fe1e2679a6b5367cbac020379d6569202ba3663b0645aed75c43a7a382c80d10a4d30ba22759af68a76dcf74da4b041410e74a40461357b7775b5af5c", 0xaf, 0xfffffffffffffffc, 0x0, 0x1, r1}, &(0x7f0000001380)) fadvise64(r1, 0x0, 0xf0, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001180)="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") getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040)) [ 133.865088] audit: type=1400 audit(1556086442.788:25): avc: denied { ioctl } for pid=4915 comm="syz-executor.2" path="socket:[18504]" dev="sockfs" ino=18504 ioctlcmd=5 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 133.867682] binder: 4912:4916 ioctl 80086601 20000140 returned -22 06:14:02 executing program 3: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:02 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="1100000000000000"]], 0x0, 0x0, 0x0}) [ 133.918598] binder: 4912:4917 ioctl 80086601 20000140 returned -22 06:14:02 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 134.001820] binder: 4928:4929 got transaction with invalid offset (17, min 0 max 0) or object. [ 134.033211] binder: 4928:4929 transaction failed 29201/-22, size 0-8 line 3199 [ 134.048963] binder: 4933:4934 got transaction with invalid offset (0, min 0 max 0) or object. [ 134.078802] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.082713] binder: 4933:4934 transaction failed 29201/-22, size 0-8 line 3199 [ 134.110850] binder: 4928:4935 got transaction with invalid offset (17, min 0 max 0) or object. [ 134.141067] binder: undelivered TRANSACTION_ERROR: 29201 [ 134.170047] binder: 4928:4935 transaction failed 29201/-22, size 0-8 line 3199 [ 134.177858] binder: undelivered TRANSACTION_ERROR: 29201 06:14:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f1f3c125c319bd070") clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000080)) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001340)='rdma.current\x00', 0x0, 0x0) getsockopt$packet_int(r2, 0x107, 0x1f, &(0x7f0000001380), &(0x7f00000013c0)=0x4) ptrace(0x10, r1) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x1000003, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000000)) 06:14:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:04 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sytun\x00\x00\x00\x00\x00\x00\x00\x00\x00d\x00'}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x100, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000040)=0x400) 06:14:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0) rt_sigqueueinfo(r1, 0x19, &(0x7f00000001c0)={0x31, 0x7fff, 0x7e}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) mmap(&(0x7f00008ed000/0x2000)=nil, 0x2000, 0xc, 0x10, 0xffffffffffffffff, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000140)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x101) 06:14:05 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/46, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x800, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x3, 0x2, 0x4, 0x6, 0xe, 0x20, 0x1, 0x4, 0xfe}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4c004) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000080)='/dev/binder#\x00', 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 136.508311] binder: 4999:5006 got transaction with invalid offset (0, min 0 max 0) or object. [ 136.515383] binder: 5005:5007 got transaction with invalid offset (0, min 0 max 0) or object. [ 136.515448] binder: 5005:5007 transaction failed 29201/-22, size 0-8 line 3199 [ 136.515924] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.545803] binder_alloc: 3360: binder_alloc_buf size 35184409837568 failed, no address space [ 136.586867] binder_alloc: allocated: 128 (num: 10 largest: 32), free: 12160 (num: 1 largest: 12160) [ 136.596663] binder: 5003:5008 transaction failed 29201/-28, size 0-35184409837568 line 3137 [ 136.596682] binder: 5012:5013 got transaction with invalid offset (0, min 0 max 0) or object. [ 136.596749] binder: 5012:5013 transaction failed 29201/-22, size 0-8 line 3199 [ 136.596832] binder: 4999:5006 transaction failed 29201/-22, size 0-8 line 3199 [ 136.629060] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.635306] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.650460] binder: undelivered TRANSACTION_ERROR: 29201 [ 136.663323] binder_alloc: 3360: binder_alloc_buf size 35184409837568 failed, no address space [ 136.679644] binder_alloc: allocated: 120 (num: 9 largest: 32), free: 12168 (num: 2 largest: 12160) [ 136.689231] binder: 5003:5022 transaction failed 29201/-28, size 0-35184409837568 line 3137 [ 136.698526] binder: undelivered TRANSACTION_ERROR: 29201 06:14:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000080)='/dev/binder#\x00', 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unlinkat(r4, &(0x7f0000000080)='./file1\x00', 0x200) write$P9_RREMOVE(r4, &(0x7f0000000180)={0x6e785e3d1cb434ee}, 0x14df) syncfs(r3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r4}) 06:14:07 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:07 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KDDISABIO(r0, 0x4b37) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x110007e) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x100}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 06:14:07 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x2c3, 0x0, 0x0}) 06:14:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8, 0x12, r1, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8e2, 0x8, 0x100000001, 0x7, 0x7ff, 0x2, 0x3e, 0x3, 0x301, 0x40, 0x3ae, 0x7ff, 0x2, 0x38, 0x1, 0x2, 0x165, 0xfff}, [{0x1, 0x4, 0x6, 0x3f, 0x2, 0xb7, 0x1fffffffc00000, 0x2}, {0x7, 0x0, 0x1, 0x40, 0xffffffffffffff80, 0x688c, 0x6}], "fee6e6717773cd16e99b49cee571affe3019d032994680baa99208eafdd6391ccdcab0d8f2ae3d868e2ae52a795707d6550321489e4b3af0f117660056600b1cb1a72dbe25054eaa863107d82c7acab510324be9f043739259c7546fb99ea268116d1639d40e62e5bc7359846d8703700d1eb0a04493286837ad10e13e2d37b4b9e8e54723df36746bd0da3ffd82bdb65359000d491463abefed23e0f19512c060bf387a73d3ef9815c7bd1569f181bf1bacfa0873306f97de03ce0614c185bb4e400d99c9571524f8b577d5d9219b303b2570225777cdaa22c22c7364491dc6adb0c951b05f4cc7250589ec199898e56adb6bc14a", [[], [], [], [], []]}, 0x6a5) [ 138.691864] binder: 5026:5031 got transaction with invalid offset (0, min 0 max 0) or object. [ 138.708101] binder: 5025:5033 got transaction with invalid offset (0, min 0 max 0) or object. [ 138.714875] binder: 5026:5031 transaction failed 29201/-22, size 0-8 line 3199 [ 138.717465] binder: undelivered TRANSACTION_ERROR: 29201 [ 138.733141] binder: 5029:5035 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000080)='/dev/binder#\x00', 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:07 executing program 2: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl(r1, 0x7ff, &(0x7f0000000080)="0adc1f123c123f319b050000000000000055e1236693d75ea363c0cef3a00b90491f1066bb574a1fee3b2a0a9a62c053ad8ac9f61708221f6e1a29441db8d790d43b1e33dc38d4e040b8cf5348d9b978a7d306211ba97508a1cc89f26aaed1831c9b6426d551543664b7bbcc34e7f24cc2a7bef5d610a98d8fd292dfb6978279330945") keyctl$chown(0x4, r0, 0x0, 0x0) 06:14:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0xc4000, 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "2bfff8adf188b9847a50be8e9b444f2f"}, 0x11, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000180)='./bus\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./bus/file0\x00', 0xc, 0x1) [ 138.757518] binder: 5029:5035 transaction failed 29201/-22, size 0-8 line 3199 [ 138.803388] binder: 5025:5033 transaction failed 29201/-22, size 0-8 line 3199 [ 138.828499] binder: undelivered TRANSACTION_ERROR: 29201 06:14:07 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000001340)="d79351ea19934eb768cd1eb3f908fc7927dd5d7f29ea8867181d30ab7c777e7f6bd483a3a69503643e8781f71464", 0x2e, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="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", 0x1000, r1) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1f, 0x0, &(0x7f0000000200)=0xffffffffffffffa1) write$binfmt_misc(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="73797a303fb728c37ae7b7a8be42bf34949931afc2de50e1b7f6eea8403f70aa8a6a75ab7da205da8115c6723580a0f7c721b8e8c92006ffede5691c624be5a033da2f0b9a4fc6afd7115fb61367ccd581ea5461253efa00c31dcbb17d47a3882fa96fef220a2f1eadc334c67792eb3417bbe4f418e48206d8e5f3189bf7585dec7d4874d6cd3a464b1622fe53c2bde0e7aa2aaa1f8466ae254c0639badf400000000000000073c668d94a3ca1ba961c494ab04c8790a278bef97756c5dc41a3f4190bf33c0539e1869ff308beb085f5580256fcde9211850f"], 0x3da) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @rand_addr, @multicast1}, &(0x7f00000000c0)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={r3, @remote, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x2f1) lsetxattr$security_selinux(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)='security.selinux\x00', &(0x7f0000001400)='system_u:object_r:inetd_child_exec_t:s0\x00', 0x28, 0x1) 06:14:07 executing program 2: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x3d3427e) clone(0x1000140, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x1015, 0x4, 0x101, "ca089e9601ded965079b902d05b12f8e", "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"}, 0x1015, 0x0) r1 = gettid() mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") tkill(r1, 0x10) 06:14:07 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{}, {0x20000000304, @local}, 0x0, {0x2, 0x0, @empty}, 'lapb0\x00'}) rt_sigreturn() [ 138.845471] binder: 5045:5050 got transaction with invalid offset (0, min 0 max 0) or object. [ 138.856901] binder: 5025:5033 ioctl c0306201 20000440 returned -14 [ 138.871750] binder: 5045:5050 transaction failed 29201/-22, size 0-8 line 3199 [ 138.887654] binder: undelivered TRANSACTION_ERROR: 29201 06:14:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000080)='/dev/binder#\x00', 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 138.907191] binder: undelivered TRANSACTION_ERROR: 29201 [ 138.918252] binder: 5025:5056 got transaction with invalid offset (0, min 0 max 0) or object. [ 138.949726] binder: 5055:5059 got transaction with invalid offset (0, min 0 max 0) or object. [ 138.971578] binder: 5064:5067 got transaction with invalid offset (0, min 0 max 0) or object. [ 138.972320] binder: 5025:5056 transaction failed 29201/-22, size 0-8 line 3199 [ 138.972344] binder: 5025:5056 ioctl c0306201 20000440 returned -14 [ 138.972414] binder: undelivered TRANSACTION_ERROR: 29201 06:14:07 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x8) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x100, 0x0) getpeername$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") 06:14:07 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:07 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'\x04\x00\x00\x00\x00\\i\xb6,\x02\x00?\x00', 0x600}) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 138.975526] binder: 5055:5059 transaction failed 29201/-22, size 0-8 line 3199 [ 138.976347] binder: undelivered TRANSACTION_ERROR: 29201 06:14:08 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 139.078682] binder: 5073:5076 got transaction with invalid offset (0, min 0 max 0) or object. [ 139.102642] binder: 5073:5076 transaction failed 29201/-22, size 0-8 line 3199 [ 139.120824] binder: undelivered TRANSACTION_ERROR: 29201 06:14:08 executing program 5: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x7ff) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_smack_entry(r0, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='/dev/binder#\x00', 0xd, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000140)={0x7, 0x1b, 0x2}, 0x7) dup2(r1, r0) 06:14:08 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000080)={{0x3a, @local, 0x4e22, 0x3, 'none\x00', 0x2, 0xffffffff, 0x73}, {@loopback, 0x4e24, 0x10000, 0x5, 0x7, 0xfffffffffffffff7}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 139.153080] binder: 5064:5067 transaction failed 29201/-22, size 0-8 line 3199 06:14:08 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000080)='/dev/binder#\x00', 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 139.211432] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.222996] binder: 5087:5090 got transaction with invalid offset (0, min 0 max 0) or object. [ 139.242555] binder: 5087:5090 transaction failed 29201/-22, size 0-8 line 3199 06:14:08 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'\x04\x00\x00\x00\x00\\i\xb6,\x02\x00?\x00', 0x600}) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) [ 139.256259] binder: 5091:5094 transaction failed 29189/-22, size 0-8 line 3014 [ 139.272088] binder: undelivered TRANSACTION_ERROR: 29189 [ 139.301404] binder: 5091:5094 transaction failed 29189/-22, size 0-8 line 3014 [ 139.311039] binder: undelivered TRANSACTION_ERROR: 29201 [ 139.317974] binder: 5099:5104 got transaction with invalid offset (0, min 0 max 0) or object. [ 139.333816] binder: undelivered TRANSACTION_ERROR: 29189 [ 139.363210] binder: 5099:5104 transaction failed 29201/-22, size 0-8 line 3199 [ 139.392552] binder: undelivered TRANSACTION_ERROR: 29201 06:14:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f00000002c0)=[{0x2, 0x0, 0x0, 0x7ff}]}, 0x10) write$P9_RGETLOCK(r1, &(0x7f0000000000)={0x29, 0x37, 0x1, {0x1, 0x3, 0x7d, r2, 0xb, 'vmnet0lo{\'.'}}, 0x29) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) tkill(r2, 0x6) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) fcntl$setstatus(r1, 0x4, 0x42806) 06:14:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x1f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) write$P9_RATTACH(r1, &(0x7f0000000140)={0x14, 0x69, 0x2, {0x0, 0x2, 0x2}}, 0x14) ioctl$void(r2, 0xc0045878) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:10 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:10 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={[], [], @remote}, 0x3, 0x0, 0x2, 0x0, 0x4, 0x6}, 0x20) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:10 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000080)='/dev/binder#\x00', 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:10 executing program 0: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x100000000}) clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x2, 0x0, 0x7) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0x70d000) [ 141.938349] binder: 5114:5118 got transaction with invalid offset (0, min 0 max 0) or object. [ 141.950213] binder: 5117:5120 got transaction with invalid offset (0, min 0 max 0) or object. [ 141.955240] binder: 5113:5121 got transaction with invalid offset (0, min 0 max 0) or object. [ 141.955303] binder: 5113:5121 transaction failed 29201/-22, size 0-8 line 3199 [ 141.955699] binder: undelivered TRANSACTION_ERROR: 29201 06:14:10 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x400, 0x1f, 0x100000001}) creat(&(0x7f0000000240)='./file0\x00', 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000200)) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/206) [ 141.981279] binder: 5115:5119 got transaction with invalid offset (0, min 0 max 0) or object. [ 142.002793] binder: 5114:5118 transaction failed 29201/-22, size 0-8 line 3199 [ 142.028631] binder: 5115:5119 transaction failed 29201/-22, size 0-8 line 3199 06:14:10 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00', &(0x7f00000000c0)='/selinux/policy\x00', 0x10, 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 142.039335] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.069664] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.086504] binder: 5134:5136 got transaction with invalid offset (0, min 0 max 0) or object. [ 142.102361] binder: 5115:5138 got transaction with invalid offset (0, min 0 max 0) or object. [ 142.110138] binder: 5117:5120 transaction failed 29201/-22, size 0-8 line 3199 [ 142.118613] binder: undelivered TRANSACTION_ERROR: 29201 06:14:11 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:11 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r0, 0x5, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0180000000000000"]], 0x0, 0x0, 0x0}) [ 142.133153] binder: 5134:5136 transaction failed 29201/-22, size 0-8 line 3199 [ 142.140041] binder: 5115:5138 transaction failed 29201/-22, size 0-8 line 3199 [ 142.140481] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.202792] binder: 5148:5153 ioctl 5 200000c0 returned -22 [ 142.208871] binder: 5151:5155 got transaction with invalid offset (0, min 0 max 0) or object. [ 142.231328] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.237588] binder: 5148:5153 got transaction with invalid offset (32769, min 0 max 0) or object. [ 142.254601] binder: 5151:5155 transaction failed 29201/-22, size 0-8 line 3199 [ 142.277702] binder: 5148:5153 transaction failed 29201/-22, size 0-8 line 3199 [ 142.288328] binder: undelivered TRANSACTION_ERROR: 29201 [ 142.299555] binder: undelivered TRANSACTION_ERROR: 29201 06:14:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clock_nanosleep(0x0, 0x0, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) 06:14:11 executing program 1: timerfd_create(0x9, 0x80000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40, 0x1, 0x4}, 0x8}}, 0x18) 06:14:11 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:11 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) ptrace$setregs(0xf, r0, 0x7, &(0x7f0000000000)="3291bfac90d938b0f5f613d01c2a4d91c7f1431b4f1c1272e678731493cb6b863e24f3be29c116f284cd62b0c5a3d30b43127240d5ba0b45c0ef6739abb267815819425df5ecd03bdad92a31c149bb22b3b7d98077fb7184ab4903841dc88354c52f01f5521d99dbfd28f4381d2f2829117bfd8c55f53008030263d42d791851717cf4bdef311d3d0777fe48") write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="44aba087c98087ba4e0e42bd7148c5e4a489130e63e8f8009fcaee89b2b477b05062618eefc1765589e493bd8e021668e78776913403992e38"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x20, r0, 0x8000, 0x8000) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 06:14:11 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:11 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x80000, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000addd53ea0000000000000000000000000000000800"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 142.316122] binder: 5148:5160 ioctl 5 200000c0 returned -22 06:14:11 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 142.367868] binder: 5165:5166 got transaction with invalid offset (0, min 0 max 0) or object. [ 142.382658] binder: 5167:5169 transaction failed 29189/-22, size 0-8 line 3014 [ 142.389351] binder: 5171:5174 got transaction with invalid offset (0, min 0 max 0) or object. [ 142.389416] binder: 5171:5174 transaction failed 29201/-22, size 0-8 line 3199 [ 142.408302] binder: undelivered TRANSACTION_ERROR: 29201 06:14:11 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'lapb0\x00', @broadcast}) r3 = accept(r1, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000780), 0x1a6, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000140)={&(0x7f00000000c0)=@xdp, 0x80, 0x0}, 0x0) 06:14:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42081, 0x80) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x100, 0x2bc}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") seccomp(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) r5 = getgid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) r8 = getegid() r9 = getpgrp(0x0) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) getgroups(0xa, &(0x7f0000000740)=[0xee01, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) r15 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000880)=0xe8) r17 = getgid() ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000b00)=@get={0x1, &(0x7f0000000a40)=""/154, 0x9}) sendmsg$netlink(r1, &(0x7f0000000a00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000140)={0x68, 0x2f, 0xb00, 0x70bd2b, 0x25dfdbfb, "", [@generic="fda3298c7ad69b25541ed722a920e1c92f25acb9f4d8a3bfef71c7206c4fe0ca7c4250174da91d634e1b20d0a46a74acd40b2e5c634ca563a9552f8c9c98a17f72095f5c7e0883c1d73a15c8f8de70ba35d4c3e2f9"]}, 0x68}], 0x1, &(0x7f00000008c0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r0, r2, r1, r2]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x10}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r1, r0, r2, r2]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0x130}, 0x0) [ 142.425235] binder: 5165:5166 transaction failed 29201/-22, size 0-8 line 3199 [ 142.434830] binder: 5180:5182 got transaction with invalid offset (0, min 0 max 0) or object. [ 142.451089] binder: 5180:5182 transaction failed 29201/-22, size 0-8 line 3199 [ 142.460231] binder: undelivered TRANSACTION_ERROR: 29201 06:14:11 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f00004ed000/0xe000)=nil, 0xe000, 0x0, 0x4810, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:11 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 142.473368] binder: undelivered TRANSACTION_ERROR: 29189 [ 142.478909] binder: undelivered TRANSACTION_ERROR: 29201 06:14:11 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x100000890e, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)='/dev/binder#\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:11 executing program 0: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0xffffffffffffffff) close(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unshare(0x40600) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000880)='sysfs\x00^\x04\xdc:\x00\xc2\xa4\xd8j\xd8~*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9b^\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\x01\"\xc8U0%\xa2X9\\\x92QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5B@5CZ=\xbbv\xc5}0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r0, r1, 0x80000) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000000)={0x100000001, 0x9, 0x7, 0x1}) mlock2(&(0x7f00004c8000/0x2000)=nil, 0x2000, 0x1) getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000140)) r4 = geteuid() r5 = geteuid() fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000200)=[0xee01, 0xee00, 0xee01, 0x0]) r8 = getgid() r9 = getgid() fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x7}, [{0x2, 0x0, r3}, {0x2, 0x3, r4}, {0x2, 0x1, r5}], {0x4, 0x2}, [{0x8, 0x7, r6}, {0x8, 0x1, r7}, {0x8, 0x4, r8}, {0x8, 0x7, r9}], {}, {0x20, 0x1}}, 0x5c, 0x3) 06:14:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, {0x6, @remote}, 0x48, {0x2, 0x4e20, @local}, 'ifb0\x00'}) open(&(0x7f0000000100)='./file0\x00', 0x48000, 0x4) splice(r0, &(0x7f0000000080), r2, &(0x7f00000000c0), 0x2, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ff624040000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:11 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 142.783090] binder: undelivered TRANSACTION_ERROR: 29201 06:14:11 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 142.839341] binder: 5235:5238 got transaction with invalid offset (0, min 0 max 0) or object. [ 142.842757] binder: 5233:5237 unknown command 1077961471 [ 142.842766] binder: 5233:5237 ioctl c0306201 20000440 returned -22 06:14:11 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00^\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) 06:14:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x6, 0x7}) ioctl$TCSBRKP(r0, 0x5425, 0x1) 06:14:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x14) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x9) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 06:14:11 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 142.951303] binder: 5249:5250 got transaction with invalid offset (6160384, min 0 max 0) or object. [ 142.971955] binder: 5235:5238 transaction failed 29201/-22, size 0-8 line 3199 06:14:11 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:11 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000002400000000a21443f9cf4000"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 143.006579] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.008143] binder: 5249:5250 transaction failed 29201/-22, size 0-8 line 3199 06:14:12 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:12 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80, 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") prctl$PR_GET_PDEATHSIG(0x25, &(0x7f00000024c0)) [ 143.065902] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.087288] binder: 5263:5268 got transaction with invalid offset (0, min 0 max 0) or object. [ 143.135612] binder: release 5270:5273 transaction 133 out, still active [ 143.149185] binder: 5263:5268 transaction failed 29201/-22, size 0-8 line 3199 [ 143.156455] binder: undelivered TRANSACTION_COMPLETE 06:14:12 executing program 2: syslog(0x1, &(0x7f0000000000)=""/87, 0x57) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x8) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x2f, &(0x7f0000000200)={@local, @dev, @loopback}, &(0x7f0000000240)=0xc) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000280)={0x1, 0x5}, 0x8) times(&(0x7f00000002c0)) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0x5d, 0x1}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000380)) r4 = request_key(&(0x7f00000003c0)='id_resolver\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='cgroup.procs\x00', 0xfffffffffffffffc) keyctl$describe(0x6, r4, &(0x7f0000000480)=""/243, 0xf3) ioctl(r1, 0x83, &(0x7f0000000580)="10b664ec76fbed") keyctl$describe(0x6, r4, &(0x7f00000005c0)=""/125, 0x7d) sendto$inet(r2, &(0x7f0000000640)="136e87df14db2cd12feaebb3c5088f3e54ce7b5468e425b43dc5720b8290223efa9c01590052e7d06139930eccc2b48e3a3fb1e2343140c722f8facc13c50f880c5af589904dea075119034b4dc097c701c492aeba7c071ca927cad15a1224da1e8d6ac1a850d7e03851cb", 0x6b, 0x40, &(0x7f00000006c0)={0x2, 0x4e24, @multicast2}, 0x10) lgetxattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'os2.', '])system@wlan0cgroupucpuset\\\x00'}, &(0x7f0000000780)=""/128, 0x80) r5 = openat$cgroup_procs(r2, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000840)={r2, 0x0, 0x80000001, 0x3, 0x4000}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000880)={{0x3, 0x1, 0xff, 0x0, 0x100}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f00000008c0)=0x400, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000900)=0x4, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb0, r6, 0x401, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004840}, 0x4001) add_key$keyring(&(0x7f0000000b00)='keyring\x00', &(0x7f0000000b40)={'syz', 0x1}, 0x0, 0x0, r4) connect$unix(r0, &(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e24}, 0x6e) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000c00)={'ipvs\x00'}, &(0x7f0000000c40)=0x1e) 06:14:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000140)={0x7fff, 0xfff, 0x1ff, 0x0, 0x10, 0x7, 0x81, 0x6, 0x200, 0x2}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f00000001c0)=""/89) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x7) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:12 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:12 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) 06:14:12 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='de\xdeg\xcdAs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 06:14:12 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.188342] binder: release 5270:5278 transaction 134 out, still active [ 143.199530] binder: undelivered TRANSACTION_COMPLETE [ 143.212068] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.235565] binder: 5282:5285 got transaction with invalid offsets ptr 06:14:12 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.275874] binder: 5289:5297 got transaction with invalid offset (0, min 0 max 0) or object. [ 143.291854] binder: 5282:5285 transaction failed 29201/-14, size 0-8 line 3164 06:14:12 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp\x00') sendfile(r0, r0, &(0x7f0000000040)=0x2000004d, 0x74c8) 06:14:12 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.335619] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.342006] binder: 5289:5297 transaction failed 29201/-22, size 0-8 line 3199 [ 143.355784] binder: 5282:5300 got transaction with invalid offsets ptr 06:14:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x204}, 0xc) pread64(r1, &(0x7f0000000140)=""/63, 0x3f, 0x0) write$P9_RWALK(r1, &(0x7f0000000180)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x2}, 0x7) 06:14:12 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='de\xdeg\xcdAs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 06:14:12 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:12 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.384142] binder: 5282:5300 transaction failed 29201/-14, size 0-8 line 3164 [ 143.391612] binder: undelivered TRANSACTION_ERROR: 29201 06:14:12 executing program 2: prctl$PR_SET_DUMPABLE(0x4, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x100) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x8000000000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) ptrace$poke(0x5, r3, &(0x7f0000000240), 0x7fffffff) fcntl$setstatus(r2, 0x4, 0x60ff) r4 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x16, &(0x7f0000000100)) ptrace(0x10, r6) ptrace$cont(0x420b, r6, 0x8, 0x2000000000000) r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0xfffffffffffffffe) sendfile(r5, r7, 0x0, 0x20008) sendfile(r1, r4, 0x0, 0x80e8) 06:14:12 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.464294] binder: undelivered TRANSACTION_ERROR: 29201 06:14:12 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.506158] binder: 5321:5323 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:12 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) 06:14:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) prctl$PR_GET_SECUREBITS(0x1b) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/14]) socket$netlink(0x10, 0x3, 0x7) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x80) [ 143.551738] binder: 5321:5323 transaction failed 29201/-22, size 0-8 line 3199 [ 143.585846] binder: 5334:5337 got transaction with invalid offset (0, min 0 max 0) or object. [ 143.594723] binder: 5340:5342 got transaction with invalid offsets ptr 06:14:12 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'nlmon0\x00', 0x0}) connect$packet(r0, &(0x7f0000000140)={0x11, 0x11, r2, 0x1, 0x101, 0x6, @broadcast}, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback, 0x1, 0x5, [@empty, @multicast2, @empty, @remote, @loopback]}, 0x24) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000180)) 06:14:12 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:12 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.609597] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.621419] binder: 5334:5337 transaction failed 29201/-22, size 0-8 line 3199 06:14:12 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000f4b098783c7f6036719c2700000000000000080001000000000000000000000000001ae73f869673a70c3b4b9ea645bd62a1ef54d9900507ff81e4a20000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:12 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.677947] binder: 5340:5342 transaction failed 29201/-14, size 0-8 line 3164 [ 143.685426] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.685934] binder: 5348:5354 got transaction with invalid offset (0, min 0 max 0) or object. [ 143.686005] binder: 5348:5354 transaction failed 29201/-22, size 0-8 line 3199 06:14:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) bind(r0, &(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x2, 0x4, 0x7, 0x200000000, "d22494a11192eab34ea0440a45b85f018add37f7389d19484d8be6f2a8ae9a04caadde6571e87fe89fc9972d15ea2d342b2cf325046e8e3974ca0802e7f1ab", 0x1b}, 0x80) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x27b}, 0x4) [ 143.734948] binder: 5350:5356 got transaction with invalid offset (0, min 0 max 0) or object. [ 143.751610] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.762778] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.770006] binder: 5362:5363 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:12 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) [ 143.789686] binder_alloc: 3360: binder_alloc_buf size 6953342839003374904 failed, no address space 06:14:12 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = getpid() r3 = fcntl$getown(r0, 0x9) tgkill(r2, r3, 0x22) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2010}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) io_setup(0x4, &(0x7f00000000c0)=0x0) io_cancel(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x100000000, r0, &(0x7f0000000100)="b4130d1027640d92031839e812d4598b7bf229b614ae0eb575d4a6d95789dbdc2af42862fe074ec4", 0x28, 0x20, 0x0, 0x1, r1}, &(0x7f0000000180)) [ 143.837132] binder_alloc: allocated: 152 (num: 13 largest: 32), free: 12136 (num: 1 largest: 12136) [ 143.869718] binder: 5360:5365 transaction failed 29201/-28, size 6953342838338810880-664564022 line 3137 [ 143.869746] binder: 5362:5363 transaction failed 29201/-22, size 0-8 line 3199 06:14:12 executing program 0: mlock(&(0x7f0000222000/0x1000)=nil, 0x1000) mmap(&(0x7f00002c8000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f000035d000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000759000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000779000/0x2000)=nil, 0x2000, 0x0, 0x1132, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) mmap(&(0x7f0000a97000/0x1000)=nil, 0x1000, 0x0, 0x1000000000002032, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0) removexattr(0x0, 0x0) socket(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 06:14:12 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.869840] binder: 5369:5370 got transaction with invalid offsets ptr [ 143.869903] binder: 5369:5370 transaction failed 29201/-14, size 0-8 line 3164 [ 143.893809] binder: 5373:5377 got transaction with invalid offset (0, min 0 max 0) or object. [ 143.893869] binder: 5373:5377 transaction failed 29201/-22, size 0-8 line 3199 [ 143.918209] binder: 5350:5356 transaction failed 29201/-22, size 0-8 line 3199 [ 143.925658] binder: undelivered TRANSACTION_ERROR: 29201 06:14:12 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) 06:14:12 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 143.933972] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.949129] binder: undelivered TRANSACTION_ERROR: 29201 [ 143.971650] binder: 5381:5383 got transaction with invalid offset (0, min 0 max 0) or object. [ 143.975878] binder: undelivered TRANSACTION_ERROR: 29201 06:14:12 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) open(&(0x7f0000000080)='./file0\x00', 0x18040, 0x2) [ 144.010513] binder: 5388:5389 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.027961] binder: 5381:5383 transaction failed 29201/-22, size 0-8 line 3199 [ 144.037082] binder: 5390:5394 got transaction with invalid offsets ptr [ 144.044158] binder: 5388:5389 transaction failed 29201/-22, size 0-8 line 3199 [ 144.052781] binder: undelivered TRANSACTION_ERROR: 29201 06:14:13 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 144.058084] binder: 5390:5394 transaction failed 29201/-14, size 0-8 line 3164 [ 144.080269] binder_alloc: 3360: binder_alloc_buf size 6953342839003374904 failed, no address space 06:14:13 executing program 5: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x185000, 0x100) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) r1 = epoll_create(0xfea) fstat(r1, &(0x7f0000000040)) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 144.125930] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.134756] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.139716] binder_alloc: allocated: 136 (num: 11 largest: 32), free: 12152 (num: 1 largest: 12152) [ 144.139792] binder: 5360:5397 transaction failed 29201/-28, size 6953342838338810880-664564022 line 3137 [ 144.159924] binder: 5406:5407 got transaction with invalid offsets ptr [ 144.166667] binder: 5406:5407 transaction failed 29201/-14, size 0-8 line 3164 06:14:13 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:13 executing program 1: r0 = dup(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 144.191731] binder: 5409:5410 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.210609] binder: 5412:5414 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.226381] binder: 5409:5410 transaction failed 29201/-22, size 0-8 line 3199 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$notify(r0, 0x402, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2a000, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 144.243515] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.253885] binder: 5412:5414 transaction failed 29201/-22, size 0-8 line 3199 [ 144.269942] binder: undelivered TRANSACTION_ERROR: 29201 06:14:13 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)) 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 144.302703] binder: 5418:5424 got transaction with invalid offsets ptr [ 144.309666] binder: undelivered TRANSACTION_ERROR: 29201 06:14:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) msync(&(0x7f0000a33000/0x1000)=nil, 0x1000, 0x2) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:13 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 144.358949] binder: 5418:5424 transaction failed 29201/-14, size 0-8 line 3164 [ 144.373582] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.385925] binder: 5430:5434 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.387945] binder: 5431:5433 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:13 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:14:13 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 144.387983] binder: 5431:5433 transaction failed 29201/-22, size 0-8 line 3199 [ 144.418023] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.443274] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.475457] binder: 5445:5449 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.486877] binder: 5443:5446 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.503542] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.512934] binder: 5452:5455 got transaction with invalid offsets ptr 06:14:13 executing program 0: clone(0x210007d9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0xc007e, 0x0) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() read(r0, &(0x7f0000000240)=""/4096, 0x1000) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x17) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, r1) 06:14:13 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0xfffffffffffffffa) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x2c62, 0x4) 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 144.518933] binder: 5445:5449 transaction failed 29201/-22, size 0-8 line 3199 [ 144.521596] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.522636] binder: 5443:5446 transaction failed 29201/-22, size 0-8 line 3199 [ 144.523369] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.546926] binder: 5430:5434 transaction failed 29201/-22, size 0-8 line 3199 [ 144.556639] binder: 5448:5453 ioctl c0306201 0 returned -14 [ 144.614466] binder: 5457:5461 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.639609] binder: 5465:5468 ioctl c0306201 0 returned -14 06:14:13 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008910, &(0x7f0000000080)="0adc1f123c123f0000d0705a00117abcaaae3452247d66b837c51c090ec3432fc169be39a8c6ba0e426c320a5fcf7ca2640584407e6c1432cefad2f495968c17c49c2b2e7bceabcdd9fc3090e55cc4c23ce35469656cac7d234fd7f434821ed7649eb0f72c7c8eb0fc3ee4bcc64bd3e0b0f8f619fe4204f00ebd3d370caadabb81747852fd72dc23df084a2aaad1d306fb6d6418958be57ead169ea4c36236c51279d62b43588b8c70c7b0c7df556c4b9ce0649ded91fc") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:14:13 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) [ 144.660580] binder: 5452:5455 transaction failed 29201/-14, size 0-8 line 3164 [ 144.665993] binder: 5457:5461 transaction failed 29201/-22, size 0-8 line 3199 [ 144.671544] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.671604] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.751135] binder: 5483:5485 ioctl c0306201 0 returned -14 [ 144.764058] binder: 5480:5489 ioctl 8910 20000080 returned -22 [ 144.771943] binder: 5477:5488 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.786276] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.797730] binder: 5486:5490 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.802573] binder: 5480:5489 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.802637] binder: 5480:5489 transaction failed 29201/-22, size 0-8 line 3199 [ 144.802913] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.812416] binder: 5480:5489 ioctl 8910 20000080 returned -22 [ 144.812579] binder: 5480:5493 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.812642] binder: 5480:5493 transaction failed 29201/-22, size 0-8 line 3199 06:14:13 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:14:13 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xac17302d2c4728a1, 0x10, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 06:14:13 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040e80000000000000000000000000000000000000000000000000000000000d1b339a1d40f28ee4c0a9f17c65cb7c8000000000000000ba8f16e9522aea800"/76, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:13 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:13 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 144.813095] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.861645] binder: 5477:5488 transaction failed 29201/-22, size 0-8 line 3199 [ 144.874393] binder: 5486:5490 transaction failed 29201/-22, size 0-8 line 3199 [ 144.892039] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.908410] binder: 5498:5500 got transaction to invalid handle [ 144.918204] binder: 5498:5500 transaction failed 29201/-22, size 742229894440984889-220689861056415 line 3014 [ 144.918471] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.936047] binder: 5501:5502 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 144.959726] binder: 5503:5508 got transaction with invalid offset (0, min 0 max 0) or object. [ 144.973115] binder: 5501:5502 transaction failed 29201/-22, size 0-8 line 3199 [ 144.973151] binder: 5504:5510 got transaction with invalid offsets ptr [ 144.973270] binder: 5504:5510 transaction failed 29201/-14, size 0-8 line 3164 [ 145.001405] binder: undelivered TRANSACTION_ERROR: 29201 06:14:13 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:13 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 145.013943] binder: 5503:5508 transaction failed 29201/-22, size 0-8 line 3199 [ 145.032091] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.041308] binder: 5498:5517 got transaction to invalid handle [ 145.057750] binder: undelivered TRANSACTION_ERROR: 29201 06:14:14 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x101010, r1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0xfd, @empty, 0x4}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x4, 0x3, 0x0, 0x5, 0x200, 0x9}, &(0x7f0000000100)=0x20) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 145.066303] binder: 5498:5517 transaction failed 29201/-22, size 742229894440984889-220689861056415 line 3014 [ 145.093331] binder: undelivered TRANSACTION_ERROR: 29201 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:14:14 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 145.120681] binder: 5518:5519 got transaction with invalid offsets ptr [ 145.132098] binder: 5523:5525 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.141598] binder: undelivered TRANSACTION_ERROR: 29201 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:14:14 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 145.173891] binder: 5523:5525 transaction failed 29201/-22, size 0-8 line 3199 [ 145.194545] binder: 5524:5534 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.199161] binder: 5518:5519 transaction failed 29201/-14, size 0-8 line 3164 [ 145.211480] binder: undelivered TRANSACTION_ERROR: 29201 06:14:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000080)) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 06:14:14 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 145.236367] binder: 5533:5536 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.251226] binder: undelivered TRANSACTION_ERROR: 29201 06:14:14 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 145.280591] binder: 5533:5536 transaction failed 29201/-22, size 0-8 line 3199 [ 145.283631] binder: 5540:5542 got transaction with invalid offsets ptr [ 145.283955] binder: 5540:5542 transaction failed 29201/-14, size 0-8 line 3164 [ 145.310574] binder: undelivered TRANSACTION_ERROR: 29201 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) [ 145.328605] binder: 5547:5549 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.342208] binder: 5524:5534 transaction failed 29201/-22, size 0-8 line 3199 [ 145.362703] binder: 5551:5554 got transaction with invalid offsets ptr 06:14:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x2d) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) socket$inet_tcp(0x2, 0x1, 0x0) [ 145.376166] binder: undelivered TRANSACTION_ERROR: 29201 06:14:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x40000, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000240)={0x80000000, 0xc, 0x7}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x320, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4015) ioctl$TCSETAF(r1, 0x402c542d, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff}) 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 145.406040] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.409579] binder: 5547:5549 transaction failed 29201/-22, size 0-8 line 3199 06:14:14 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 145.449961] binder: 5551:5554 transaction failed 29201/-14, size 0-8 line 3164 [ 145.460190] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.484943] binder: release 5562:5566 transaction 177 out, still active 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) [ 145.495034] binder: 5568:5570 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:14 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 145.528446] binder: 5571:5575 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.548110] binder: undelivered TRANSACTION_COMPLETE [ 145.564734] binder: 5568:5570 transaction failed 29201/-22, size 0-8 line 3199 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:14 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 145.576010] binder: release 5578:5580 transaction 180 out, still active [ 145.586549] binder: 5571:5575 transaction failed 29201/-22, size 0-8 line 3199 [ 145.601720] binder: undelivered TRANSACTION_COMPLETE 06:14:14 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 145.642959] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.650453] binder: 5571:5590 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.674073] binder: 5588:5594 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.684037] binder: release 5584:5592 transaction 182 out, still active 06:14:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000008, 0x1f, r1, 0xffffffffffffffff) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 145.714561] binder: 5571:5590 transaction failed 29201/-22, size 0-8 line 3199 [ 145.725158] binder: 5588:5594 transaction failed 29201/-22, size 0-8 line 3199 [ 145.743666] binder: 5597:5600 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.753073] binder: undelivered TRANSACTION_COMPLETE 06:14:14 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000ca9a1df4cfdb879b71e1c1c220f4b87da448"]], 0x0, 0x0, 0x0}) 06:14:14 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:14 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 145.771373] binder: release 5599:5601 transaction 185 out, still active [ 145.796788] binder: 5597:5600 transaction failed 29201/-22, size 0-8 line 3199 [ 145.837737] binder: undelivered TRANSACTION_COMPLETE 06:14:14 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000d61000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x80) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x21, 0x21, 0x16, 0x1d, 0x0, 0x6120, 0x3, 0x4a}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0xfe52) 06:14:14 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:14 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 145.861092] binder: 5615:5616 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.888217] binder: undelivered TRANSACTION_ERROR: 29201 06:14:14 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 145.935588] binder: 5618:5622 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.945832] binder: release 5607:5609 transaction 186 out, still active [ 145.956609] binder: 5626:5628 got transaction with invalid offset (0, min 0 max 0) or object. [ 145.960035] binder: 5615:5616 transaction failed 29201/-22, size 0-8 line 3199 06:14:14 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000200)=""/10, 0xa) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x100) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="8038df56d8a5a01848b72bdcd5dd7004c4f38e672433cc83"]], 0x0, 0x0, 0x0}) [ 145.982232] binder: undelivered TRANSACTION_COMPLETE [ 145.988653] binder: 5618:5622 transaction failed 29201/-22, size 0-8 line 3199 06:14:14 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x20202, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x6, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 146.029474] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.051036] binder: 5633:5638 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.065518] binder: undelivered TRANSACTION_ERROR: 29201 06:14:15 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:15 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:15 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x400100, 0x2a) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x5, 0xffff, 0x5}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl(r0, 0x3, &(0x7f0000000100)="b0621e21a8dd71c5cd5cfdbb241f0768ae7a1444e0b3001730a483ab2281dd4bd73a714b8e63bf833635a706f0af07de19df2c2bef3f70ec407b129a0d23f9fbe57e81b8a255fc67094a79bae9040f9b3464a79a2d112a754cc964692fc7715803f02f608e6183980b18b1604424f061d7369f3e529405f6d210f2fb22bbe0bb95e6229036aee8d9ec83e93566e017383d9ddd74d8bd2e4791cf2ffeb6b01a0e6b55231674fe937b10bce325f81baa07d42a2c988d30091a") [ 146.070710] binder: 5637:5640 got transaction with invalid offset (1774600601772963968, min 0 max 0) or object. [ 146.070759] binder: 5637:5640 transaction failed 29201/-22, size 0-8 line 3199 [ 146.097794] binder: 5626:5628 transaction failed 29201/-22, size 0-8 line 3199 [ 146.109405] binder: 5633:5638 transaction failed 29201/-22, size 0-8 line 3199 06:14:15 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:15 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:15 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 146.150664] binder: 5649:5652 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.163280] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.177348] binder: 5651:5654 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.211945] binder: 5649:5652 transaction failed 29201/-22, size 0-8 line 3199 [ 146.227680] binder: 5658:5660 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.231099] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.231187] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.231514] binder: release 5624:5630 transaction 190 out, still active [ 146.231518] binder: undelivered TRANSACTION_COMPLETE 06:14:15 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="08022abd7000fedbdf250b0000003400090008000200090000000800020081000000080001000000000008000200670200000800010003000000080001000180ffff3400090008000200040000000800010008000000080002002507000008000028000100ff7f0000080001000300000008000600040002000000000000"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 146.231764] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.232003] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.234582] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.234899] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.247902] binder: 5651:5654 transaction failed 29201/-22, size 0-8 line 3199 [ 146.255226] binder: 5664:5665 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.255290] binder: 5664:5665 transaction failed 29201/-22, size 0-8 line 3199 [ 146.255673] binder: undelivered TRANSACTION_ERROR: 29201 06:14:15 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:15 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_extract_tcp_res(&(0x7f0000000280), 0x1, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYRES16=r1, @ANYRES64=r0, @ANYRES16=r0], 0x169, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x8000, &(0x7f0000000100)=0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000140)="ba1130504b48f741a2277c370eb789cc562514a3e53caad7fef39cc7018628f75448aaa3849ce8ec3c0210810c2bfca054e2d324310d5e3a362a4b46b8935c5e935f44422edc150b04e301acd716968b99eb1ade9780fa2f574697a060b3c70861c883fd", 0x64, 0x3, 0x0, 0x0, r4}, &(0x7f0000000240)) [ 146.286578] binder: 5666:5667 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.286643] binder: 5666:5667 transaction failed 29201/-22, size 0-8 line 3199 [ 146.287011] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.314721] binder: 5651:5662 ioctl 3 20000100 returned -22 [ 146.315735] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.318532] binder: 5651:5662 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.318596] binder: 5651:5662 transaction failed 29201/-22, size 0-8 line 3199 06:14:15 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 146.324891] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.378227] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.391441] binder: 5649:5652 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x410003, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0xa, 0x5bb, 0x7, 0x13, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd2d, 0x3502}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x61c6}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_lifetime={0x4, 0x7, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x100000000, 0xf380}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}]}, 0x98}}, 0x5) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000280)={0x8001, 0x5, 0x25, &(0x7f0000000200)="502cd8d0c7509f3521ad30991ddde2d3d3ffef39277a855197cf79f34c65e6834948ecf880"}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/create\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'eql\x00', 0x5}) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/52, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 146.414076] binder: 5670:5675 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.415111] binder: 5649:5652 transaction failed 29201/-22, size 0-8 line 3199 [ 146.430262] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.447469] binder: 5676:5678 unknown command 808452101 06:14:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) 06:14:15 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 146.471850] binder: 5676:5678 ioctl c0306201 20000080 returned -22 [ 146.471897] binder: 5680:5684 ioctl 8912 20000000 returned -22 [ 146.484385] binder: 5658:5660 transaction failed 29201/-22, size 0-8 line 3199 06:14:15 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 146.521976] binder: 5670:5675 transaction failed 29201/-22, size 0-8 line 3199 [ 146.536608] binder: 5689:5693 got transaction with invalid offsets ptr [ 146.539108] binder: undelivered TRANSACTION_ERROR: 29201 06:14:15 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:15 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x7, 0x80000000]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 146.567760] binder: release 5680:5692 transaction 201 out, still active [ 146.570773] binder: 5689:5693 transaction failed 29201/-14, size 0-8 line 3164 [ 146.599127] binder: 5680:5692 ioctl 8912 20000000 returned -22 06:14:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f00000000c0)) r4 = getpid() write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x22, 0x37, 0x2, {0x0, 0x9, 0x4b6a, r4, 0x4, '#-\'/'}}, 0x22) [ 146.644145] binder: undelivered TRANSACTION_COMPLETE [ 146.661774] binder: 5699:5705 got transaction with invalid offsets ptr [ 146.673225] binder: 5700:5706 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.673348] binder: 5701:5708 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:15 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:15 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 146.673412] binder: 5701:5708 transaction failed 29201/-22, size 0-8 line 3199 [ 146.690002] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.690093] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.690417] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.712520] binder: 5704:5710 ioctl 40084504 20000080 returned -22 [ 146.713949] binder: 5704:5710 ioctl 40084504 20000080 returned -22 [ 146.717633] binder: 5712:5713 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.717697] binder: 5712:5713 transaction failed 29201/-22, size 0-8 line 3199 06:14:15 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e21, @remote}}) 06:14:15 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 146.718243] binder: 5712:5713 ioctl 40042409 0 returned -22 [ 146.718300] binder: 5712:5713 ioctl 80247008 200000c0 returned -22 [ 146.719630] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.736251] binder: 5712:5716 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.736319] binder: 5712:5716 transaction failed 29201/-22, size 0-8 line 3199 [ 146.736758] binder: 5712:5716 ioctl 40042409 0 returned -22 [ 146.736840] binder: 5712:5713 ioctl 80247008 200000c0 returned -22 [ 146.737309] binder: undelivered TRANSACTION_ERROR: 29201 06:14:15 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") statfs(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000600)=""/4096) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xffffffffffffffc5, 0x0, &(0x7f0000000400)=ANY=[], 0xc766c953c398fdaa, 0x0, 0x0}) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)) rt_sigprocmask(0x1, &(0x7f0000000240)={0x9}, &(0x7f0000000380), 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000280)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000140)="d102a5171de9d81a5575ddb51a5e9f58cbe897eb7a47c529b513ea63a3bcad181afb79bc8db22da2e39119270b145ab0ba61cb3b6b88bd3790cda14deb0a182ce28c", 0x42}, {&(0x7f00000001c0)="75e0ace521506d547ab4c206bd03428a78db0b84ba368a1576f187154a6a", 0x1e}, {&(0x7f0000000480)="272f8974da77b499c28624493d03bde14dcc24046b96cfdeeda701b1134bb20ad4b1b4b63076b8c5da594f83c17541f253bb995b98468a1a6bd9f917c987621c8cccabe70cd4c84846a0dcec48546a81922527b4247b3ec2a49fef44cdb803941822d3b01ecd5bfeafb5f14c84c39eff09f25ada9b561938b482c83a3f76a3db78e3dcf98043c1b1d82fdac99fc3ab8abe9df544c6a980ec0767d8a61eb905dda3f103c29e05eeaa18794cecbe7798812311360977cd19daaa1b9da3d00a114aaa8d4e607093fdaa9ea3c4de5ca4d48a0996902ed9446d1e72e53e3972079be461682d87ec937d5e75072b6de41571810e2327d9ee29c0", 0xf7}], 0x3, 0x0, 0x0, 0x800}, 0x1) 06:14:15 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 146.746791] binder: 5714:5717 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.746857] binder: 5714:5717 transaction failed 29201/-22, size 0-8 line 3199 [ 146.747168] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.783163] binder: 5718:5720 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.783970] binder: 5718:5720 transaction failed 29201/-22, size 0-8 line 3199 [ 146.784279] binder: undelivered TRANSACTION_ERROR: 29201 06:14:15 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 146.791002] binder: 5718:5721 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.791067] binder: 5718:5721 transaction failed 29201/-22, size 0-8 line 3199 [ 146.791497] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.794641] binder: 5719:5722 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.794702] binder: 5719:5722 transaction failed 29201/-22, size 0-8 line 3199 [ 146.801799] binder: 5699:5705 transaction failed 29201/-14, size 0-8 line 3164 [ 146.803581] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.872738] binder: 5726:5728 got transaction with invalid offsets ptr [ 146.872787] binder: 5726:5728 transaction failed 29201/-14, size 0-8 line 3164 [ 146.873090] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.900134] binder: 5723:5729 got transaction with invalid offset (0, min 0 max 0) or object. [ 146.900196] binder: 5723:5729 transaction failed 29201/-22, size 0-8 line 3199 [ 146.915146] binder: 5725:5731 ioctl c0306201 200005c0 returned -14 [ 146.924147] binder: 5730:5732 got transaction with invalid offsets ptr [ 146.924206] binder: 5730:5732 transaction failed 29201/-14, size 0-8 line 3164 06:14:15 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:15 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 146.924542] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.958563] binder: 5700:5706 transaction failed 29201/-22, size 0-8 line 3199 [ 146.970281] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.011769] binder: 5737:5738 got transaction with invalid offset (0, min 0 max 0) or object. [ 147.040668] binder: 5737:5738 transaction failed 29201/-22, size 0-8 line 3199 [ 147.054028] binder: undelivered TRANSACTION_ERROR: 29201 06:14:16 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 147.079219] binder: 5736:5740 got transaction with invalid offsets ptr [ 147.098461] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.106818] binder: 5719:5745 got transaction with invalid offset (0, min 0 max 0) or object. [ 147.122204] binder: undelivered TRANSACTION_ERROR: 29201 06:14:16 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 147.130937] binder: 5736:5740 transaction failed 29201/-14, size 0-8 line 3164 [ 147.142756] binder: 5746:5748 got transaction with invalid offset (0, min 0 max 0) or object. [ 147.155331] binder: 5719:5745 transaction failed 29201/-22, size 0-8 line 3199 [ 147.170129] binder: 5747:5750 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:16 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:16 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000100)=0x9) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$FICLONE(r3, 0x40049409, r1) sendto$inet6(r2, &(0x7f0000000140)="d0634414d2b11e663ddcd307b15ce066bb47da593a1a3d4fbf0248e2d2ed978fc2aa448432397de9", 0x28, 0x400c0d5, &(0x7f0000000180)={0xa, 0x4e24, 0x4b, @local, 0x6}, 0x1c) [ 147.170710] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.177648] binder: 5746:5748 transaction failed 29201/-22, size 0-8 line 3199 [ 147.178445] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.187496] binder: 5751:5752 got transaction with invalid offset (0, min 0 max 0) or object. [ 147.187546] binder: 5751:5752 transaction failed 29201/-22, size 0-8 line 3199 [ 147.187852] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.195642] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.265763] binder: 5756:5758 got transaction with invalid offsets ptr [ 147.286483] binder: 5759:5761 got transaction with invalid offset (0, min 0 max 0) or object. [ 147.306668] binder: 5756:5758 transaction failed 29201/-14, size 0-8 line 3164 06:14:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @loopback}, 0x240, 0x0, 0x0, 0x0, 0xfffffffffffffff8, &(0x7f0000000080)='veth0\x00', 0x4, 0x1ff, 0x5}) io_setup(0xb1b, &(0x7f0000000140)=0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x2, 0x0) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000180)="16e5d209c613517f0e77ae382e6f775902230897fd956f2fcb4033c043a278afbc600a405b7745056efd276d4411fd37ae11673212fa48a8a26441865b33fd863b857414e41d54cf12d0906cf0b30ed3345de7d706a9f60ac5bc6227915f3195123243287ae0e5fc959bff5a7fa10778dddabb9ddb5c080fc89badce935aa256ed2570a9816e5847548ad94f3e13794a61e08eceafe31a0f302df46e7200d6620b028207db4c2837ae2ce31f992ff118b0d2e1d8", 0xb4, 0x6, 0x0, 0x2, r2}, &(0x7f00000002c0)) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x12, r2, 0x4000000003) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000680)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000580)={{{@in=@rand_addr=0x7f, @in6=@local, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x29, r4, r5}, {0x5f2, 0x2, 0x0, 0x7f, 0xff, 0x2, 0x10000, 0x4}, {0x401, 0x4, 0x5, 0x8000}, 0x7, 0x6e6bb9, 0x2, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d5, 0x7e}, 0x2, @in=@broadcast, 0x3507, 0x6, 0x1, 0x0, 0xf45, 0x0, 0x101}}, 0xe8) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:16 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvfrom$inet(r0, &(0x7f0000000100)=""/77, 0x4d, 0x100, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x8000}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000c594d43cf62763eb7e", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 147.322266] binder: 5763:5765 got transaction with invalid offset (0, min 0 max 0) or object. [ 147.322400] binder: 5759:5761 transaction failed 29201/-22, size 0-8 line 3199 [ 147.338442] binder: undelivered TRANSACTION_ERROR: 29201 06:14:16 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 147.390064] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.405597] binder_alloc: 3360: binder_alloc_buf size -4251398048237748216 failed, no address space [ 147.464385] binder_alloc: allocated: 208 (num: 20 largest: 32), free: 12080 (num: 1 largest: 12080) [ 147.497421] binder: 5763:5765 transaction failed 29201/-22, size 0-8 line 3199 [ 147.497444] binder: 5747:5750 transaction failed 29201/-22, size 0-8 line 3199 [ 147.500869] binder: 5773:5774 transaction failed 29201/-28, size 0--4251398048237748216 line 3137 [ 147.510556] binder: 5747:5783 got transaction with invalid offset (0, min 0 max 0) or object. [ 147.510623] binder: 5747:5783 transaction failed 29201/-22, size 0-8 line 3199 [ 147.514051] binder_alloc: 3360: binder_alloc_buf size -4251398048237748216 failed, no address space [ 147.514062] binder_alloc: allocated: 192 (num: 18 largest: 32), free: 12096 (num: 2 largest: 12080) 06:14:16 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000003ff0e4000000000800"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:16 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x20000003) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 147.514109] binder: 5773:5784 transaction failed 29201/-28, size 0--4251398048237748216 line 3137 [ 147.541289] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.541353] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.541407] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.541462] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.541649] binder: 5777:5780 got transaction with invalid offsets ptr [ 147.541745] binder: 5777:5780 transaction failed 29201/-14, size 0-8 line 3164 [ 147.557817] binder: undelivered TRANSACTION_ERROR: 29201 06:14:16 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x10001, 0x2, 0x5}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e23, @empty}}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/4096) 06:14:16 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 147.642296] binder_alloc: 3360: binder_alloc_buf size 64440448197853184 failed, no address space [ 147.649584] binder: 5791:5798 ioctl 5427 0 returned -22 [ 147.661047] binder: undelivered TRANSACTION_ERROR: 29201 06:14:16 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:16 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 147.713792] binder: 5801:5806 ioctl c0306201 0 returned -14 [ 147.725046] binder_alloc: allocated: 192 (num: 18 largest: 32), free: 12096 (num: 2 largest: 12080) [ 147.750699] binder: 5791:5798 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000080)={0xf0309fa39cc13093}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) [ 147.766602] binder: 5809:5810 got transaction with invalid offsets ptr [ 147.773790] binder: 5803:5807 got transaction with invalid offset (0, min 0 max 0) or object. [ 147.793370] binder: 5793:5796 transaction failed 29201/-28, size 64440448063635456-134217728 line 3137 [ 147.805366] binder: 5809:5810 transaction failed 29201/-14, size 0-8 line 3164 06:14:16 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 147.816890] binder: 5791:5798 transaction failed 29201/-22, size 0-8 line 3199 [ 147.824604] binder: 5803:5807 transaction failed 29201/-22, size 0-8 line 3199 [ 147.837058] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.843079] binder: 5816:5818 ioctl c0306201 0 returned -14 [ 147.854132] binder: 5791:5798 ioctl 5427 0 returned -22 [ 147.870025] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.875753] binder_alloc: 3360: binder_alloc_buf size 64440448197853184 failed, no address space [ 147.898182] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.917564] binder_alloc: allocated: 192 (num: 18 largest: 32), free: 12096 (num: 2 largest: 12080) [ 147.921675] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.948416] binder: 5827:5829 got transaction with invalid offsets ptr 06:14:16 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:14:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:16 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000300)=[@acquire={0x40046305, 0x2}], 0xffffffffffffff3d, 0x0, 0x0}) [ 147.968349] binder: 5793:5819 transaction failed 29201/-28, size 64440448063635456-134217728 line 3137 [ 147.979712] binder: 5827:5829 transaction failed 29201/-14, size 0-8 line 3164 [ 147.983756] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.002236] binder: undelivered TRANSACTION_ERROR: 29201 06:14:16 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 148.019661] binder: 5836:5840 ioctl c0306201 0 returned -14 06:14:17 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:17 executing program 3: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000fdb0a2260dd21f3cfb792290c1ec3ee360cd81ed4e241ae296c82a069a8f4f02dc71b6f5a56ae1f47d91686e178a75307d0c8c86bca53822acc81fe276a1f1403a74b93939b82f69"]], 0x0, 0x0, 0x0}) r4 = dup3(r0, r2, 0x80000) write$P9_RCREATE(r4, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x10, 0x1, 0x3}}}, 0x18) [ 148.042285] binder: 5835:5843 Acquire 1 refcount change on invalid ref 2 ret -22 [ 148.048084] binder: 5839:5846 got transaction with invalid offset (0, min 0 max 0) or object. [ 148.048148] binder: 5839:5846 transaction failed 29201/-22, size 0-8 line 3199 [ 148.055994] binder: 5845:5847 got transaction with invalid offsets ptr [ 148.056059] binder: 5845:5847 transaction failed 29201/-14, size 0-8 line 3164 [ 148.056547] binder: 5839:5848 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:17 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:17 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 148.056604] binder: 5839:5848 transaction failed 29201/-22, size 0-8 line 3199 [ 148.067134] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.067208] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.067300] binder: undelivered TRANSACTION_ERROR: 29201 06:14:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:17 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:14:17 executing program 0: r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 148.149569] binder: 5850:5853 got transaction with invalid offsets ptr [ 148.156781] binder: 5851:5852 got transaction with invalid offset (0, min 0 max 0) or object. [ 148.170728] binder: 5850:5853 transaction failed 29201/-14, size 0-8 line 3164 [ 148.178623] binder: 5851:5852 transaction failed 29201/-22, size 0-8 line 3199 [ 148.188439] binder: undelivered TRANSACTION_ERROR: 29201 06:14:17 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:17 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 148.221756] binder: undelivered TRANSACTION_ERROR: 29201 06:14:17 executing program 0: r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 148.282865] binder: 5870:5873 got transaction with invalid offsets ptr [ 148.316213] binder: 5874:5878 transaction failed 29189/-22, size 0-8 line 3014 [ 148.333226] binder: 5870:5873 transaction failed 29201/-14, size 0-8 line 3164 [ 148.357735] binder: undelivered TRANSACTION_ERROR: 29189 [ 148.364587] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.375320] binder: 5874:5884 transaction failed 29189/-22, size 0-8 line 3014 06:14:17 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000200"]], 0x0, 0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDENABIO(r2, 0x4b36) 06:14:17 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:14:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x1) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 06:14:17 executing program 0: r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:17 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") [ 148.399505] binder: undelivered TRANSACTION_ERROR: 29189 [ 148.412041] binder: 5835:5843 ioctl c0306201 20000080 returned -14 [ 148.430525] binder: 5835:5888 Acquire 1 refcount change on invalid ref 2 ret -22 [ 148.438131] binder: 5835:5888 ioctl c0306201 20000080 returned -14 06:14:17 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 148.492595] binder: 5893:5899 got transaction with invalid offsets ptr [ 148.497214] binder: 5895:5901 got transaction with invalid offset (562949953421312, min 0 max 0) or object. [ 148.497261] binder: 5895:5901 transaction failed 29201/-22, size 0-8 line 3199 [ 148.499953] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.510839] binder: 5895:5904 got transaction with invalid offset (562949953421312, min 0 max 0) or object. [ 148.510888] binder: 5895:5904 transaction failed 29201/-22, size 0-8 line 3199 06:14:17 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x80000) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v2={0x0, 0x1, 0xe, 0x8, 0xd, "50a04e3310e46d9ac75830c741"}, 0x17, 0x2) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:17 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:14:17 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:17 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 148.512421] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.548238] binder: 5893:5899 transaction failed 29201/-14, size 0-8 line 3164 [ 148.564459] binder: undelivered TRANSACTION_ERROR: 29201 06:14:17 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 148.618241] binder: 5913:5916 transaction failed 29201/-22, size 0--1 line 3137 [ 148.639583] binder: 5910:5920 got transaction with invalid offset (0, min 0 max 0) or object. [ 148.641546] binder: 5917:5921 got transaction with invalid offsets ptr [ 148.641593] binder: 5917:5921 transaction failed 29201/-14, size 0-8 line 3164 [ 148.641889] binder: undelivered TRANSACTION_ERROR: 29201 06:14:17 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:14:17 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000202f3e26ce3ebf510c1a223ca5d6c2930f4139e33fc65b8726c14b10851c4cd2fe5b377c3fd7366fb1a47ff19d2666ec33ab74ac3e2c5001bff7745c2311f541e3328f27cc1e6550a1f25b6c99c88b333fb182cf7a3d67aeb12811116f95a3d30ca34f339ee0103e9ede29ad615ef36db4c48c9cd00289560ffe00d224e3857fa72378dcd6d62d1677801af1db58e66b2886b4e216cc85ab3367d7e9357c1bacc95b909a20fb4841ed9d8e04dc9f39269b43b658163c8489bdb5b2f"]], 0x0, 0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 06:14:17 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:17 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 148.666880] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.670955] binder: 5913:5925 transaction failed 29201/-22, size 0--1 line 3137 [ 148.671303] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.703996] binder: 5910:5920 transaction failed 29201/-22, size 0-8 line 3199 [ 148.723377] binder: 5927:5928 got transaction with invalid offset (0, min 0 max 0) or object. [ 148.727227] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.749559] binder: 5927:5928 transaction failed 29201/-22, size 0-8 line 3199 [ 148.750160] binder: 5910:5932 got transaction with invalid offset (0, min 0 max 0) or object. [ 148.750235] binder: 5910:5932 transaction failed 29201/-22, size 0-8 line 3199 06:14:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:17 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) [ 148.750552] binder: undelivered TRANSACTION_ERROR: 29201 06:14:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x7, &(0x7f0000000100)="b8dcdb0531e07f58da991f123c523f1b9bd07038aa4618f3699572f4592af2f78392f33c667414aed6a60d00af45a1f54c47261f0008000000000000f212a0fa533088f695909fde91e38e983d1921f311379ae0f6687deb79274463091d365b9d1f0347f18c26d83cf2dd2c8d05eb3b675d36af58c30598e58b8b1d03b8199aeacda71b") r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x80000) getresuid(&(0x7f0000000000), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r5 = getgid() write$FUSE_CREATE_OPEN(r0, &(0x7f0000000380)={0xa0, 0x0, 0x7, {{0x1, 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffffe, {0x2, 0x8, 0x7ff, 0x8, 0x3, 0xc3da, 0x1, 0x8, 0xffffffffffff96c7, 0x0, 0x3, r4, r5, 0x1, 0x76a2}}, {0x0, 0x1}}}, 0xa0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x8) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:17 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:17 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:17 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x4, &(0x7f0000000200)={0x10, 0xffffffffffffffff, 0x7}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="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"]], 0x0, 0x0, 0x0}) [ 148.794282] binder: 5931:5936 got transaction with invalid offsets ptr [ 148.806287] binder: 5931:5936 transaction failed 29201/-14, size 0-8 line 3164 [ 148.822574] binder: undelivered TRANSACTION_ERROR: 29201 06:14:17 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:17 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 148.875523] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.882373] binder: 5927:5938 got transaction with invalid offset (0, min 0 max 0) or object. [ 148.883874] binder: 5944:5951 got transaction with invalid offset (0, min 0 max 0) or object. [ 148.883920] binder: 5944:5951 transaction failed 29201/-22, size 0-8 line 3199 [ 148.884303] binder: undelivered TRANSACTION_ERROR: 29201 [ 148.914042] binder: 5954:5955 got transaction with invalid offsets ptr 06:14:17 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x8000f, 0x6) setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000080)="09aedc0f9e63ffdc5026cf4fec0ff4d78fc99fe8e41e5fd1dc8db04f03d94a55ed26843f39d9448d3a67a2c232b9d255e616bfd0a9f1707e3924876ed399c0e2af8c0f148a2b1cf437509d477ab8d3ed7d929e41d154ab76d53e9132be2c75c5b90027fb8948ee4248010b13d94f7a2e5f5d9ba51efe65c2ba578ef615c16f95b2e6e86ff75a9a52ba46ae3abcbc093890a77e8de612f9c032285428f39bf22d9e0b4eb650c53c2349d95d118866fb607ca7acb6066e32cd05553241436a46c7c3b340e8f3ab338c8acd42e7d3562f6b9e13de32a8b1178d1ad5bfb3ff16900c906321df182d0a6bf577e275cdd2d3bfd848767c9e3805dc", 0xf8) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet(0x2, 0x3, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 148.942553] binder: 5954:5955 transaction failed 29201/-14, size 0-8 line 3164 [ 148.965876] binder: 5927:5938 transaction failed 29201/-22, size 0-8 line 3199 [ 148.986863] binder: release 5960:5962 transaction 255 out, still active [ 149.001286] binder: 5959:5963 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.027843] binder: 5959:5963 transaction failed 29201/-22, size 0-8 line 3199 [ 149.031463] binder: undelivered TRANSACTION_COMPLETE 06:14:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fadvise64(r1, 0x0, 0xfffffffffffffffc, 0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='clear_refs\x00') ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000200)) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1c, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000c32a8bb9445334cad7ebc8ec5ed11419315c66589691fc69cc489f41f61fff5621620eba80c7a981eaa2c27c3518576f7bd7cb6530c16fa7b4a0ff3a9cb2f8fcdca7d40b7a840fd7c5b9668971153aa659eae84daf510c4759d7dffff4cc5155d3fe600aef69700e87c6c3ab478091775fa9b4cb3900"/134]], 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000140)={0x2, 0x3f, "b61d3acbe0d58ab71d6421f1d3f55b2b5f9b96a7e070c6a72bbfe3be14f20bc6a5ea077b565ff4354802f5404ff3425a3f1d5301d56acbb0273b8b61e5374c"}) 06:14:17 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x4400, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'bcsh0\x00', 0x3}, 0x18) 06:14:17 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:14:17 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:17 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000100)=0x3, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3969448eadcbf7f8000000000000000000000000401600000000000000000000000000000000902f06599e8885ba7d9003300e1ac25f00000000000008000000000000000000000008000000ae2a6f609a894b2e9bb836adc9ee9312b80d29dbf4ec8b2ec5a48dfcafa82dcdf1b3c90d913f4586c72758f16430fd912a", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000d0e50000000000"]], 0x0, 0x0, 0x0}) [ 149.031549] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.034135] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.040087] binder: 5967:5968 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.040133] binder: 5967:5968 transaction failed 29201/-22, size 0-8 line 3199 [ 149.040423] binder: undelivered TRANSACTION_ERROR: 29201 06:14:18 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x3, 0x4, 0x7ff, 0x0, 0xf}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r2, &(0x7f0000000240)=""/23, 0x17) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000200)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="0000000000004ece49a713fb6adf1f573ffcd8a1cc08974641f97dcef6064136ffb49e6f33a39039b809b36e117bb7c555f5a7503fc028dae0be46a3bf9c53ea44d611065662a89271dbd21d5389fc53db0203bf1d17853a89edacc646e8f4757195f06c75edc91af4bd5c9959a85c6a5554e4e83ad47c7f10bc0faf3c6b37d528c312"]], 0x0, 0x0, 0x0}) [ 149.088789] binder: release 5973:5977 transaction 258 out, still active [ 149.094586] binder: 5975:5978 unknown command -1908119239 [ 149.094596] binder: 5975:5978 ioctl c0306201 20000440 returned -22 06:14:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) sendto(r1, &(0x7f0000000080)="9616a4620f982ca6b605b0577cac2fedf2a689772f1745a022c8ae0fde98", 0x1e, 0x4080, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @empty}, 0x3, 0x0, 0x3, 0x4}}, 0x80) 06:14:18 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 149.153590] binder: 5970:5982 got transaction with invalid offsets ptr [ 149.153792] binder: 5971:5980 unknown command 808464432 [ 149.153801] binder: 5971:5980 ioctl c0306201 20000440 returned -22 [ 149.165405] binder: undelivered TRANSACTION_COMPLETE [ 149.165518] binder: release 5988:5990 transaction 260 out, still active [ 149.165522] binder: undelivered TRANSACTION_COMPLETE [ 149.165640] binder: undelivered TRANSACTION_ERROR: 29201 06:14:18 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 149.220348] binder: 5986:5995 ioctl 40505412 20000140 returned -22 [ 149.226905] binder: 5971:5994 unknown command 808464432 [ 149.231858] binder: 5987:5993 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.231923] binder: 5987:5993 transaction failed 29201/-22, size 0-8 line 3199 [ 149.233303] binder: undelivered TRANSACTION_ERROR: 29201 06:14:18 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 149.278470] binder: release 6001:6003 transaction 262 out, still active [ 149.278752] binder: 5971:5994 ioctl c0306201 20000440 returned -22 [ 149.288222] binder: 5970:5982 transaction failed 29201/-14, size 0-8 line 3164 [ 149.308617] binder: 5986:5995 ioctl 40505412 20000140 returned -22 06:14:18 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 149.340111] binder: 6005:6010 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.368979] binder: 6011:6014 got transaction with invalid offsets ptr 06:14:18 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000000c0)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000008fa1f7de000000ff0000000000000000000000000000000000008b27250c01fe1b7b7976ed6ec3beed0000000008", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0404"]], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) [ 149.391210] binder: undelivered TRANSACTION_COMPLETE [ 149.394682] binder: 6009:6013 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.394749] binder: 6009:6013 transaction failed 29201/-22, size 0-8 line 3199 [ 149.421578] binder: 6011:6014 transaction failed 29201/-14, size 0-8 line 3164 06:14:18 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x601, 0x0) r2 = gettid() getresuid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000440)=0x0) getresuid(&(0x7f0000000480)=0x0, &(0x7f00000004c0), &(0x7f0000000500)) r7 = getgid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000005040)=0x0) r10 = geteuid() getresgid(&(0x7f0000005080)=0x0, &(0x7f00000050c0), &(0x7f0000005100)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005140)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000005180)={0x0, 0x0}, &(0x7f00000051c0)=0xc) stat(&(0x7f0000005200)='./file0\x00', &(0x7f0000005240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000052c0)=0x0) fstat(r0, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005380)='./file0\x00', &(0x7f00000053c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = syz_open_dev$binder(&(0x7f0000005440)='/dev/binder#\x00', 0x0, 0x800) r19 = getpgid(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005480)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000005580)=0xe8) getgroups(0x4, &(0x7f00000055c0)=[0xee01, 0xee00, 0xee00, 0xee01]) r22 = gettid() write$binfmt_aout(r0, &(0x7f0000005980)={{0x1cc, 0x5, 0x69f, 0x34e, 0x163, 0x10000, 0x3af, 0x9}, "3e7f4d95a7af53ec5e3bd087849cb91f9e2c7a38b51b3dacf1aeaf1dde0b3517a5402bc3a46928c4869c12b7bb36a1b4704d193f2c451467ff124dd25aaaecee93bb013fe3aa0b2504cfaf2b7b5fac6daac9b57ecf3e211f8b00ae6337e9f6fc7d920b0faf131a9987506d6642b75c53d3060353cdb1fe13d5e09528993bf1f8448547edea8702ad0b6087760e12e096c2c87dbde9bead742a1973e36c1aa1d4b0ba14745b742a2211", [[], [], [], [], [], [], [], []]}, 0x8c9) getresuid(&(0x7f0000005600)=0x0, &(0x7f0000005640), &(0x7f0000005680)) getgroups(0x8, &(0x7f00000056c0)=[0xee00, 0xee00, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00]) sendmmsg$unix(r1, &(0x7f0000005800)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="d4c8b7f3d16190a6de7ea75303d360cc0cb7ed5ac4b00a71dfabc25421b33c2ff29fc87c46d2f6658a504e654ab387b689d8231899840331807a4cd9ec16764a1d1dcd6b176fb0613d50ac069da1405ac192ce131b4ce3f5136862e8ca843478f1bffc83dcacf55352f5141805e4fd2b015fff3826270959afe9361bf6245273bf3ef18057a60d3543aaec74baff74657112fc2b", 0x94}, {&(0x7f0000000200)="3c400b23c4ec8ad4c69d8e2624b6138a298a005da217a9078f962fdb025e181aaa2a5ee91785b468238010da3d129d345cf94531a010df1fb18e05e5a88d6c64f78d17798f", 0x45}], 0x2, &(0x7f0000000540)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x68, 0x48084}, {&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000640)="3cbde2f39d24330a04bd95abf0e7e44a8fc57a5860bb29af474e93969a8f30a1f99e10b277aeb0aa877d468ac5ef7f72334b404a8af0de45858dfa8aebe706686243a6e9fc96a28506f985a0ab555cc8a1da955ac15f46336c4ed48fbb1aab0a2f6e1686cbf722daecd7f7a21f38ebb6e5e309f3249a3bd37867d83637878d30a0abf49c186befd16ad6c6b4eb9d904cde0591284b9090296947351bca0c8590a806e3c8a3e5b376f1618d0285a929bd1d2a49b03512076bafc5238e96149a9e444475e426e33f957f36409d6dafbcb2813e13dff012fce7431555690c415cad55f5b2955d839fd34215e063d97393cce5af85d6", 0xf4}, {&(0x7f0000000740)="455e8f11a8daa7fc080eca18b8ce422218baa1a934e667efd448b946f572179498fcc1a840005bfd073dca0d9e5c83e48da0141db02b6e58e795caffa159562d58fd8a51a756d1a66dccf8fc4abc699ca199a74037b9de86cee4a8169c4e87e6f1ea51ac0d56352d7fe13a5e988b42d9920c59644adad837787647dec6e70848cee0897838fce1cbbaca012fece837029ebb42eb0cae294789b37c58eaf06a6103e96fbbc4e0ecfd9084042c9a82fa79c7455f6b888f894b7710ffacf1fee7", 0xbf}], 0x2, &(0x7f0000000840)=[@rights={0x38, 0x1, 0x1, [r0, r0, r8, r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x88, 0x4801}, {&(0x7f0000000900)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000000980)="e9cdca1839d4eb43469521992af841852e65b964d14f9a3dbf8e5272", 0x1c}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="12970cdd2acf196594d049f8db8f30f51c597c98d452cb2bd3745139bf051c70b7b9efae5c02122171020885bc2371a31f35829a0892f4730c306ca8ef6bf30a349a2c6c34fda68403e5a0ae634c143dd6e200eb7439d561f729e4699ee8ec20ecb37d694b05c5aa80e4d404b0c64c6b9955652a645744ab3f2950c2e8", 0x7d}, {&(0x7f0000001a40)="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", 0x1000}], 0x4, &(0x7f0000002a80)}, {&(0x7f0000002ac0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000002b40)="2c567fbe9b015924f1c11b9c327b63ff09ff37b8b706feadd91969299ce8d5a276c630ca3a0e1382abe273753cdda4c116c0de1236156b296ca928ca9530f1ec687b6535b8ce4bf80b6f6ccff83df8b9a5e29d022babd0842669e47524ca0312c0052280239b433835f8188eff29889b4478ca0a73dce9775280f5e8d047ff792934105029082302c9e9ec8b68589c987707c1fcf3c6b714cc2923d97eaa0b73eaf6883d2c7916de42c712a7199520400cfcfed1ca9dcf3388c25b0496dfd83f356a747d1ec43181c65d3a0f99b32661c2c3e7d2f52a860670f2cc98d958cd645bb75887a10d273c14455a0511bac61647dfaf26ca", 0xf5}, {&(0x7f0000002c40)="4b995f8d97d7edae46180afff158fea13ea8b3ee7ed2d9a913ef0d2d9ce2faa8b0bdab3a8116a8516fce146e59b0b8440cf8cc7f9565c1c5fbcdf62721c489", 0x3f}, {&(0x7f0000002c80)="6c88a3296b5dd552ba70345608a691baf9fc0d7731251a3e", 0x18}, {&(0x7f0000002cc0)="712276794a8456a928e8476ed5c3ebb432dac2362646e11af3125619ab4818706d65ccee812bfe1833e4af4e08ea418d33c33fc000f9d23fa4bc20442dc755c7798de27f841d7bd40b4c", 0x4a}, {&(0x7f0000002d40)="97728c5144ac5536f3d81089f4df5dfc63e309a97c8edff3aab18dbfd785785cbfb77d163315faa5726eccc5d2fe5d3d0cae5c943290e20b1485f13420662a0fc5f48dfcb88dd5f52eedd73bb1e913d961c5515be9945580509f6d3c9a9acd4334c68a9ebc2536092e46f59914715a916590a2716d3241446eefc198eeafb78c73f052181e1832cb53357b412a83aaf98df7efbeb2f7ea510a126475b1547b1e9c", 0xa1}, {&(0x7f0000002e00)="742edeb744b552bd43f74b79aba3e98ac2ea783eeba5350f6d5d7c9afc3355a395133794e7b6d10d28f146a58e7af2b2e0b3db9f50e2caf095881c4975832784ef11ae61f667dbbdf5fa6f2d1a2157f95d2fe9e9ca8f023090249ca963802312729851eb5315b9ccc4f10c66a3c31e5cd56b163aac18a2139cb4e47f7c877e4de1b286f882a9da155a1bfe43673393678d8695ef8d43b5cc3ffc326d8e35b77f96fb79ce967dde8dcc976eeb0bb9ba451084b6f9cfac97e3ae9cdf9c168e3e673a2b5c68286a358e7ca796cb14fe645ad244e7920dc526cdd84adcce0e8355d3f3348f7c5307a3e8f9b1729e5f681bd91e8e0bff642c8e48a5853a03812f0417fac73c45561ccc2a8bf9332b456729d5ebc0c83e44dc8c3f6c891055799dfce82b01932b2d6a770eb8804d8ac798164f4c46d1e2ce68cd795f97c05a14e72baaf7edaca71fe6488bb5905613719748b010a6291be99a91471acb4c2a9d4e775fa0eeeae2e6d8063356ab6234fdadf14688ebe2d541fd3ea11333c7cf5257f6f81e0c925c1bc60bb56ab55f2d97edf4e419d033b2f69addbfc5a923e984f46656a64d868ec1cce772ed8329fac255af4461157f964a6b892ab79639055e980afff266bbaad1df358bc30b9843802037baf6191f0719b5290c14f50355829214976fcce95900d98af8cb3588e87d6a188763d53fa401453cc34f24c03893ec65d366f48439ed3b684031b95f9bc8d38aedab50488de5c45867c4583d67f1cf05e5fa22c9f7843a75a1b1c61a75e61b0e691a6d45011bef0265be700dc07b1ab135687f1124184aa9f7fd0a914e5104a5dea2e23eb7ba835bfadf31aff2891d43bddfef5e6ed03b58d43e6645f8cd87d9394a182dd6881be77391d2455f6853518759c080c98c120b66925ad9554a450ad7acfaabe23fe5b6a13d87fed5b1be71e4f5c8312a19d158d3b935d73e0adceec3869036501dc4fd7797892d8c7ae66721ddb200d3ac03384e1cc3fddcc97cf4e06a08a068c274f3d140a78b14cbff6d196d7c11a1b1f4cb842712386a8916f9a21d04bb779cb6a5caf4fea2161d35e9ae82dda4d622dfd3095bbd10ccf14e3175581ded53e6841f16dc11567629063bc41908b870f81a52d40e5b2452665529d72ae2b5d6bcaa074deb8d9528f93bef019eaaea9909bed8fc16310f6c2896f3d0c3737e7551a7924f7d380d137d561ba0a5df2795d386ade7f3135cf459b3f32f7da72da24a5d7bc45e4fbcbf96ca70043add445b40ff2aa0f4de5c0df87ea39dcd2ba34f325a8c6afe52b5ed3d75ef01c459a2cac987716c32949b6f6cf96e818b1ee31bc4ab18739e065f748d823c8eb271731c2924f85422f9be2a3a6c2cf00cc08842d1eba44b81e3925033c07513ecfc65bc2ece295e86a0d52201c0e387e9a12f083c8eb4902e4bfcbd5ff06ca0efa3937c448329924d1df9656bcc794bc40274ee42ab0a8aa094c36f65fb4e24dc14c7bf321b0fe3227555d69661c131de380fd225212667c912b1a7e57bed98a3143bb5b047a3d3837376139211c352d7de4eebdf45822720d769a3598e6a5ac448ac6cb1b9e7c409ddd3d5e60843c7f1ee6c0c5a2cee7240317b4dc45f99ee52469fb2dcc0ff2c8b78c5a2daa4338a7280df604b4365e911029ed727a9b30c1cdf50bb99db528a7490a007f1e35391e303115c4e2581519de186248db0b64d71e98cb4571d8057d9e4ff2dfc66bb87a7e047fb38119889276759267e8cf486b08d8a1554dc5136a65a39dc953e97220d98dfa4a1e56f67e5857586e172a4d84f1bcb48d995626dc6068a079a4eb4f33126f4b04141fbc01c7aaa734bd3ee57fec4d621f17afa264d9d708deb59dcb82d7c7c8a3326ed508aad8920d6047b2faef0dac0c7f1a64e7a027d3abdde1d0b9d5e8cd86c551197d2258a94487cc045307cb570cbb24fdde531a45af28b03c378b19b93f0d1d0c4d65f53fddc22cd5dcfa95e6427ad01fcce6483e2a3ed36c4d0071d5c5de40eeaba21a1bedecaa6d2355c19e81f233f7c1a216fc76e1b79777f9b55a1632c2bd0c281a31e5d0d83f9700b98e4e3fb0c7565f9d6e0d880df34f59f8bd712d3e1dea796a395f76c6bf665ec3c88fa63b28d67847451a5222ac1b253dcbc70e14650895b487651853f5c7bb063a82c1351a2fb80f5e27f50f42ff7333790f4f2080074267a1789d6dc6664a4431ed539961dbadba5e4e078c4fa178707a70c96c67b09e0eda44d616dc8b59238ab595d8474f05fd08be0b98c65d0ddf8164f7b82d59a76bfdc2b2a7f0daf30dbd05c95e85fb5cb8bf661c2c78447a46af71cd53cef71a9a0095540afe0d74070ceaf00b4f2392b36ea5f9d54ab96df7c84864e14ca0e7f0b685d9186dad80cbdcda400b8915e313434d0a11d7eb08348f92ea14b605383c4c855d8763dbf2c07065b4af134ad95578a26a1d474e7dd18f211d16e4da7e0479a3f716e327b9452689711006d576c387d3a2bf7dd77444c87cb604cc38f055b9cfa592e46a1020f7698c26bbbe02a633a59a516235f8c0cb1cdae64ee8382a58292369d661883e88fad7449e2e47353777e455d8447ac9f7c2f6dc2bd8413022370d4ff7588a29c5c835ecd6cd642bc83e2e5837b619537da91c9c46afa66e5b1fe8592db819b26d2abb1e848db257d592bdf1db033a4e11c12575605d95f3fd7c94f1ac6491dc55c7116fc8a8de1368c6331f9dc5c54caa4f49c503fa0c34b0ceedacc029c70a043752d9d8ecd8bbac9477b9c233964e42a23b5988bb7e9c57db190e64dfa65f413ab7d7e3091f8ddb654599ceeef5bbff8d82b0fc794019333acf4ffa41e4542409f12cd3cb12ac3eb8876353f3998f0af4da6fcba8ef82a1648e1fe2c3a902c6baa0bdc66e5ffcdcab873d1ade2f6a373a2c4932d3c8348c047dd9e872ff871efadda24c9e85a627d03726b9305a45bfb628f53f07887094be3e93bc37183349adfe1fa2a41f964a7469a95b1c8645f0d3dcaae56c81eb90e082241ff2bc43e63ede26bc0ebef486501f3b5890fb82b1bc4b4b25d6e563d06300845825577c2b655a87510e07e441f4f8e4a324d50c5d2f23792056a7b8683edd0faaf6f95ff24017911419f704e2cc67a3f9ce09587efbef70338048c68e5f3c6884c53143541bf0b154e5742df263f79152ef1655c11e9e86cefd9320133f70439732f60296ef88d1d48f3caebf2d1019f95839bc9c98eb4dddcbcbd92217c0e500e4bf66595b006375becc32dfbb7655faeb082895a0cf56b30e9a9c822a32eb190daeafdfebe94f841c3940e6f621b51856548eb83c01c27cbaa2ff4a2ef72a4e628580df20c62fcaa5cb1054377dac7b207bd0a00fa2ba58a309d955e0174e136b3d8daf7d0a9858e802b5912b31f46a18c37750b1252d1ee429072da9c9f59cd0df847d98f0e9697d1c2cdbb4c8e8c8d2ef4f3f2241865fa23e3a2b5f34f03d2d4eaac4930bfa4684827fe6869704c5c44a67090edc6e40ba785214cb15856c038076732a1a740de5d82e694c41177bcf0353147991511eeae961aa9765a3f5e4cb7c2ce28e672f9d110be6565f0e096c8f9041e0b49ccbd0c3ed7d9cc9d033c0523de3ef72b42aa687687da9c193289733020894b4991ef44b140de8b9eb25a14a59635d88b26fd28c7601c7c3f1da0eb99e3d629cd5c8d4256c7bb6361c070cba8888b958e59d9f56e1a7c1824b1dd7e19075b99091d8ba387c84e24760701433429b50bd6928a89fd674ed2d222c42d574b7dbb63d6c212c8eca0ef52a77599fd2723e5361cb949a50e754c07325f7268f3aa68e3fe0f1fda0eb1a58751fd11638ed2d31e42a7f3878be84f8900cc3633f7ea13df166c870236078baa6f7720820a5e735886cffaf0ea233f66e2667963222ce75304af359b89169c0a93cc33b2eb87ef0e25f26df2b66a37c08c8caf128ab505baebdd745894ab355f9f502cc81e06971c8b6c2e5a6a9d540c3ae4d18c139c36fa644737d15b7aa12565869ea871e0946098e83223d88057a0cda4bf71b6801d447b002f2afa5820b6b34c011507db6347164f582d4998bc03f6430b9471163f726a1596888f968b6832fdd4e4aeb861d064094fd0837fb38425b784cd8e36ab77067b3452200b7d8363fcae2a550a12b4a49a5621374ebc41d80cbd8581e83f0d01c7e93d47fde8f1ed5bb7805b000c658d5bc0251e868c6c3a58bb1b6489fe79a9724489e68c5d31c0b4a4112bc793996e9697e014e926d14cfbaf968e1cb14547c8606dca87c29934ef5fc13cb23a7debd6720356d5a42997c1c126a40f9f550849d50fa8aab93a9260765b5bba74a923340473c0fd1b82bbe4f69d590bcc7c2833f14fa71cf6abcd72eb39bfb44477d9c1c91d651f8c19e155bbcfef0af6a64e467f4ccd4fda96ff195c813fde66903e4c10ed8f5f48014c7b46063313253005228d2f071636c03ffb67ead36842811cd38b1e632bb0bdf2a62df56df902f2c0a8bb8fae0f1e66df395c1b0367c1d1742f42956e9c4a9a244f9591007fd76e42e6f11edc9baf7cb2a3b44510167698e6f73503ba5f229ace6c74bfdbf40929f030e3897343fc936e7e8de5d1705f90033370acd7b85e7ff5ed0bf08fe72b6a5b805f8381043cce46e6f9d6b97453cdff906d6ee2178ef5f8a758526ba595398d0ab080b4fb5cf627a82550f9782ee2fdfcd060f8f733ba06c9946e466e998b16ab363a7a4ca88bf9dc6600fbcc63524b2323dc72e782d91247d60e65a60849270e5c5234012a1fe51508a656df191c98bb3935b6040f6623ae2be6374599526db3a5a498c5bfe8517944640ccb30b19c347df8cd5b2371a411887a870a63a6c953a4e79804501543904e9ed602599adbf2cc941005afeb0a9fab139b20ab3cd1a3593ced8f52fee725649d6d64c7edbd9a143ab6989ea6c0bd38265c4f89e1ad7d80c49a46c85597a35022773cc56d323f01660827c8214bf24c1c1b7ce7660b388590b8543cc17ba41861faa19ccf04b2a197d23e4514db046b7abef9815595e8ceb46ccb087c50b027b453780a22954e30cf074168974fe2c489d9f7f1d8554286b6ec5529f36eabdbbf36d9080721ae8c4b24a11df487a973f51dac12aa1bac90ed633580b6c8710813c0a024f41f9911b327d92ac1e1a63cadb6f63522656dcbe1df703fa2c79a0a86a0acefbc87722665a2b4477bcc48169d6fd84758e48d832414c407f0e4904a472fcb823c6892710907241d326bfe5f3da9cda8a8e15b3f99e3eb9caf056721ebf202b1ea89e290e89c36909f7a2e2b97b09394cd104bc91b51ed59dda227a80b8f9fd1a5b4399be3f04a04bafbc498be1c7a2f8515eecfaf76278da75ba80d4f83dd4d5b954ecef32d03ef6011113619e1d20fdeb6f5d07e3281baf8b78f4a7b913591674dcaec89148e65d7e8c46f02a95ca1fb5379d7a31203d5d616dcc795f93987f50bc5ef5d6f4bd41fe17a9c6aa66143638881320d4f606f64da80802c69707a113a881b7305f22a795d21c474b955d9b1fed019c6af84cf516a06f73526e5d8321e36cdc3d9132a466c5b0850f53a370667beada1b24a3f415733481169d32b937c0769f60c979d1937bb9fb0ee3814a94ac5e5a50b3144034774a5b61dc2e940641a91f59df352bf5d304d58308b541e9d2e8729ad5b1ee218be923863e14530018d439777745efeee2aa22f16f2459bf9582034e84160474b49636fc076140b78e182e0b52512984606bba9702f1a1fffee8bbb827f01d78675", 0x1000}], 0x6, 0x0, 0x0, 0x20000080}, {&(0x7f0000003e80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000005000)=[{&(0x7f0000003f00)="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", 0x1000}, {&(0x7f0000004f00)="3c1193d8b599aaab94979bcd204e51fc5879ca9bb357013739985b2eaae7d1a78947", 0x22}, {&(0x7f0000004f40)="108524c9ef9a40c1977bba62d892d8003c03b6e4fa1d7999cbeca2ff0bcc19fe79c6be1be86125cfdba313cde31d6a9ec12c5d8e9cc37d6ad7d8ca8dfc9a9668003d8a3449632dc8a6d21906504dd9e58b38092493ae71bc28feac476be19600cfc67f6bb3ef7d194de33151271148c16ddbca32376a6207d44b312344c2ea80372047fba605018b61e54f8dcc5c37d10612aa18543d3b3fa5b25eb91e6b7171738f94", 0xa3}], 0x3, &(0x7f0000005700)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x18, 0x1, 0x1, [r18]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}], 0xf0, 0x4008084}], 0x5, 0x0) r25 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r25, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000005940)=0x2d8) [ 149.454503] binder: 6005:6010 transaction failed 29201/-22, size 0-8 line 3199 06:14:18 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 149.498184] binder_alloc: 3360: binder_alloc_buf size 8868324358328417800 failed, no address space [ 149.500750] binder: release 6018:6022 transaction 267 out, still active [ 149.500754] binder: undelivered TRANSACTION_COMPLETE [ 149.500823] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.500955] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.501146] binder: release 6004:6006 transaction 263 out, still active [ 149.501149] binder: undelivered TRANSACTION_COMPLETE 06:14:18 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 149.501455] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.553879] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.568035] binder_alloc: allocated: 240 (num: 24 largest: 32), free: 12048 (num: 1 largest: 12048) [ 149.585892] binder: 6021:6024 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000), 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) socket$inet_tcp(0x2, 0x1, 0x0) [ 149.595264] binder: 6023:6028 transaction failed 29201/-28, size 875149180547366912-7993175177781050881 line 3137 [ 149.601970] binder: 6033:6036 got transaction with invalid offsets ptr [ 149.602035] binder: 6033:6036 transaction failed 29201/-14, size 0-8 line 3164 [ 149.602557] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.630924] binder: 6021:6024 transaction failed 29201/-22, size 0-8 line 3199 06:14:18 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000180)=""/198, &(0x7f0000000280)=0xc6) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) memfd_create(&(0x7f0000000080)='\x00', 0x5) write$selinux_attr(r2, &(0x7f00000002c0)='system_u:object_r:crond_var_run_t:s0\x00', 0x25) 06:14:18 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 149.650150] binder: 6039:6044 got transaction with invalid offsets ptr [ 149.660948] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.663307] binder: 6039:6044 transaction failed 29201/-14, size 0-8 line 3164 [ 149.685559] binder: 6038:6042 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:18 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1100008912, &(0x7f0000000140)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 149.711798] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.734688] binder: 6050:6055 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.747521] binder: 6038:6042 transaction failed 29201/-22, size 0-8 line 3199 06:14:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x78) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TCSBRK(r1, 0x5409, 0x8) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x8) 06:14:18 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 149.763648] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.785064] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.787239] binder: 6058:6059 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.787288] binder: 6058:6059 transaction failed 29201/-22, size 0-8 line 3199 06:14:18 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000080)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f00000e7000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:18 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 149.797144] binder: 6050:6055 transaction failed 29201/-22, size 0-8 line 3199 06:14:18 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 149.843618] binder: 6058:6068 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.860349] binder: 6066:6073 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.860413] binder: 6066:6073 transaction failed 29201/-22, size 0-8 line 3199 06:14:18 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 149.900751] binder: 6065:6070 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.928215] binder: 6077:6081 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:18 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 149.930926] binder: 6079:6082 got transaction with invalid offset (0, min 0 max 0) or object. [ 149.930964] binder: 6079:6082 transaction failed 29201/-22, size 0-8 line 3199 [ 149.942386] binder: 6065:6070 transaction failed 29201/-22, size 0-8 line 3199 [ 149.943136] binder: 6065:6070 ioctl 400454d4 20000080 returned -22 [ 149.944789] binder: 6065:6070 ioctl 5409 8 returned -22 [ 149.944833] binder: 6065:6083 ioctl 400454d4 20000080 returned -22 [ 149.947006] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.947076] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.947200] binder: undelivered TRANSACTION_ERROR: 29201 06:14:18 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:18 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="94e91c76d2ebe4af0e530000000000000000"]], 0x0, 0x0, 0x0}) epoll_create(0x6) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 149.947461] binder: undelivered TRANSACTION_ERROR: 29201 [ 149.947624] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.008074] binder: 6085:6088 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.008122] binder: 6085:6088 transaction failed 29201/-22, size 0-8 line 3199 [ 150.008502] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.047020] binder: 6089:6090 ioctl c0306201 0 returned -14 [ 150.052021] binder: 6092:6093 got transaction with invalid offset (-5772229533224867436, min 0 max 0) or object. [ 150.052068] binder: 6092:6093 transaction failed 29201/-22, size 0-8 line 3199 [ 150.053860] binder: 6092:6094 got transaction with invalid offset (-5772229533224867436, min 0 max 0) or object. [ 150.053903] binder: 6092:6094 transaction failed 29201/-22, size 0-8 line 3199 [ 150.057320] binder: 6058:6068 transaction failed 29201/-22, size 0-8 line 3199 06:14:19 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000b200000000000000000000000000000000000000000000000000000800"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)=""/210, 0xd2) 06:14:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_execute_func(&(0x7f0000000080)="66410f38148000000000480faea100000000c421e0c6881224000002f345a64583f0a064660f5c2636670f9d06c402f9246163c441ab5af8c40151f9fe") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 150.087603] binder: 6077:6081 transaction failed 29201/-22, size 0-8 line 3199 [ 150.104383] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.111443] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.128499] binder: 6097:6099 ioctl 6612 0 returned -22 [ 150.135319] binder: undelivered TRANSACTION_ERROR: 29201 06:14:19 executing program 4: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xe21) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000600000000"]], 0x0, 0x0, 0x0}) ioctl(r0, 0x80000000, &(0x7f0000000080)="dde526ec9945d8c84d02240552577d84342fdb54dea6f6fb9a1285afb7db23f4f93cb460df5e64349fdc50d1c3806a16103e6d74e0bd7e1110c23df17fa8d1280eb5b5e4bcc6d19d755ab698bc51fac88088db0ebeb6cf01c43bcb6ba18a0a4c5f6761e773b3d00214c6c6069123eb234f670a642d3e6173e08f375409a87520cf8eb0d7f039fee0053ca08eea5efa083816821d0cabed607b48ea3e2b95dd59d8a938d51649144066079b4d88f78bfc5a0cf2edecb1968cb4d2c199f6bc7bba402164a3bb5dfc21decc52281cd1aa7a3428078b297b22bb84d39c50c196") 06:14:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240), 0x10) mmap(&(0x7f0000132000/0x2000)=nil, 0x2000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'nlmon0\x00', &(0x7f0000000180)=@ethtool_regs={0x4, 0xfffffffffffffffc, 0x3d, "eea91bac4e170659ad5a3aa77361751d0621307cea3daad947d474c05663ae7e9e0523d1f7d0943be1e392944cb9d9306b4b17ecb91f4996528bae47b9"}}) accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0xfffffffffffffffd, 0x5, 0x8000}, 0x4) [ 150.150075] binder: 6097:6099 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.160440] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.173360] binder: 6100:6101 transaction failed 29189/-22, size 0-8 line 3014 [ 150.182767] binder: 6098:6102 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.199929] binder: 6097:6099 transaction failed 29201/-22, size 0-8 line 3199 [ 150.208679] binder: undelivered TRANSACTION_ERROR: 29189 [ 150.215505] binder: 6098:6102 transaction failed 29201/-22, size 0-8 line 3199 [ 150.225643] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.234105] binder: 6105:6108 got transaction with invalid offset (100663296, min 0 max 0) or object. [ 150.242189] binder: 6100:6101 transaction failed 29189/-22, size 0-8 line 3014 06:14:19 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:19 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:19 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00f3000020000000"]], 0x0, 0x0, 0x0}) 06:14:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="9e210000", @ANYRES16=r2, @ANYBLOB="08002dbd7000ffdbdf25070000003400050008000100657468000800010075647000080001006962000008000100756470000800010075647000080001007564700038000200080002008c0000000800020003000000040004000800020008000000040004000400040008000200030000000800010005000000"], 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) [ 150.252003] binder: 6097:6099 ioctl 6612 0 returned -22 [ 150.257549] binder: undelivered TRANSACTION_ERROR: 29189 [ 150.279902] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.294432] binder: 6105:6108 transaction failed 29201/-22, size 0-8 line 3199 06:14:19 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 150.322598] binder: 6117:6120 ioctl 8912 20000080 returned -22 [ 150.330708] binder: 6117:6120 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.337944] binder: 6105:6118 ioctl 80000000 20000080 returned -22 [ 150.348089] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.352051] binder: 6116:6119 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.352115] binder: 6116:6119 transaction failed 29201/-22, size 0-8 line 3199 06:14:19 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 150.377815] binder: 6105:6108 got transaction with invalid offset (100663296, min 0 max 0) or object. [ 150.389433] binder: 6105:6118 ioctl 80000000 20000080 returned -22 [ 150.400879] binder: 6105:6108 transaction failed 29201/-22, size 0-8 line 3199 [ 150.409442] binder: 6117:6120 transaction failed 29201/-22, size 0-8 line 3199 [ 150.417343] binder: 6123:6126 got transaction with invalid offset (137439015680, min 0 max 0) or object. [ 150.417409] binder: 6123:6126 transaction failed 29201/-22, size 0-8 line 3199 [ 150.449565] binder: 6123:6130 got transaction with invalid offset (137439015680, min 0 max 0) or object. [ 150.451098] binder: 6127:6132 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.451162] binder: 6127:6132 transaction failed 29201/-22, size 0-8 line 3199 06:14:19 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:19 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:14:19 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xfd, &(0x7f00000000c0)="aadd3ff1ef2b7b14cf78045b79e1007d4c87dcd8e96c76c650131b97e652a115c4cee6b86fc3d5007d8a07184f0de21c1fb98a674559c697d4c68c96084c3f660bc1ace8e159e8f5098731116b293c6519d684e5a41df47a312f10ef7d3a6a57b4f09765ec954175eada4e2f39c9f0978d1cfbc0594a3b5cfe3fcdda4d03adcb3714fe22f29f2a51532c1244150ea744795d") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 150.459422] binder: 6131:6133 ioctl c0306201 0 returned -14 [ 150.482315] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.506774] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.516219] binder: 6136:6138 ioctl c0306201 0 returned -14 [ 150.530566] binder: 6140:6142 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.533514] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.533782] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.552439] binder: 6141:6144 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.562620] binder: 6141:6144 transaction failed 29201/-22, size 0-8 line 3199 06:14:19 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:14:19 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 150.639241] binder: 6140:6142 transaction failed 29201/-22, size 0-8 line 3199 [ 150.640138] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.648820] binder: 6117:6120 ioctl 8912 20000080 returned -22 [ 150.659799] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.689388] binder: 6123:6130 transaction failed 29201/-22, size 0-8 line 3199 [ 150.696924] binder: 6140:6146 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.706035] binder: 6117:6120 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.714904] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.726357] binder: 6140:6146 transaction failed 29201/-22, size 0-8 line 3199 06:14:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$rtc(&(0x7f00000003c0)='/dev/rtc#\x00', 0x3f, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0xd4, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x20, 0x40, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x4, 0x1e}], &(0x7f00000000c0)=[0x28, 0x48, 0x78, 0x40, 0x68, 0x48, 0x20, 0x0]}}, @reply={0x40406301, {0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000140)=[@ptr={0x70742a85, 0x0, &(0x7f0000000100), 0x1, 0x4, 0x20}, @fda={0x66646185, 0x7, 0x4, 0x2d}], &(0x7f00000001c0)=[0x0, 0x28]}}, @reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f0000000280)=[0x30]}, 0x3f}}], 0x3, 0x0, &(0x7f00000002c0)="8bbc93"}) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000680)=0x1c, 0x80000) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000006c0)={'mangle\x00'}, &(0x7f0000000740)=0x54) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 150.737334] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.777598] binder: 6117:6120 transaction failed 29201/-22, size 0-8 line 3199 [ 150.795926] binder: 6151:6153 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.796983] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.800951] binder: 6154:6155 got transaction to invalid handle [ 150.800961] binder: 6154:6155 transaction failed 29201/-22, size 32-64 line 3014 06:14:19 executing program 3: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0xa52, {0x3, 0x0, 0x9, 0x1000, 0xffffffffffff7fff, 0x6}}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0x4}, 0x1c) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:19 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:14:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="17156a0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 150.801289] binder: 6154:6155 transaction failed 29189/-22, size 0-8 line 3014 [ 150.801685] binder: undelivered TRANSACTION_ERROR: 29189 [ 150.802912] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.809977] binder: 6154:6155 got transaction to invalid handle [ 150.809994] binder: 6154:6155 transaction failed 29201/-22, size 32-64 line 3014 06:14:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockname$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:19 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x511000, 0x1b8) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl(r1, 0x8, &(0x7f0000000100)="4a3838b605ced77e46910d1505d8d0d272208a9741519a309d4ede6280321170b12aaa51dfe51b04d05e9de44f6b333967db843513bbb9f1a2d977b1f0b3a371bdf4e6843ed40eaf0de6ab40738ebc60ecc008e35c1570966a54d4cf9e26294da4de1a48bce89073b6bd58c1df00ea8d9daea9ad169f2dbefd4ac9e42d274e829031bf749dd58a59d98b5c7b4c1b7d62a7bb1da4de707d8df87ee5a0") write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x0, 'memory'}, {0x2d, 'rdma'}, {0x2f, 'pids'}]}, 0x1e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:19 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:14:19 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 150.885866] binder: 6160:6162 ioctl 8912 20000080 returned -22 [ 150.910245] binder: 6151:6153 transaction failed 29201/-22, size 0-8 line 3199 [ 150.922313] binder: undelivered TRANSACTION_ERROR: 29201 [ 150.953746] binder: 6168:6171 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.957593] binder: 6160:6167 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.957664] binder: 6160:6167 transaction failed 29201/-22, size 0-8 line 3199 [ 150.961370] binder: 6160:6162 ioctl 8912 20000080 returned -22 [ 150.961534] binder: 6160:6167 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.961597] binder: 6160:6167 transaction failed 29201/-22, size 0-8 line 3199 06:14:19 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="056304400000000034634840030000000000005f050004000000000045484a47552b0d15000000004000100000000000000000000000200000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="8561646600000000020000000000000002000000000000001200000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0400000000000000"], 0xa1, 0x0, &(0x7f0000000180)="01d33b5ca16cfa3b6e2fc3c5539cbcfc3b3bc56573993c01e5bfb0545a6da7cfcbde5dfea5ca250db2d01dc7298c895cf5137ea19ef4af6935f0889663081e52881f0fc80403bf9d38b3bf53db39c7e75591705dca45a1969089de782ea4569ecfcbfaecff7ec07a3db7a748726befba2eebaf2c1d6ee2b0341019a78ba6db4d48ba87dd949cba1bc618a476a109758a11350be14fbca72a3dc15b6760e083687b"}) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f0000000080)) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:19 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x20) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000000c0)=0x1, 0x4) 06:14:19 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x7, 0x80000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="50b7cc65155cbc2173890decad3162b22ae8c6df81e95197ab19aaa13ede2e654f7346d7e20ad5dff188e64fd99fabcb7d7d4b2974389a878f5133b03713facc4bbfb1a16d231ed1f3ee92f6b53ea18a1e9f28fbf60a8c04a8d14b75bc2df5993c67d66777bde4f383c8d93788702775e435397335bc3986a4a7bcc06d5e94f8066000c1340b819c87171ae9c07586c05cec03d3a4ddef7527bb81bc13f5fed813d69e60cc7963dd610a05a4b4eec51644d68a2f22ed29dade2873e2a2701b0b2ab2da3568e905555f457aaaec121d8f84e6522b", 0xd4, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r2, 0x20) [ 150.970952] binder: 6170:6176 got transaction with invalid offset (0, min 0 max 0) or object. [ 150.971015] binder: 6170:6176 transaction failed 29201/-22, size 0-8 line 3199 [ 151.009279] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.009338] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.009408] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.027993] binder: 6164:6172 ioctl 401c5504 200000c0 returned -22 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xf9, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0816c5fa9dd86457ac647d574c3426e291bf552c7a4619cbe9c43f1d5264b02940e5edfd75ec52e6b7035ac25a01baf0a0fa3894229dfd2a9c2e2f358e73a304285ff9877bd2473392295eca043a391bc77de5624e1ae2e81513cc2887df2016eb38b7e32e5a1d3bf142234985000bb0107885857a100a41a9acbb9e7"], 0x0, 0x0, 0x0}) [ 151.096539] binder: 6180:6188 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.106211] binder: 6181:6187 ioctl 8004552d 20000080 returned -22 [ 151.136205] binder: 6181:6187 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl(r0, 0x2, &(0x7f00000000c0)="04d81e123c08000000d072058bc2603a715457de1cdb948573ab1d70c616cc587af4a565b129e5baa3d661b4d8c053aa1b9652a33f36da1b4cc7a2c24740035f15075ed2867749709f7a30f4898a34c400d297793250d5d70b04a3518a87686040fe321285e3214ee3768d91617ec5fdda88fb7bb877ea3642ed3e546b0400000000000000b9be109f45f3de17a3a1ff368cbed64ce7193a9a81cac967a0067217c3e29eaababd56cfcf98cb354abd6bb3c28165037d2de88ce321377b625522aaecf917d02ae3211ba8a2c4cdce5661dfcd71ab374caa509ff27588a81f76845fb969440e568fc137eeb8035cd2a287c48c9e2eee8fca80d631b3131a7456579c89a8e21672c88c526753fe65277a8984988b5bc7047b72c7690045d3b1da7510a56fe18566") pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x80000) getpeername$netlink(r2, &(0x7f00000003c0), &(0x7f0000000400)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 151.137473] binder: 6190:6191 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.137570] binder: 6190:6191 transaction failed 29201/-22, size 0-8 line 3199 [ 151.138447] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.143529] binder: 6180:6188 transaction failed 29201/-22, size 0-8 line 3199 [ 151.144981] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.146322] binder: 6180:6196 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.146366] binder: 6180:6196 transaction failed 29201/-22, size 0-8 line 3199 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) 06:14:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="efb1c49c289ddea7e16a20b17a263d3ea4480d47df9bebd0fe7c35e6747e72a8262c4b496c533af02125024c"], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x80000, 0x0) fcntl$getownex(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0}) fstat(r1, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r5, &(0x7f0000001b40)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f00000001c0)="42d06ad2dcddb5505fbe7a7681f7421996ad", 0x12}, {&(0x7f0000000480)="747a12715d2a518e4811d434ded7cfc606693d56dc60b33e6ec19249f35add837edb9220122ed020ca1068cfbb4a912175da956feedf105ee371e7ca8c30a929a62a9394e5d87cbd28350c162342356b1983a83a8a7cf8fc28ff2cab427c009095611bd387578f94af0c6e2a298f39b50aaad12342e8d00553b2e317a2e28add372ea49625f98fccbfa9657e9207b4ca13a065c9ea6b3e205df8f7a743f64da35e16572c84b9714165ed81d2a77fa2fab6739c0ff1d847b6546542d4544edaba6cdff72008e7e832b53946fca191a59f51fb0917ccf31308014e5d7998dd0edb37c55d74", 0xe4}, {&(0x7f0000000200)="072c2f489574d47eaa38f8eff3df7d10d25e17", 0x13}, {&(0x7f0000000280)="51d0d659", 0x4}, {&(0x7f0000000580)="43e0b1f1e44d64c483a6ec000e579c2d1a00ee1e5d9e72b4014f830713b0b9dd4952e95bfe2168a864446d2724fd8f184889b230d9335577264a0cc90f2ddef2419167d5ea819fd75a57b17f5a593ead083c301946d1182388eccf87d26d820d6204f76bc392ff727ff45776a13bc9fd59eedb4d8e52884a813618bd4e95069928665b2541a4833b2e143205f2802312d6dd3ed7f29d17722706c6b2da7313e5bc5ad1de1298e71ccab7af1a39bef3914a5252b15715216ca6ac60671137df232b1d6ba7ef5171d2bbf24f2e43b63c4eed8d668f381ec3efdfe52cfc93", 0xdd}, {&(0x7f0000000680)="6163c6d73ca9bfbc4d09eb505b5845729380a89828bfd99425e9a7d0f864733aa93354af1757e2a8240646c597382447710a5dfdddde0ddb44403e29f985de9b620b5f9b7ca0ab91ec8fa02f2aecf8b826e9de11307bd25a8863c2a7bf470c755de59d0c1aec7625e2f926e97f608d9c6cb8125f1803184dad8a3b25fa6ccb9cd859ca782a1b05f6fb58b3d5f110c45e6d1643652c56dbf3cc5c77d651345bdc2b2a0fa65df722439412578e98e305f47839c43e96296f106cd83dd830851408eb529b670dffb33ab45c72df3582ad9d61b557fadd3e432a99cb48447c55927ae8d9e702bdc53f4afce0626b12e35a210cfb23be59d36814b446cf875de84c61477c5925389e9c55f793b0409df94655afa08324d0335003b29aac4a67b285ca2c04c20e85aa918013c7e45d4395746413f0eaa914592b37f6ffc1b3a48e592c2e5a3d133723daaf6ce9df9025029cab8f761461eada19446ffb6bd8f48760c2823af10b417811462e060efb9fae3aebf36eb7fb2470b27b77b3d080f31d3dd07d1eaaf6ac7cc79cf4998b4a7c979ae59cc77828179ccf06467e60c686abed0db05771418794fe403739839cd3e14ca465de5ae9dab26f498ea0dc67bc76d64685e00faec03601ca671e5897326f331d451b6be23925233b2783e4444db79010a259201a8dddb0c21ef041ea7f4553ec69c42676554610c081159db001187c838767206563dd0f9728e74cc20880fb233f86544cc25010c45bbd458ab3b0de03b0807f96bcb7501bbb61b5e6085a44cf1d7fb51a23a716372d742ff59422b99f827e97dafb852be729462d0569e0dc47b994e97632fb13b99599e5730c9046fe0e554e500aa996664d5a4bc6313afaf4432bd21aca1a0d3630d5d6076013e9e31f471dcf530618d682be7867b91764aedada1c87d4b9570cdc33c284cf5b32fcf1fb63f4c8c22ebc96e6ae8ab27f6414f68f69a2bd59ef87a3fae143e3df56aa8903ea74d550d85143b58a5bc7491343ff983f27b2d983ae54a3435204fd0b0c760f9495fd3e1c1e94da59d6551116fd26e5be4c7069d17d1f96c6931edb217e16786a836d778aa5d3d9a33694060cf5bc4ca6b78ed2ed7c6f65bf7d471d89e675daee614c758ac521cd9d7b0d614e40b8077b5dd400e2e9e604a6313c9bd52da8048173df63f212188fe041d9ef44c69ba53df1ad639ae02ef9ce8aedb64223c313b92214cf500a4d45d9836c53e6f59f927a1e845aad4800f9a4b379b60427f8053957c45c9b21fe1433199cd477fdd40af132287f3e0fd643711cf51244920818ee53abaf69c4f5bcc3e8876c06c273065d4dcee1069db801bfa3121341e74ee89baa1bce9f1e8db2f581f21ecb491841ff0ee487cb4f0413367d7905199061a98feba37a767747e0edc0e99ee3a8d3ee38ab32cd45629cf4a0e081421fc755982646e16fa908b6a2329a746b7f875c70614436dcc11946b0405fad6a4d92d5cbfb67ed909c559ac8fdf1ec7b3ace01e1bc27876fb1b1490612ea339d71f199d822093a85c300da28ee26778f873ef1cf7bd6b9ef247328b540e1595573cc2ebc0aa0cebdfbc2c87bbbd60be8d981aa18607c722493acc793cf8c344b5697761e2836d6d47668aab6e0ad0dbd8522a6ae1f5dffdb94c8952d0ac83c5674f97b6ce4ecb8546767560349dafdd259fe26f18e204ebe69fe5ddb2fd079ce6a1417c15767f7654753f804c8f0dd0c078512200265c42805d0f464b95594db02ea9136105315fd5e4e0d7d7af095ddb3f46b7e3064a5fb8653aa0a65bd1b1c9bd4a437e3006d6089dc494a7f535fe6561656be3ae39fd1f74d0298e51679cb16098b46e437950e2e04ced00c08a8c1ad4d2b14f3ad41703ef1f8dd1a02eff887b1de9577ba66a48d458ca2dc68fc499b98d6582593730b02e296a1bb0c02980d9db75c53e84e4395f74dcbecd4e8664b3018d5739972bb396b2887f803f495cf4f5c987aacf2fceab47a650fdded828b0f9ff27bfd37b8be5d6c51e71c48e2ea2e262821ffc0f1eeac58766fe3b8801c0f9fb95d925052359560248e36913ff61d11e014a2ef9fc9b743375e9c2460c409a791e0dbc2a4ae484d9db741a7e233008a4b77c7c1604903e5287e56290bd9d6f5836939d2530d34917e9a7002d970bc0c59d2dc140ec07b0f6ef3ec2921de0edb0184b2e273fe41de08ed9167a1cda4fef16855b23fef84fff819d83445152f4a8a55c9be615e3317054d850dc2510ff6ba009628b7e886d1e69e04a1d2a05ba01641a987ab072a3a2d835eaa1b10f030fd9e07031c14b985c93b307881206a0d18a089c50f5cdba88e2b993f36f920fc133c60290f11d4332579e57e2e64d13019bf021ca3ae33bb8d50427b5f7324e8c1fbb582fab998865b785eabd021dcfea2ffdaefe46516629958c9392c4c4bcbaa592c4f4c14fe101bfb991f6ac1a036725d86c7834c914b13c392e77af73a27cfc8b6b0380c59fe2d4ac4ff2d04daafaaa976a25628df31eff1baac9d055443d96f218e39ba6338db5998435cd897ae9b7a219b7e0d1d573f3f6cbb9436f6d032687b172ac7f645a6f9cb9e6f26dfc400572d7eb70fe3e9b94dadb33730a6655bdd6ac71daf6cb092f5e363c1b7bd8e271fa692ae0a929036a4b9213ca744928317ae0a11885175ba80e244013167af6be13ed8fa6a17516bdfb5fb8e8aabb1f24f3598f3132babb496d45bed832535efc17dd1680009b14e2768dd06df4367a7d325a6aae93bd597f54c8b17f84a7d0d556ec185dd503a41687af7b96dd838518a4d1e84dcb2e24e6e412f845c65203e44cce889b73c86091fef2feeba1d38b01f4f82b138c7f65af0b1157289972da3cdff6f6e9679aae64993a7ea5b2b02d0aa696891028156a1d3a93ac9ada50ea16cc073c4cf1b87c611ebd7397ae978c23e6ac065355055b5db63cc7f9dde88b00e2a20c6721593fce8a0aed26fb12b3cc7198dc8bbf50c670f76b98c0e2529ce94b0bdd45141eb4b03f8bdd37ec417600333b5522a1a018323cddb004b82451735f92209526759634be78411a5305817c1947dc77e6a0f6b4314fa10bdd53606bc0e97f7262b31f93aa496acfd7ae03686e935baeed2f05053c83b7d61805aa8515bd1aed4246858f5a0689b0729481c14588bd63f62197572e0fc17247bf1d9db505d7b5f84410de8ad7729a458785d9f6ddbf95deb62ffee9d1d93c0ea37f8b23bf331e5f354469c6c1189977158285950fa28071cd42345f564c9c65ace01ab9a4ecda7641aae6a0cd58714785067cdbb0c88c2df36825f315699dab15bd54806ed0df680631948c2ddc4bac5ad5066be622d1f7142dec1e7cdb3ac1e5cd4b36a6fb6a8ede5fd21bb14bfe151ff99f023ea7838891c45e34755956a2c5f91819fb1c270815940f0de6112f61bb5ad934d24eaff980e532fea57abf16a30b0453f4b8dab68235c19f74c2ab723301371842b4663d7be26dc9d654d6a8ba1ffdc1897404d7f0894097405e3c2f30371575b6c5aff4adee83b3aa19a02b794295aec52f6ed91cef92a6e6f86c3d56e410f744371a60b39d7e1439bfb4eda4739da71d6dc030f398968cca4fdd627910b1e59e6dd6cbb8b4a93278309d4157fad971ad5d778415e3d9d3caed1a1feab584fc91e2a808ab389ef9a9132ec34b79434b644c3c548e956728f2010b712617a25cbb825d4eddb54ca5d35675be7687b50d62df9a6ca588c7269d129dfafef073d1cfb7138fe8eb8a75c85c164eff26b5a64e7b993c04f2e30bb80d07fe2ef9dfb4204e712c53735a3bc5efff07fccc3d7b31496ff9395f6f3ddbcc65d1ca7f8c9d2070782b7cf32d3d2845a50e1f2c5c42f597d874f23c11f9971e41181eba433916bc25a4e032c62e5745066070b396b7964bfc158ad2ad0c04b47cb5bce55bdd7b4d160fcfc110e257f2c5cf9dc2b4fa66c6a9cd804737c77f099752f10cd22102bc4aef45f8c52a44a057d30cfe266ef07ba02d41480ebfcc38b331c31940623f0153a92b7d01d9954d34d93d887a9ad457eaec1979b3766c4368a6591560210afa2ae2848d7f38f22e0faee0b14b619fd9d19293477c0dce7cdd9b410c1cb4bfe35157bed9d82d6329883adb19aa18beaa3d653acf9c57de4993ab457c02766edaa99ca43af5f86545a81dbb838a4e84ffa6775de7ff8808119c49ecf33813ae03308427257dec19169e5baf05b623989b0f467b4f1eee89165ac4f7be2e8aea79106a3940608742fdb1071126c44e453dc43b48ef30bc4f76b6c1bb59e878f636458cfacdc14276c3db1fb0b149509645f39845915085a50374f8c0c4daf7beccf425bffe111e2c55a24162eece6ba507844b689690158870cf981a2263ed34a0604e0bd4fbb8c97c642c7468b805819dea6098be23f8c2017a8bcd4e7fbed1eeb89e89978dfd2621310d29e6cc8d8ecb3b1e8b2b1a4988df8078cf9296e9cf66a58a474c79f43e6bbe25862a7dca122777673b88bd931a8d4972f060064bfb66a2d89dc9b9356afd0cef1488b766c2ab2f28220b53e7f960b6de355dd035c0e24e842caa9dd2ee8dc002d192009af3387fe61cfe4c0afea7018d5c12e775eabc1ae83205b4d74aaf6559ebad546d0673b5156d2c4c18944aebe000f0eae48cb65a17be931b069c3e7ea39de8c519b2663f8eec6a0bad1eeca5959f4d5e79d10e71608b72de88db5a0184251d17d08f8741f651c1e7b82c6d6dc10bb627e517caac647e2eb4e76a8ed1404bb0da0a3930b5fb20a8e1007d36221111d046235297adba31a9a07beb97c1085e7248d6757bbc48e5b15f0cf6bd842219fc17df39c9aa710750455ee9d0b29d76e60197657f83e6c255fc463ce19d713ec68cbcdb65d092e43d6242d04f5676fb6afada93e652cc5251302578d3a3660484a9b260ed9db3b5a1445616091fa79f70cf701f9284d1cba8a85c4fbc19011efe46b08e44802ebfe51baf2476e1ec96f62ba620281145a7ce6d8320de4aaad5ee23b337a01069506314b16e4c6897738b3f6fe4333db80fbe2b231828886ba6c60c731ce2fa56a45a4614b3ad4844ab4570e704d054fcbfaa5167af261f094243a7f2599ff18b36c2593aa5ed748ee7dff46d12ec05f553beeaf46e11508c9a2429d0408ebdb0c8e1fb67d44855e2d25b30dc79463fe35b923f458f509091dd3969f7a379a16c36f6cf8b52a90ee710e867bcd6ce0513079765cdcfb978ccbfdad33637c5cd9fcbce0eb5b2910e01d9e6dc0e4ab5d66941082634545adb23c56b29ccc95c84dc63d05e5656a9d0cd4cd102287d9bfc18decfeacd259671df3a266a8ed6b51ccc2e35acd6b80dd19f2b9cb868e7f5bbcbb77d88262c6de9d24cad42271cd300bf1f60f3d8703dcd5f338d54e65e66d83274a44b1e22252a9df553b0f05222b76a52ad9109a0e83b59fdb750ffbb8cd90744e05544cbc53a946792cb5b932fb886f264819c0704800aa696b0ae760eb55ea782eafd8581dd757fc2c481237d03c4887eb57732dcc4ee756f4ddc36700d9a1ac48f1a4479ede52020c501eafab6cb562a1b0aaf80e4b5bee509e98ee560033e2eaefbe8c06a0aad38cd8f8783328341bc8ec05ca0f9b47d89d50c66fdc0ee48acde7bfbe4b21fe2201a2ea5e8600812e18411cc255329960e319f4875957a8dc2dd5513dadbfac964a04bf2280cf369241ed4add823e8c54bcdc00e6aabdf121a8bd9c8557f0065a84983deb8889ff929c0686582d4d53d4787d61d6f9f53104f867cac1393d1e", 0x1000}, {&(0x7f0000001680)="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", 0xfb}, {&(0x7f00000002c0)="7044122923", 0x5}, {&(0x7f0000000380)="ea5ed268ce0e0a2e615cd41b004f95dde862ff7990106d079439a85af9322b8bfe1b1ee875914e700ad4fc4f00772f67486cbe7a58ff", 0x36}, {&(0x7f0000001780)="a55be846384c1593877d047a0e2e34da0b86f26c8ecba0cda667e547c1e94b19f94db7bdb87a103ad42b5db15362305719de798382ba249a5a507f231362c060c9b099ac6e9dae75398cec0b930bdba055d623edf1839a084dee6a6d2bf249f32c95d6f5200f4f793e3c9a6aba2e32673909598ced94e5f4e592c9236f7c53024e78e2ba121e5b56cd694571276156cf994ca88fd1ffb104936f0681d6f15a0a0a91a3c9a7cd1199f4e8f87db226da8a4e8f356ba33147b9ccc233ce6497911605c7ca9bd44bb3c411a4a0", 0xcb}], 0xa, &(0x7f0000001ac0)=ANY=[@ANYBLOB="20f7ffffff0000001d00000002000000", @ANYRES32=r6, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1], 0x48, 0x50}, 0x20000000) sendmsg$netlink(r5, &(0x7f0000004c00)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004a80)=[{&(0x7f0000001940)={0xc4, 0x28, 0x1, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x4c, @uid=r7}, @nested={0x7c, 0x5e, [@typed={0x8, 0xc, @uid=r7}, @generic="a3c1f20634e4cff5b314aad0f456ec493cf1e0f992bd61d7314706ec69ef083b4de213a27382feadb803d0566cb144a47d569e1510ae27a34ec616c44cc7ae5f04524b963128b3bd4657aa951eef426f317d20ef2a7ae646cd2ea65c40c7e37dab9a5d1162799130dab06d2a842a"]}, @nested={0x20, 0x31, [@typed={0xc, 0x6d, @u64=0x2}, @typed={0x4, 0xc}, @typed={0xc, 0x47, @u64=0x401}]}, @typed={0x8, 0x7b, @pid=r6}, @typed={0x8, 0x76, @u32=0x8}]}, 0xc4}, {&(0x7f0000001b80)={0x22b4, 0x31, 0xb01, 0x70bd2d, 0x25dfdbfc, "", [@generic="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", @generic="f3aaf60de6d485e896124c25a0784c47b8039d0038fb5667bdb58361ec68b53bb788498a2ea43b27ca15e0288b54438fac9584cc7f67fd40372df80f3e1f9907c7866873b7626d66e7d49a7c4e99944cc43cb491652b9b6b5b3f79122c814b555461269ed3615d4b4248c16cd64aecd9429dda741f4b23b5c580066be23d20119d90d061726747fda6fba799051de7920ec8707d28c9a5d6f5c8ee307212514d1e0e51d2e6e018dca064c51ce6cb4188130a5616f0709526927b832130b9b272d38551dfe51d49877611b160500a828d81ef266e5f983013bafbf5bfe40affa9af3e20e2223c7372c6b47f1ec1e9b6e87193a5a9659800b69e230861d8ee0260399d0bad40502d6bbd50e098a3daf5b51e29da57af235aa38148fe90a8f6d1b27e46b3367f07c953305d38f67664e10cbdf0a82e80fd880b2ab0fac61b48b26632d8b2ca02169abf75f4c368fe2893d155ae3ff1af33a545c3ea4f107c3e3d6bd200c97c4453c8f28f0a75c83b96996129846f5c43843199d982f159e099ee500b5c2016fc19312769d820a4fa32f4e210e41b6935b8e60cdc518d0491d4ff226b8125f4a70140d3705adf5ab46d195f50378c39c00d27282df9ce3a3dda9deaf8fee2c1c86129f8656068148bd3b381502ec2d457ee0f2f844021785a99dd591c058432b25e5cb1fbfe031809f7db2ae7e0b17dfc5123d3678d2e991ca57f6aa071726617e7dbb523fb07fa65ebbd3567825100440a80e7728882fcd8c12a67bb9d5ef8a07c1026f3e4ec41acd5fb757550067618c1f3cd65259af724212a7466361979d714f609bad5784acdc08037c813a8191c808d686c7bafd50ed485877c4bbc25c5351c3c57100fef89c985f66e6f0101779bba85a8136b6230f1d251ea730f9e007eacfbafbaaa7dad23289be58f28a07df95a695461e75fc39439bc687957d2cca21fcde076cedc9e2520c35e1f128a20436d9c13ea6d0bdbffc26dc176d5609a1d596971ef65a48429b4df88d272020ceb16ef796bcc4b52ace45111218f343b9febb62b2cda2696412bec228c82acfc5734527aea2e762b5a45fa3839b3985e152dc3382ca914645e2d9375f68762d7ac0d6e30a61d37b4175d91bab862371d8d92f7f823e8d3075a4eac56e20bbe91d190cb21e8a4d14cac7fabb4963229b38b33ba82e5435be1da0a9b070bdf7e11d7ca942cc2375139d021bad4d3c1e8694aec4ab84d1453af0389a3b056a26c4920d99d8556a0b8e65a7b043c22a6800841eeebe2e009e1c612fd8f4293a18f9b898ad7abaa81c6c5608a5a73985a2bb617b9d05d17c9e68757668f6aa86b070672e8e2b830874a1adb90f2c4279b57dde836fca688b2a9a27561ebf230d219e4ccb732ec6348463e737abf3ba8e96e1c3e1280c79a0fc77d468ff5352d8bc4ed22abc708b9316bfb9563976d48812aae3c2aa4ad5944e2e345b99531c47373a6853e5abd0667e7ef0249269158b74fc300a572cf99baa90b6898aebf7c8db9252dbd17371a9c426ce4b46bb1db15bd1cee838cca2501adc828d6678b66132e7ad65f9b47b07e60016044aa0d7972f666ed8ded8f33bd9c3cf705883c26d305f3e9315fd23b4aec14da6a45400f4f43e95947cc8171984d8de1d0f1544399bf41fc0e54107cd82d03f18664c55c0c79a3919245ac24f44f864697526e1bb176ac4480254c0dedd7ba0cdee2da27cd313c22af40f2c7201014a0d2ff62c52813f2986edf1012eae29a75c74c5f01ced39790c767ec96e0f66a660e5f4f6448676876a867e1aef9d35bb702f86f8c0057670cef8c3ed695cf911b58c2b680d2a16e1cd83d8f1a6520e2a6b27a0b07240d91ffefaf4a23abeb10a3e1d1f9035ac43bdaef1fdd9be50d55f0b9aad04fb1c85911e3e8441141328398d1d6f8348811145140fe77f89b2d070e220ea03efe7243a89a97c7f1c5e3be2ff3baa094dc49a3735bbd94ad6b71b39a88bf419e5df09386e12a83bb0e51476386c1274ccee1157a2568b52542e5fa0d8d8587866d4c4a75b7913954d8b9080d8c8d6fa5db1e516e26bf08e3762e1fa7006c262f041ac1988e397360619ddb44b08f387c94165115bf34969380066a8fa50f2109453154e18350bf19f4b1f598040adf00916a5c226773126d5da557f5c181f8a990ff7e2147067fab94802ac1466da0da9406ca4feea7bcc521b0ab210e1ce952d7b089a4197fc641c308964492a5abde2009da4931db129269e95f8a621d79e27277034e5bb7b9ed636353e4e6eed75b149eea04d9eba1757d3cc8e72f3f1e795f364e3ff6ed58bbdb7f72c1a354d313b2a5f78103579e2fd8b5e50855841258e4a04a48e62b574f5677d94b49483cce58831e509d19441ffd7b36fbce389c3c09ebcf9806ef8eb6d30b0dd07419eb9bb5e823aa10fe42b8b4d91a4db79a07e29c410cde5cb6f2c580b225242f3c92fa34f704f2f76174be4c75774589f19f88c07d7098e141a62fe10de83b81f952bac8872e633593cd9847f7a27cfdca67eb7a35fcef68149807bde3ecef48309da91f3c43ff4793136c834f8d09a321956d0bd0287a90e16fdcd535517d2171e21265c949f7832991b1245e7d5e90f1a67ab1b899a1b01e72f289d4506deab181c249daeeabb53c65b2c0be1a56dd557bd7b37babda9118c237440e5820a9e6bff11acd52277d8508bedcbe25253caf5bf82144a4e7314d7a4a1ae958c7d94e886d1c1f7a3a67c4c63c5cac6792f61997ee97b1950139e22a8552811307d2c66c244e1e3c10977de82ae4db192fdf1458ea0df990bd42d8f0089c73080d07582fe32b3fb5689cf0635e36334daee471dbf0eac77ee61c7a1c831094d9fe06b03d6d69d5f796019667e915db1b75c00880c00613fde5f46fe8a6514f052f0a6c6f420acba423ae70f80e35dc8bec5b6e5fa1c4e1d5d239bbf374095e933d99dc9d29845ce6e8af2775efe340c5f68c427a2843baabcc48434285621af782696ff138e40edb0115c28ccf98e0c912efe35a11c1c8fc35b134e8fa33eb8061c47d2f0fdd7dcb9a824ddde3e8ef2f663d933896a2a4726ba643c6cbc67302b7cae88d7b01fc8dd6c243e0e4347a74bbe45330fae41f6ed6f121b12a9faf904d80cd74ac8d81b66feddb57a7c11a694346f140cb5a9c5d33feef39c4a9579dbd83b2280a8f057b9315e107c8bd827b5e9219b0138376889b93f340bad5107f96f7213f337409181cff619a1afe4690a736a3ed4759396efe85904d3af422ac8f8faca336a829bd0ee437279c7f6b9dbdc9114f0b8416aa00d9a03678c15a01ba29ed689499c9d3cc33ad7940ea81a41c2f38655ea6f5f5c829555656fdcc7b46f0dffd42b0721de06016dc8a7d0496f44cd05b6c6de1fd4315adc949b384cf12428c8c7a4e05c743c8c5a16c49c0f5248259eb3be006f75c7cf12ab319396d51d720a59d60eb9cf69538f5eb2a44d192a871623f349b9d3df5353669b984e85e6c66157ad4d2cb241356d372e8ba066ea3fca52728385c4787af139cb6193a132906e25b99adc3dbb806ad1682cf7dd96ddfab4a4e34ecace0902b22b1154954ac1b86cd33feb0f05f5a309c663ca375b08f0fd6e50a0a52fe2ae7ec9c124e626ea3c73b65964a057c6ebb32160e528ba4e796b12f38e700e6d43fc3108879a416f8f57b4b3a7e46f13dfe6dac0e09e62b04de535b17aff047503189d4c47fabcd6ca6ce339e8bf65e903e6b3118413c4e719f0455ad58124f48bc2dda8333a061bc1366371204abb40ebbff263e712a80a12d515c23d700ffbc3aaacadcfe8e0120827098c6eea683f1e00ef3df2ff9935248e9570bb8e43ad8be570521c73a029aaa464e0f9cb2008104cf498397d742c778d742d1077c59fb50075e691bcaebd30b83a5f4d3de956593fb8be58078a6619c85ff0b196a1e7fd27489848648c1fb5bac46db0aafefc0755f9c25d02ea8dd156beda2d4a1111184d04cf78a2443243b9c589b79f72d55d1a90606559554af6f22d8c3c948f4b5326589b3ccd63eccf125b6aacbfde1ed9dfc468ce60cbec70c79f1d3d5123a31f7d37d2ba500076b38525c7433ae52e16b2fd0646bb64ebbb3ff08a19c1087accb338edea7d0e8f2a8472e13bb3c4977e53b997740fdb2b0c8977ce112dd4cea867d5927f99a18e936c71b30f00bae79fc242c6ff92dc7667e29658d8f17fcd947deda6f2520d99194f95c74ec18fb16623b5b9b16140a5d0618274c53b25fcacbb8531995d964ce42c6dc0a15d041fa679ac7548e9e24d70eec899d504fcfc018ac35f93658994cfefd719b01afa2136bfdb95a172eba233b8f47e419ffe4262a2ee484843d95bd57ea3db8c6e7f8e4836d8a52652d20e94c63d5b4e301a641f187c341197e9b360a08d09c9e824fa2cbb434078d39b5e9174059a357ac8d0d104e128fe1922745944078a1c3356c6ace5d1020a1558f17411d5c67c632d839ce08411fc7da5916f6199552a7187e42dee142e0694bb87fa3d77f1614a211893bf6c4131c57f5a82b13d1fb28041a4b57328c630d259ff63d91dfca21385ce002d0e9ab1bc79a6d35b2c8f084eea83b4579f61cab74917896eaa6b4873b61b7433cbe8f3c77d11dc33e2a2cf807c01bc9f1f6c544167b92209eeab40b148c7ba53276c6e28fbea647a6b37844d340b0ce0b8c65f3caaae136560929803b87606b701f819519c8646a899fe4971a81e9f574b17b5cc6050d959abb45351fe349ebe2d6a61d51002c6cf157a99278673a3c7d6d43b9c0df38bc0913e906bd0221175539ba4f4f3410955e1c6452466c026cad74e3bd89703db082e24d43d546f03b1a549a44e57acab399b9d65ef488aae3d40e97b41b89c838cfdd5f9b9cceb1a768940eb6a718a9a45a824b13f590ae858182aa1fda1e02211de7a70d6235121fd55e31631590d7499a061279731ac710d33554616a824d6c3d5464010b9a736fd3579eed946739c0c4fd62f0d1b346f3ddb3ff8cee2799b540203d0944f247992319ef5f5c00b1593bcedabfba8e89a0d1a26ff4a9f63cd0ac34429040ad888fa87bb185cc5c3eda92cbf5427b51e99cc60c3595a076cf7c92d5f396f7e44ca1498d4755c09547d472a4d11676194be3b336644441280f18f68ea7f862397fe77177a49c520dde362da51599a9d16d1ed1af50e909736fa0dd433663366d97315131f9205347c827ee3ba9353bb9ca5dc56dbac865cec72d894e9cd805357a32a6152815505293d1086b7be1ea3f9a65db7022476b9130eafefdd9f7a102a0fd9710633d471fb3429abfabdc7acd036f30f60087f32cd2f5a601cc4552ade8cf52f2fd2fbb8079670290fb7d804d7955b1b4c1eaa5130b1140da1104015aee3db7f0d056829653ad873b48412490497a25862714ff533d433806ef131b9a905a897dbd368e172bef989db830387cf20185c527261745f22981465231a33395265b5648ac66be3a0da7becdfa5712ae3e970ed15dd052b6e6bf26afe6a3f1bf7e597a19f402e86fb6cb6ed37a3913078b73d66a6f463443343f572650200a3cde3e524569b26eddf940c2da50e520620be3cd8ec02660dc62e33370c81885a5ac346b8a0bc8913bb88532e1153f4072f8a0eacfe9f5880e9de4f27239e30c56ef9f96bf717c7c278f0663502064a46f4d717aceecad84d03525e70280236a081ec4ca3be502bde06caf7c60c1cdfd90bcdee9a618b884b84844612b974c31f4e2eabf6a68024eb865948bed0795afdf6fbf6210aa7484b8", @generic="49ab7737b01fd856e93ca5d69cd8494b80632de3aa648fdedf28b9dc836943fd9fc4cbacebc65924b2bb8d5105b6", @nested={0x10e0, 0x20, [@generic="7a2de4c812ed9eacd157876d2e5d82abf2b499e66a742c929020c96ec2ea3fb81cea0eff1327c1a2b006245c36cc850fd6ff3499a2a209a703ea73e8e5e081eb70ce3358d13531c1ab982a234e556e354e06b44ae7e2646859e299b0cb33d7aa32472c2b444ebe27e36f458622f6d4be3c42fa", @typed={0x8, 0x28, @ipv4=@multicast2}, @generic="d23cc7868efbd5c17f6b9b213376acbe71ce1d3e3aedc8ce8b7e93a0b4c9eb6aba4b5466f6473036d207fff76b4c55c1b4c04315d7e697d0520c07d6f93339b7636e828f0a35ad7780229f57ca28c75230400bc3797ba6e015d9dedc6877cc42da1690d31015b3fc568d0d9aa8324485f93e7a201144029c7b1a0e57ce9863459138e9387dd227de63aab165cd28adfab67625eda33618d1577e9c6d819bc5e4f8a4ac020405861b0ede00fdd9152e50b9a33e378f1ac328752d4b737bbeae911c52663dd5372f025933204fa41b8f922f9c2eafe4e36f59ba6a88f3a00c54f474b69aedd9a1e2c2d3fb8db3b4a38e76a01aa76457564a9abad9b5cc563a09fe94694aab26472e697ae4593137c2e55dc6ac8daca7f006b88f0e2bc18210d890f2e29735c3e09afc3a158a5b32f081709c9c6193a6683fd121a1f0f57f7ae93ab326fa26212dd53766117e835321c23f1ab38fe7337a831ff14e0f4ddc9b5eed3a32c02e2e82996bab50bfe09a49e47bbf3ad75ed0a1d292e6fda5c61e617b88e725d6c7510626ec5ce58311a687fef7d07f3f7ee85d42e740735426e98699422900229d245356f12741ba42431e740f2f7907dae5af6916f9ed06b9d95d7e724d596809e47be11c4c27e9d8c58175d57554754a28fcaa095d3c6af54f1796bd77f8af1b4e90b4c7e02898e6764cfe098e5b200f196b32038c42be77f26cbf7884a02ece25fa0651bf16108152661108332d0becb5ce4b19dc62ca3ab32333b4911f7ec2de689c9fe3b25c8130b75edf453cca799a2c397d96eae1bd33dc22c99dc7e0af52ce4caf17a7c4e7c93eb62c343e4205774d557427e6db626f7025947ce13a1de2083b038a8d7043c38959cfbc5771fb1cf75024ea3ef073a986b39ec714a1cea501d8a599e5f4111374222f492a3baeade9d778f964bc7d44df3e6166530e4ab396d4c209dfcb1f4fb1d9c98234c49b18cb336bca061e23b910614e25c04c18f099abc0a30788afec1de378b1c879794ee7175c365b7fb87028c6060d5e8cf31d4fda0eb40fa1381dfd124d339de5525266610c457d951a813b30f7ad3b5d2514a08740e18c3f988c21bc791cc3d8bee9e8237c7f0a8a8c3f00f72d5a996be124e5d0a54cfcb16e5642b56250bfcf62a64ec256096ba6fd8d84acd395e02aa31a7cee0d79239d9560c152c3e4442b38069d690688cc741b22d23d4b957eea694ca6b6d0598018132555cdec41098ee10ee9c1ca11b54ff3539c1a4cb2538d35dbb6f48a3a749922642bf7503a28a84836e5d3f9468ada748bfdaed55543515ddb83203d8a77e80f9e061f5814f63a41c437b5c611192da8baad9e14fc4362f31eb137debb8ae6b96d9e8c2188fd1e1db9c22b91bd49cda71067a6cb9e888fcb8075d37442ba6c253f6e2097864ddc75505f361a8108368bbfb73f3b4e563a0aa6a858894d00bfd939f64b6070b51543d47db6802ee84619f60b930ad284cdbc39ca0470a368e34f0db5d56d81d0e493ddcfef2ee1b7f10186ecff2d5a00db1df35a15a27ea2511c4a8c8e3a2eb6ef440f4d7f7a50389a9002203ad663121351320dee281d994ec68133db7078a16ba03797bf923223bbcb3658095f0cbfcc6c4aaa89a47d6e377fabb27b5f897ccc276115348a751c32cdfe86f594181bd8fb168294eaa00b72a4b34229e2149748c8aa31f8472466da587fc49b9b3a4f131d4a003a3f54825df132147c5a6b6e3e7fea6fd6211cabfe903f203c53352acbc31f9167c577b25ae01b3296eff5d9363db457eecdd8fe37b0057dd086eb9497900b252240fa4d28853d9881c27012f253d6d913238f6c2379e99b447020bdcd05dc803d5988b6983337d98445d34bfe1ba351273bcb23205377d4bce3cb0ec402e3b7dda33e83ef0ffe983a33ca40532e8454665b2014bcd3587a833b768cdc03e4968e610790d127b2bf9a57993bd0fd3956896d33a8258ec77961360ae4829086083c0c8fe492110eecba5a1edb2272ba0c01930f236bc40457851140b31fe7a45022adad12b2938f5049d9d94453df987f891db715269577f08dbf61ff01956e600251c83c79ffad4db1dda5c93022060bca4cf5a375b08d4c602eaef9a31a35dffa1195b6ce62bb3771777cdd7201a9f28aae4f5127e5ddc907ec33463612c1d5957845c10dd6b724d6e57c25d55cc7c0ec345a27f5e233dbac7d06d30610040db8cfad7525911776bccd6d3edb86c80712fba3555da89adda422cd63167f9077c569f6374860c2986c4230a88414621ad15fac750faec63dd4888a054bf9d6dcdeb45bdfedf6c9a3dbf4f18bcfb0819b17bc4a4ea9c73346c96cdb67f809c83ec62dd617f833439ce6e306ee785f5f75361ec381e518fe0d19155afaf815cdd0af8035613fb5519292b4c72ff72f3524cb73e548a3b4b3ca27adebed9586ec87a8a7b605dba7c952600660cc9f382d2ef334758407af58b6acbd9c71357acc8fb048ba2c23206208aceaab7a21052f6a696f2dc883cde8b0cc899355d989843edd2bbac2f6da2807ab1c847c0fe043b91db9de1f198d9a52bf11349042205c020040b6b71827f7af3618ec4552f17fdb2fd47bab0665b154c9f2f73802fa1730cc89aefd3678db31cd9afc03a0cbd77e459e682de84ddd921e57d6c839903a845bccacd4fb4c474800459b7c5821d2eaff6d217f59d7910d13fbb2be91ab31bef59f73e281e0a1b78b9cb8da839c5bef7a9150f76b7007ff7fb2f2caf05b173d1975a2b391e3b13941e456ae287c6a332bcf94f2349730d4ce0840a333dcc5c386d303b76f55734d21c1e8bceacfdc75f4dc50db93a2212a896beae35d2540693a83190896159b1311cb98bfe3f087ce23c06b25f12778e819ec9dca62c65552171782df5b131e328aa5cde63471080e5b9440e0586dcbb5c70c1b85117d41460be6f5581fc6db4b2f65da65b2492b274ff6e42b68a57357dee4128f5f88d079ecc58a490dc19c23cc46d0693aabeca2df1cdbd6e31442e21d00e1321561a16cf78a5f76039f72b4779b7dac25015126b8b5f3a2b72e28f3c50618a18d5d2f8abaace34610704d4dda81398d445ab243ba98f5d08b1cbe46da5800cf591314205970c999572d087441b05a77df5376e99cc5eab161582186c1cbe9a1a7ff5948e886af82e8fe3b0bc9bf940f54b477dc7fd121ac7ea29b3cbafd28e0c6b30da2a2cbf3480fd73f070e90596243bd9b7788fd04ff209523b5286cc591d4b0c0364f5821aadb43ba0a9ce11b95fa97ea20c5fd5f25930edd45df7593626c20f8b1b6119a1c8821c02cbb28d9bbbd3eac347b816bfd07777d8708ccd610e07fd9dc6f0923084bcbae2042895f33948ef23ae91a8d0e17f67268ac5f9ba9f2beeac9ce99dfd1b00b1cedffa17df013591bbf26d6aa78039ef132c5ac2cbfcc810351676e6d0cc9afde5f0cb14b6a930c385e5f3558e9acc2c4163fd1ba3c875c8a7fcc68952c49664d8be0d65ba19b319259bfc19eb1e734c026cb187993071ad7d1b5499ae6fea9a022cb5d4841c37aea58b609050859790c4f077b7e25ba85736c7cf3b4a38d1f5a26d973d7ab7d21a28834f3c25eb817d7bfba015b4abe5afab4ec2bb096e2d1ce64997f1aed0e3fe4ec05e34b56420c178812dd854f72bf5b71f3c8b4ce7b065cfe07c8327e314896ed8e06ed2dbfa94c4a97a60b37e1fea8e6b794890112a38a8e52a18bba00674efc9cda2f152fc4b3c70cdf54c2f9eae00a526bfae8213528fc0e7945d01afbcd455e0e7a373f7cc0e3fa1b268e6e549f26a61b2ec93fdfe92197a011df09f8a852484c9ad5b23d07bc441e41abf263862524ea7e65ab48e5915d0f3bf4e874ff6a9ca73e78418b496b8cc10870023d9d8ae31e38a25059e938c248c59e9458419087a9eb5214279c6629e3fed59ef305a4059a501678a6c7e6d04109c27f6dc92d0471c33fbf4c66347fda4231bf9142fcf9fd8c198cc08b186f14783b9d3544977ad7dd12ee045890308221c1ed6787cd72b46533557d18e148a7ecd903e99cdb4215753371174317fb30a9f9313feb39b8814efc05feb15bdaf1094ef47c7531e4bc93aa973658b3fa1832606bc19d9d54be850a58eace50a828754e5ae40ba507b1918df7ff7b0872a1dbb2f113ad8357f82b025900a87c0bd4d6e4cd1a881aa811193641bd66f2ed6db0f15ee2d4185c6b54e6a0605d4946a352d639e49e6f40b1f9955c1db091f0f9b82eb3d23ecd047c79ef835d79480c0ab21cc91efdc4618d973c40428bafe4ef08911f98aaa9fff4b5b501f286a918754d92e1d65264d95e84fcd83dbd06b88a7d911f0aed95969a9e0da60dd8470bda7bde6352ea01be97ae734e4de75631e9a87f557506f9e115bddbbb8e2623ed78c3e43bd7c03ed778bdbfad61cd1f5dc6cca75f765619cef6b80353cb3d1d8ad3dc261bd3c71f2c7be00613dcbd6b5c353cc8a9ef31625c9552767c659bf1321506419f50ada3819f14c8167073e12d2d77e80eb555ff6ebc800c9453fd82d0a41f0dfb87003b894526eaaba54a4023170bb7e2760140ae31132bd9cc4bb9937928b058acde71f38b8084aa54286a299b664bc119eef0db3a991acb8419bf0a36c9d32a80179ddb7eb3b86c44417463329820706944a3e08f57d71b2a63224ff5ce118ac8ebf2f599ca68f308afcac7592040f668fc764e58c42f45bece1a16f47f65051e75893dd513df98ef786508144b7d1b00ddce20f63affcd3785aa9ff6873dd897058ea2cd67d20258f55007ec4d61d8407bc6d8278f366574479d6066894c1428a45b8b9236784fb900bcf7cd059cb75dd0c01db9946dc79ff52d80d470dafded87ab3a39a8417ad4f5cb7453d6f3a9261d2058e7d369462e51bb8819077bd1ab919714e3f0f123d86bf9b2799e514ce6c0b9bdd8412be85d0024312c65003358a7e5fc42dbaa62328046d1c6d99372f64a332f7895d86e78a4d1929eeac130ccbff6a26cc89019468d8b60e6e8bae6d7046f9507800cb914c04d483a17663af983ecb5f9c69994811c5190ffe72cf35fe1475e497f6ac95152f66e1930592594d73c2847ee204df64fbf13cf22323844ec7905b6c5963d1238856fbb30159c18c53e5cb8327b4158e66999a788a7d683400483588369c489010dc5557e2f382aa554255d246873227a0028def7a85701be3af5299fdc8627000b9772ab68eea25f8e58cc2de2baaef626162954c64f04e669c0f81563d0a1f7e244373812ca6a65f49915a680ca134eae8155c066f228c45f8ecde643bd61f5f5cd8e9fb9251406ed349ddf5507a6c95d5a6df50ef064bb037b4fb8570ffd23b25bd70878e41f99cbd34441ac48e15ad1fe0a86f87685cc2db322795ce417c95d3080f4e442e7138eb4bbf12cb20354e46454f1f9dc3b39321ec8259f66df3bb0cab8b03fd9d2d0d4d2decd29bef1bc7b91d465f1731385b376c162b9a567b55af5dda24db350e1c8f7b96f31db7e869cb707dba07ee1bca5cdb48f4ea5a47b365f67b91270c176359e4dc177727453c967e595749735a1f4ace98c6926423d91f4a744fdc7cd8bfb10080838ccfe8c091fe2f0c769cb70808592cbfa1a3f59951d9e672d5d5593893628ca17bcc5f1ffce9299105345313e1c284b0bf412b0ae150ba2d58f96834ff1c44636fcbd1eedc3d22b5716f5d523a7c90ba6f4fdd44931ca48f2fb7710f63c2390332c05c8980632cbb19f013ff1b2a7ae87da9a9de3eb068558a3071de110a3149d344f107bd7ce", @typed={0x14, 0x5d, @ipv6=@rand_addr="11c955255283213674fa7287d1e6260d"}, @generic="23362406ff4d68b73ba263c24e197b9595be320a27203f527cff32f31641de988925b7bf77cf78c629469ccbcfd7cf6e159a01cd719e944d24d0c2f60b364694ad715109d47e1db88ac8c46a"]}, @generic="3fba086f71c93b9a09da5f7602516017da7c42b44691b2d59f454b0583fbc450f88ce02e09cc39b70d0d5301a9f23da5453db09d5a16e2b9928fa0bed2b7544dc1d23bf89a569b4090bf2e6f12d98d0db4fad74dd1797891a0cc5dfdc9b65f6f3b19f976832df0d4acc555eb23ea73869197f7e2e0d0ee518760d523e80dcf3f44951c04f6d8065827789a29491e38ac6d77816767abae"]}, 0x22b4}, {&(0x7f0000003e40)={0xb8, 0x3a, 0x400, 0x70bd26, 0x25dfdbfc, "", [@generic="862c528284f59982e47e1b3042cfefda448e14ff1dfc35c158a0740c1b8b5fbe4a999b3794c990239636c2da7138457332c0a5792c9a802f23c9c84a50d433ec39c333b3040b72c0c4e7866d804226dcb24c46777b843ffb964989b2ce8e22e88b9e54af4114d0f72f03658dcc247c3e4b22077ac4d1a23b039ff1766d9cd3d781c906b3b1ce370859f7b7b6ff26d3f864a3300404f488399de9c159", @nested={0xc, 0x2e, [@generic, @typed={0x8, 0x76, @ipv4=@empty}]}]}, 0xb8}, {&(0x7f0000003f00)={0x1c8, 0x26, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x18, 0x4c, [@typed={0x14, 0x62, @str='/dev/binder#\x00'}]}, @generic="5e2adb82fc0d05b6596ff52de38f1e1708b036ce9fec2bf6989e79eb40ec559d414d3cf9d3bc9b04c4bf17607e884d8d9fb4af30ba3282c1a281f215ef99badf20c7ddf91714386c70615e37d087a54567f268778ede1208ac69199b2f2c552191f978ef1bcd710aa8e6ac4a05992a18e963100abc91864273446988e9da3ed359772cde48e5d9b54328de1b54e2342a12d6c78d8a448c9b4bb7124b4d1790a0790a71b58b783b0e726bceedd675a8d96d4feda4290708fa52151d2df9c86eb56bd1dca4cac879a628e24902082c04bd611f5a4e4e300e", @typed={0x8, 0x68, @fd=r0}, @typed={0x14, 0x5a, @str='/dev/binder#\x00'}, @typed={0x18, 0x2d, @str='/selinux/enforce\x00'}, @nested={0x94, 0x8, [@typed={0x8, 0x8, @u32=0x1}, @generic="2feb10c18ae159d47777eb4fc8156f59e66c4a3e412b0f3f10c8ded4f0b69d6cf216477835a2705a5ddff9454cbf295bc8fba96ab018e2d918cd34557a7f7ce31b67483037fbcc8350de7b5fcd60cfe876f1b5081c823cd71598d2bd7929540e91d5382fcffb32adfd687e414c8c816086015969a6e510ff2bfaeb39f9d344", @typed={0x8, 0x89, @fd=r1}]}]}, 0x1c8}, {&(0x7f0000004100)={0x414, 0x18, 0xde0aafc42a949408, 0x70bd28, 0x25dfdbfe, "", [@generic="6c2de5ad9e5c94a97e086a4cb45b8f7358eb6232c736f9431dfdfcec6584e81b72ac4d40", @nested={0x2ac, 0x86, [@typed={0x8, 0x59, @pid=r6}, @generic="8417895f4005f1018f4dfe8a321b60c5b943697dbce305fd4713ff8ca5a537775a9dbc93c001b1b67e8d74e8426dc8ae9035320c7819a13b1143efac50c8ea7bcdc17a22b465ac7f8b9efcc527f9c72f912099023c5c1a5fc5f6fbf04103f34f30628036d55310942bbf5513d53386ac1a4bf9566787efddf6f4711f7e255191a57a152d19cda835b6b71c89d261ad993974cf4e23e27817480260c531c6", @typed={0x18, 0x45, @str='/selinux/enforce\x00'}, @typed={0x14, 0x77, @str='/dev/binder#\x00'}, @generic="a78bb7cd0929b93c32ef89786a540ef481a51b1bfad1cbae5f92edabaea1291627466fe75162e17893a3744c0e2e8a10e28adb774710d2b4f20e2da70df70452680cb41c888f955a21b68086c2193287e69df622c96d06e75ac88c2084b156221ffa58bcb4f603f8058f82bc0fa59e2d07067417bdeec50086c58aacb18e782478ccf1dc5ab47cfea5c663246a3d39e76a5dd9f1906b369702de5a091c7085f1f58a8d967a3c2b5a02bb21963de090ee2bf351942055ade2caa97b41ff65c164d21f0c18298b4d1fd5742fbb523cd3d22e1e2204b12f460425825c1881202f15206a592876e7b1", @generic="f99d2b161e8be3c761e53addfefb5e6f82ca155a1c418e4b8f6ad8b2b7c68a8e8850fa41281ef0c30df3a41fc18bfaab18de86fb2a472450a04ec8f73a4aefac1f6e0c34a2837fcd2b7fe77d5ccdb28d76b9e40d0b4e2692a84dcf09596c57f2d0b7a7db0360dee0f54cdc4cd2691627162dae0a4fd209d77fde8a67c2dc437e34ba053150b3b7c979612600ab5e8778e86e1f416dd5264b237213aa5349e8a13736f9f2ac37c104b30667431fa706ef7a0aeb22360068e44ed8a88a21d51c1968b94a21618680438818c9959df11445249e5220e68e363ff3de3ac68d253c68660e020016", @typed={0x8, 0x6a, @fd=r5}]}, @nested={0xdc, 0x3f, [@typed={0x14, 0x5f, @ipv6=@rand_addr="a0be671e4f70aee1ec137ffbda87307e"}, @generic="51273dd14e2cc1efb9a0696ab06c4da1a3400c3864e0d687deb782310514e4352d72ca70523175c145f754a45ffedc6d2a212aa5d383637b6d92eeacb9cb822df1b0ae8650d000bfb66ddd6b20e2c4e70a271a331993d8049bee10c3abeb96aefe7595890458a09f8082bdffd07724f379b05615216f302ae25c2f4777f927b0cac308793e02fcc5f69da952505f01c26b82e65f46571549452efd45154476203b96fc9e405e87763c241ea91d9d5f071846af727b9da93aec6ba0448181d9ff3d0e"]}, @nested={0x50, 0x53, [@typed={0xc, 0x78, @u64=0x6}, @typed={0x40, 0x53, @binary="efa8d895f8c2132f127a6e52486dbd639e3a8b111da02cf119ee52d8c2382e55e15a7bcab19c0da9bcdb6a765c71a16ee3a7d4209cf7a703ee1e61"}]}, @typed={0x8, 0x38, @ipv4=@loopback}]}, 0x414}, {&(0x7f0000004540)={0x160, 0x36, 0x4, 0x70bd2b, 0x25dfdbff, "", [@generic="01a683b07990812c6867cfafa9e5bf53cad510891efa6c722ec0bddee0bda71c28fedd162eb36ff98a531d362183b0707e257cac0423211873bc71eaa005cd8e9f3617feb2c74425a798481fd52bcc78b5a904a8f779e2074f9275db52b63828cdf021325e23f639c2fc876866b56874b4244773f0b2f51d3d927f088b", @generic="633f1ebb53fc4afa3a263dba2b151b69052176b1c77439b81d6a5b1f48afb522fd0e0a49b3e793f7daa233c87f9ce83d1e1a35b06fbb2dbb960c295b602e3709e63b3b50d85905c1461e77f76ddff6c1acfcddc1f8ac9b657fa8a934f95c045db506ef35d8af9c656ec262818adc19814dc644f99a38d132053d607779a17ed20c5a2931d50a8331755454bfb471ab3878db2eb42eca69447e8fa5a1fdd5a6af0c6a3f7b3a8a480d156fccf543c1932efadf800e1c4397a426fc1d8e8953f971b67679200b03008e4394e716bd246949fc"]}, 0x160}, {&(0x7f00000046c0)={0x194, 0x19, 0x401, 0x70bd28, 0x25dfdbfe, "", [@nested={0xc, 0x17, [@generic="f536e1464468d7"]}, @generic="e8952afae624b3bf6e66334c23fbc5fe2eb7f82d11e160a2cac8022775fc249f51bb66a0c4fe682c0b505ef75db432709fd109de235e7a4238dece0d1a35d3dcbb9bd7fed771f651db7fd15a3205fe55eb059aee75f9f6f0ee2baf8d56f2164ca87048e4231875528114c51c83d754179af87a4cef4893c735974208f534d13fc971941acd6febfaad02f40e38d812d0d01f71517f54f55446a410a06bd8272564c53df57caa9d2bcc0cb80b04aed943fcf8041cd12507166ad56e4079808a83b4ec255ee187b41b9de3e5d65a047254676cae76a16af080e19d543aaab3dae606efb430f9f6623faca56a354c6c", @generic="8e669c02b73ba1d22f974c4344f7566eb4941c2fd42d72e3e66a65814aa507d9889bf789855acabe212d7771ca930d1e04e3c5a6c68a644bc241e52fc48e997ba3719fc992ee895e6973553120b1bad805867153", @nested={0x34, 0x72, [@typed={0x8, 0xd, @pid=r6}, @typed={0x8, 0x91, @u32=0x1000}, @generic="fd062126809c35fc59135d7987df1a95638a0d63c878a45270c48c41fa9b2a"]}]}, 0x194}, {&(0x7f0000004880)={0x1cc, 0x23, 0x200, 0x70bd2b, 0x25dfdbfb, "", [@generic="5a5d22415232b08c61a5bc547072713bc586d41d9d1eec4c10050d3f737fbeeafa2e8da330ede2dd4d72ed6807d058c7141cde59af19461f341067be7e2842808704c45bdf0660a1bbe72fb24361db57c5974ffacbfd97bcafee722ef0694014e5f8078e8de54aa692efe96af4c4df8c1e97ac044185b77f8e779f78ea8822d9dc8eab0e51d5e911d4149c7faf413b3c42708901db8d4def6d3cb32df96a5843cb44c3db79480f6408fa9269acc046b0e80e4137f682fb1f7a407ba017196c5bf408452c97b81de534a4dc15e56a13ad2d", @generic="fc6e4e32d0fb2d590d46cd1959e9f8b8c1044f9ca746b16da59868fc967228773c190486a61ce08effcfd4e28f622c7461091c3effc5cca79d1d382941a342465ac88531a126c13f2cc5890b343fd3c46630e521e4520d037444bf885c8f485b131ce78fdf418125411aa029e6856d5dada56e8cc345b1d396a54ea645c4f941057c312dae74f233611ca5d850cab42020d31301911d2fecaf7bedf4010a56e8154100e78a77c5446f661947f9cc0e4d6f3106991de2b1492bc46e29c890bea505b41595b63e49e9eb3a118fcaa90d8cb8172e201e0488f672f0c0c7f86061f3afa6ba", @typed={0x8, 0x8e, @pid=r6}]}, 0x1cc}], 0x8, &(0x7f0000004b00)=[@rights={0x30, 0x1, 0x1, [r5, r2, r1, r3, r2, r4, r4]}, @rights={0x20, 0x1, 0x1, [r3, r3, r0, r4]}, @rights={0x18, 0x1, 0x1, [r5, r3]}, @rights={0x28, 0x1, 0x1, [r0, r4, r4, r3, r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x28, 0x1, 0x1, [r4, r4, r2, r4, r0]}], 0xd8, 0x20000000}, 0x40000) [ 151.146946] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.152310] binder: 6194:6197 got transaction with invalid offsets ptr [ 151.152355] binder: 6194:6197 transaction failed 29201/-14, size 0-8 line 3164 [ 151.152813] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.189615] binder: 6190:6191 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.189664] binder: 6190:6191 transaction failed 29201/-22, size 0-8 line 3199 [ 151.190211] binder: undelivered TRANSACTION_ERROR: 29201 06:14:20 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xf, 0x0, &(0x7f0000000040)=0x2ae) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 06:14:20 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:20 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="f325c620c10aa49b0cbd5e22a53cec3009539bd3d499ba36e610a8aef62496f776b2febdf6a49d5547a72891c0f755625ad065305a8e5130"]], 0x0, 0x0, 0x0}) [ 151.252230] binder: 6168:6171 transaction failed 29201/-22, size 0-8 line 3199 [ 151.259874] binder: 6181:6187 transaction failed 29201/-22, size 0-8 line 3199 [ 151.262878] binder: undelivered TRANSACTION_ERROR: 29201 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) [ 151.329090] binder: BINDER_SET_CONTEXT_MGR already set [ 151.338266] binder: 6207:6211 ioctl 40046207 0 returned -16 [ 151.338270] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.358626] binder: 6181:6215 ioctl 8004552d 20000080 returned -22 [ 151.366370] binder: 6217:6219 ioctl 41009432 20000080 returned -22 06:14:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 151.375408] binder: 6212:6216 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.400620] binder: 6207:6222 unknown command -1664830993 [ 151.408933] binder: 6217:6219 got transaction with invalid offset (-7231643277055351309, min 0 max 0) or object. [ 151.409134] binder: 6212:6216 transaction failed 29201/-22, size 0-8 line 3199 [ 151.409895] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.427133] binder: 6207:6222 ioctl c0306201 20000040 returned -22 [ 151.428562] binder: 6207:6211 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:20 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:20 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 151.428608] binder: 6207:6211 transaction failed 29201/-22, size 0-8 line 3199 [ 151.436316] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.436673] binder: release 6207:6222 transaction 313 out, still active [ 151.436677] binder: undelivered TRANSACTION_COMPLETE [ 151.471253] binder: 6229:6230 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.471301] binder: 6229:6230 transaction failed 29201/-22, size 0-8 line 3199 [ 151.471772] binder: undelivered TRANSACTION_ERROR: 29201 06:14:20 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000080)) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 06:14:20 executing program 1: r0 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xb9) socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000040)=0xffffffffffffff92) 06:14:20 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x400, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/74) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) dup(r2) getsockname$packet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) [ 151.496988] binder: 6217:6219 transaction failed 29201/-22, size 0-8 line 3199 [ 151.507179] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.519985] binder: 6217:6219 ioctl 41009432 20000080 returned -22 [ 151.558350] binder: 6237:6238 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.568594] binder: 6225:6227 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.586959] binder: 6225:6227 transaction failed 29201/-22, size 0-8 line 3199 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 151.606474] binder: 6242:6246 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.616816] binder: 6235:6245 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.618478] binder: 6237:6238 transaction failed 29201/-22, size 0-8 line 3199 [ 151.620241] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.632248] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.633090] binder: 6237:6249 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = dup3(r1, r0, 0x80000) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000080)=0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0200000000000000"]], 0x0, 0x0, 0x0}) 06:14:20 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="00000000000080000000000000") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) [ 151.633138] binder: 6237:6249 transaction failed 29201/-22, size 0-8 line 3199 [ 151.633522] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.695136] binder: 6242:6246 transaction failed 29201/-22, size 0-8 line 3199 [ 151.706301] binder: 6252:6256 ioctl 40044590 20000080 returned -22 [ 151.717802] binder: 6252:6256 got transaction with invalid offset (2, min 0 max 0) or object. [ 151.720478] binder: 6257:6260 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.720696] binder: 6257:6260 transaction failed 29201/-22, size 0-8 line 3199 [ 151.720971] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.726988] binder: 6257:6262 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:20 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000037fb19e64de868a7ca7e03d47fb09c35b7a9024b3b26c1f4968f0af811216e1a39dd90b06b8730632a"]], 0x0, 0x0, 0x0}) [ 151.727034] binder: 6257:6262 transaction failed 29201/-22, size 0-8 line 3199 [ 151.727425] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.772495] binder: 6264:6265 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.779527] binder: 6235:6245 transaction failed 29201/-22, size 0-8 line 3199 [ 151.779616] binder: 6252:6256 transaction failed 29201/-22, size 0-8 line 3199 [ 151.796280] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.796658] binder: 6252:6256 ioctl 40044590 20000080 returned -22 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x7d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000003e4b2aebdcba4d866ae5f3451360e439c1a06feaa13685eee3a9eabce47cea32650cb2ce777d5953ee9142fdf6b620b6c74adefd576a181800553b8a29eab876b0"], 0x0, 0x0, 0x0}) 06:14:20 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:20 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffefffff8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getsockname$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f00000002c0)=0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x17) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 151.796822] binder: 6252:6266 got transaction with invalid offset (2, min 0 max 0) or object. [ 151.796885] binder: 6252:6266 transaction failed 29201/-22, size 0-8 line 3199 06:14:20 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) fchmod(r0, 0x110) fsetxattr$security_selinux(r1, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a, 0x2) rt_sigreturn() [ 151.854333] binder: 6235:6253 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.859941] binder: 6268:6274 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.860013] binder: 6268:6274 transaction failed 29201/-22, size 0-8 line 3199 [ 151.867456] binder: 6271:6275 got transaction with invalid offsets ptr [ 151.867518] binder: 6271:6275 transaction failed 29201/-14, size 0-8 line 3164 [ 151.915972] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.921681] binder: 6264:6265 transaction failed 29201/-22, size 0-8 line 3199 [ 151.929921] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.930588] binder: 6278:6281 got transaction with invalid offset (0, min 0 max 0) or object. [ 151.930635] binder: 6278:6281 transaction failed 29201/-22, size 0-8 line 3199 [ 151.951860] binder: 6279:6280 transaction failed 29189/-22, size 0-8 line 3014 06:14:20 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) 06:14:20 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000100)=0x80000000) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0xb8, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}, @acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x1, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f00000005c0)=[@fda={0x66646185, 0x8, 0x4, 0x11}, @fda={0x66646185, 0xa, 0x1, 0x35}, @fda={0x66646185, 0x7, 0x0, 0x22}], &(0x7f0000000640)}}, @clear_death={0x400c630f, 0x4, 0x1}, @enter_looper, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x28, &(0x7f00000006c0)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000680), 0x1, 0x1, 0x10}], &(0x7f0000000700)=[0x78, 0x38, 0x40, 0x38, 0x18]}, 0x5}}], 0x59, 0x0, &(0x7f0000000800)="bbc445f932d42e50147a0f446afc743d00105162b4309961ea6057a2b5b380fa358a994690c28609e23048ed74098ce60976d7aa24565342e5e95b4eb7e9c693254b529c93e8ef9c220f5755699b53a003d925d10b21fb68ce"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa8, 0x0, &(0x7f0000000400)=[@register_looper, @reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x60, 0x50, &(0x7f00000001c0)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x4, 0x33}, @ptr={0x70742a85, 0x5c4, &(0x7f0000000180), 0x1, 0x1, 0xa}], &(0x7f0000000240)=[0x58, 0x18, 0x48, 0x48, 0x38, 0x30, 0x38, 0x40, 0x38, 0x28]}, 0x100000000}}, @transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x50, &(0x7f00000002c0), &(0x7f0000000380)=[0x68, 0x20, 0x40, 0x0, 0x30, 0x0, 0x38, 0x78, 0x38, 0x70]}}, @register_looper, @request_death={0x400c630e, 0x4}], 0xb6, 0x0, &(0x7f00000004c0)="25206dcd4eed060142ef333ccd2d98f7b4063e0069f9c9b8dc08fd020b65b57cbb1858b619c9ba6515aba4fd96fd8d6680de0d3460b868804c18452ac64d05d3904c8a4b1704108853352af5e8b6fbebca3ed314b1ac7fd7095fe7f5dfa5a82978d2dee3b33bc8a9f018b71d2e036f752d08b84461d38929c5a6473661822f4ee18e38ae3a096bf22da7a27ba7f1bef88f059e8db1859f118c2e21bbf84b67513566f92abf0fb1a760ec1f1bf30ff68a5a8d2c321356"}) write$binfmt_script(r3, &(0x7f00000008c0)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {0x20, '\\vmnet1'}, {0x20, '/dev/binder#\x00'}, {0x20, '[$:vboxnet0'}, {0x20, '/dev/binder#\x00'}, {0x20, 'wlan1,ppp0)'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}], 0xa, "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"}, 0x107f) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000520332717d8d0000"]], 0x0, 0x0, 0x0}) 06:14:20 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x9c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'lo\x00', 0x2000}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 151.956845] binder: 6235:6253 transaction failed 29201/-22, size 0-8 line 3199 [ 151.956959] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.957101] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.957219] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.957373] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.958123] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.964661] binder: undelivered TRANSACTION_ERROR: 29201 [ 151.965391] binder: 6264:6283 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:20 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @dev}, &(0x7f0000000100)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r2, 0x0) r3 = fcntl$getown(r2, 0x9) ptrace(0x1000000010, r3) getsockopt$inet_tcp_int(r1, 0x6, 0xb, 0x0, &(0x7f0000000140)=0xffffffffffffff4e) [ 151.965437] binder: 6264:6283 transaction failed 29201/-22, size 0-8 line 3199 [ 151.965826] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.034670] audit: type=1400 audit(1556086460.958:26): avc: denied { associate } for pid=6279 comm="syz-executor.4" name="binder4" dev="devtmpfs" ino=83 scontext=system_u:object_r:audisp_remote_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 06:14:21 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000000c0)) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:21 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) 06:14:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x2) getsockopt$inet_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000080)=0xffffffffffffffe4) write$tun(r1, &(0x7f0000000140)={@val={0x0, 0xf7}, @void, @x25={0x2, 0x6, 0xf, "6c11eabed3851748cc674157148c1d13ae8998534c62876f7984e83cdb2c38a29fb73cbfb2dda88eebab4f1a8dd3cee63149354cc345ab5becbd6d2c78f85407867a6d8fff9969b55327e7ba"}}, 0x53) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@ng={0x4, 0x8, "0ce1"}, 0x4, 0x1) [ 152.072282] binder: 6284:6292 unknown command 0 [ 152.077040] binder: 6284:6292 ioctl c0306201 20000440 returned -22 [ 152.099735] binder: 6291:6299 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:21 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00630000000040000000000000000000000000000000000000001c00000000000000000008000000000000000000000000000000342a2a962b65f10ed4b000feb0c23190d81b61cb74e1fbb6305f7bb0641d0000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='hybla\x00', 0x6) flock(r0, 0x9) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x101900, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000280)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x202, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x8001}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc05}]}, 0x24}}, 0x20040801) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x100}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x391, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 152.145344] binder: 6303:6304 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.155241] binder: 6303:6304 transaction failed 29201/-22, size 0-8 line 3199 [ 152.170780] binder: undelivered TRANSACTION_ERROR: 29189 [ 152.181521] binder: undelivered TRANSACTION_ERROR: 29201 06:14:21 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@window={0x3, 0x800, 0x2}, @mss={0x2, 0x7b66}, @mss], 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)=0x6d2446a952dc94f0) 06:14:21 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000130000000000000002000592a201a6d2560800000000000000aaa088bb4f8995ce0000000800"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 152.211229] binder: 6303:6313 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.217688] binder: 6291:6299 transaction failed 29201/-22, size 0-8 line 3199 [ 152.231978] binder: 6308:6314 unknown command 0 [ 152.233585] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.248663] binder: 6303:6313 transaction failed 29201/-22, size 0-8 line 3199 06:14:21 executing program 5: r0 = eventfd2(0x9, 0x1) fcntl$setpipe(r0, 0x407, 0xfffffffeffffffff) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 152.279995] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.299748] binder: 6311:6315 unknown command 25344 [ 152.307995] binder: 6311:6315 ioctl c0306201 20000440 returned -22 [ 152.315725] binder: 6308:6314 ioctl c0306201 20000440 returned -22 06:14:21 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) 06:14:21 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = open(&(0x7f00000003c0)='./file0\x00', 0x0, 0xf0) setsockopt$inet6_buf(r2, 0x29, 0x5d, &(0x7f0000000580)="e0e43181e2936dd164736c18ff014e674151bc8e3231de70bc1034da43dfebca635d0a3b00a31e3b88dbb5a5c5307945b35d8edf49907730b46862a12cf817ff4b", 0x41) getsockname(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000001c0)=0x80) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0xef, 0x4, 0x4, "c38cd1d44e142f19f89cc673a4988d7e", "556bf928c8c2f95fb86bb54bcf15457ccbdcae53a031e3e29598fc0dfff785b044fca3ab53da49e5d9e1dfa3f2e0fe0f9a939ea80cafda4fcd40c1afb33255bfb1e5feef85c7eee11b1c4bf0b0b88521d49ed1589ac91190d9705ba0278346009e3c4df2860424ab300eb86d62966c9cd899103caed8c5f927ea0072a9cc12163bc085098fc6c165c57e1ea83d70c51845e8dda88e6d28ae1b20faac90c2c5ba4f0ee97a6937a73df276892a7140f00b443485f2de215e8f3c12b5a8220ee453fd56e8c28f7802615a4676d203b9ef7551ea78886e371aacd702"}, 0xef, 0x51ed39df8ee3cee1) r4 = accept$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0x1c) getsockopt$inet6_buf(r4, 0x29, 0xcd, &(0x7f0000000080)=""/84, &(0x7f0000000100)=0x54) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:21 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 152.334092] binder_alloc: 3360: binder_alloc_buf size 887272067016 failed, no address space [ 152.354347] binder_alloc: allocated: 248 (num: 25 largest: 32), free: 12040 (num: 2 largest: 12032) [ 152.405395] binder: 6336:6338 unknown command 0 [ 152.410914] binder: 6321:6324 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.410944] binder: 6329:6331 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.411026] binder: 6329:6331 transaction failed 29201/-22, size 0-8 line 3199 [ 152.411430] binder: undelivered TRANSACTION_ERROR: 29201 06:14:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101000, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000018c0)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000280)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000380)=0xc) r8 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004200)={0x0}, &(0x7f0000004240)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000005580)=0x0) r11 = getuid() stat(&(0x7f00000055c0)='./file0\x00', &(0x7f0000005600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000005680)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000056c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f00000057c0)=0xe8) lstat(&(0x7f0000005800)='./file0\x00', &(0x7f0000005840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000058c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6}}, &(0x7f00000059c0)=0xe8) stat(&(0x7f0000005a00)='./file0\x00', &(0x7f0000005a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000005bc0)={&(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x100000}, 0xc, &(0x7f0000005500)=[{&(0x7f0000000100)={0x28, 0x20, 0x201, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x14, 0x47, @str='/dev/binder#\x00'}, @nested={0x4, 0x7c}]}, 0x28}, {&(0x7f0000000480)={0x142c, 0x32, 0x400, 0x70bd29, 0x25dfdbfd, "", [@nested={0x114, 0x24, [@generic="5bbae7f09de43a73fbf4cb2fdf921f7154baabab0f48e0c07b97b0673aea8ad2bae928d5af56dae9cfbd78aaf2f3b14378cc46f0f9869969bcd42d5f488192482a3a343c6e99ce9b6ec4f95a588a54d9e1eb82716b3c9f0f405c0d294e7e415645c10251835be191f2a8acc17c33980a65dc1dde54497d1cb84a023695db332dcabba1742a60", @generic="5eb6161d484dca53ceb5e70d8c3b6485d62828f1e436adf4058da91fc9c1fd9a7bac44472bd0255ee0235d50f197024c63713a91ca54d628828babc8458e18adb786e101a65a63cdf834c395112ab54e9b7aaee72b0a071cbad8e1e8342310bea95ee96f63dd237a4fadd5ae3082623bb022fbdc6d627eff04b6708728e9d7d6484bcef3ed3c83909a65"]}, @generic="fc50dd5b2142cecbf02d26091250bc60439fae2dfe9c611cef444a84aaf39fea2dc96019ef5993c8e7915312c2a1acb1bc1b183b97d912692fb70a57e22c4dc73819ecc01783454dd8be7dfab5ba6d8423ecf8a804d8a75252c106e2f7b9fa86a61cb7b4", @typed={0x8, 0x91, @fd=r0}, @generic="e8ae2c48dc6bbfc4f57da4a803ad152a6efc849a5a6925f8a66e01fa77a7053738c0aa394c663b8d86a2142276df24201f91964d2b7d73bdd3d6b3dc21c943dcb1b47ef1f67362c4c19e43460a5cc9880f7fcffcc021c3857737165951dfc5944237f84d978c3008d5ff22e18ae99b30475d3b4b2b557edce53ed440ad60dd3f5fa162305abf52bfdc38ab22313f399e5fff60b85464f9666e60062b1c4bf64630399a", @nested={0xec, 0x5b, [@generic="959a7c85cbdaf206105a32215824b3f365505d175df6411a002aea6c210095f3a36f2e6df71112ef8a71f1477f11883a340db8eff61665be2c7828a6c4024e449f84a80f3fc232250daa2eb7a60fd56f75da305e8f3601c9a47672c4f1de554db7bed147f6aeda2496f9f931eb3d769e1cd924c8550fef344b117b18d93d9987e86245610e287aa2acfd8fd7266f0307d1cdcce00dc9e536e24fdab22afd5a3e828edee74a5a25233e1e6535c9a436e7e7273f259c184a8b74923a5f45a295b6649cbc6b28dd84458136967e1eeba3878317dd8ca4671b50b45eff428ec5d7b0ac41b099322d85"]}, @nested={0x10e0, 0x94, [@typed={0xc, 0x86, @str='^[GPL\x00'}, @generic="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", @generic="ec3b5d29e42a30e0db5591492bddd031cf750c721a2ee2c735b17920c0da49205b7f90609261001eed437a26cd51c0e0222ab8338a3770e081218be9296ddc680534a8bcd8c207e9f05473b4774b81bba68cd9b05d17fa43276c30d9cc82352c2e3d1afca2c677c6d2838c4400ae503b64c93cefe5456c608f96f7fad9f68e82eefb73b1cc1fd9f35a9a6c", @typed={0x1c, 0x87, @str='posix_acl_access)em0\x00'}, @typed={0x8, 0x8a, @ipv4=@multicast2}, @typed={0xc, 0x14, @u64=0x1000}, @typed={0x14, 0x5b, @ipv6=@ipv4={[], [], @loopback}}]}, @typed={0x14, 0x63, @str='/dev/binder#\x00'}, @typed={0x4, 0x36}, @generic, @typed={0x14, 0x7e, @ipv6=@mcast1}]}, 0x142c}, {&(0x7f00000019c0)={0x1304, 0x18, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@generic="b97fe9778ec583207eaea68b117ec25ae442b0995b3d0ba3ca9de073104c2a0d28e2742b1217c548e0802071eb5a128943685ee2bc6846cb7c7d35579d6b82809dad5c54c6d9ac74967f1115f8655fd2fa245b6c303ab6e9d74dc3fd4143b1d2a151c19b8ab6ebbab27169bf7f1e2814a3adc812cef5430ce06bde878c9e184b7d863cf9fbdda524fa881bc72aa453ab33ae4b3103c36c0bed845911d46981bb2f615a66adbf1dd56930cb26c37e014943e0e3a61554801c471350e4080b75e5c14ee637c768ff3849931238f345a11ca7e25e751f03c367a72ea5057c48dc37a66b0246994caeaa8d2fad76ad0d051a5879e8dc3ec630dee0027be77fd7cf9ad631215621316a380d81dd815c5137439777022a95104472d164d3cbe4bc9dda83cd14997aa9e0731bdafd460f4a28eaba7e5f8cd24e9825c4712db3ab42c5ba7a5e1c163f7b4dcbaf5ecd4f92d101ac0f3149dde0b215099d7baa42f5d4bbf01c26022c9dffb0c25bf27ba6c577f42af2622b0bbce6357c1a45d36add6c62a23b70fe89f3f020fb3f6ba24f670dc0a335a6f3186101114de1d34a22b01af8c65faaf9cceda95045bc4a9c5454fbd5b194fbe49092dbfd38d20bf642ed96028d8e438e34e27a1dbc0b2d59bc4498a26ce09a4574bab56372ea15b2ec2b4ee00dd9f15dd0ffb3d76961626ed4b9123dda21518f96236a760552b75557550e78db8f225c41492845bb8891b97069bae08bff29586fcf2e841f2ad6284a568c7f831928a786ff552c8a3b4825843390d3a02f95bbe802d379a807358b1449b8b5f97810620e0b225927901020dbd9b6f3dce01aa0157449fef3526597bf18d516ba2bf9a9d8a263d393b74407bbc1b82e9f32ccc05d6aa9a27a603b658cf2ef841d0d678d3d23822f16fc3ab6bec4f0f6a50b9a53bbf139bc9d7874c240bae98e5d5191fabaf20d76a8cdf3e843880fedf3ebbb162907a49327937f47dd9706cd770255976e467e96afaa3bca766115aba53b57555d2a2586fe28e9b5e55b5ce31ff31d9441525fd95efb05dddd907ffa13bc242360946bbfc4eeba73423d3bcd6d3b7cb73c554140df361ddd18d55758bbbb73c97195ca458dcfd875c17bdfa0a2d9e6611fd7cf66cdb23c0e1c90f8a92765779ec68ac2bcd4b8e04ea2cc10c8790c31db5534b07d07d8b5ab38214ed30e7261eda0d43b0139290bf8a0b3a850c90d0271c146de820b7430e6f4105019ae312d233fe8e7d5a5f78b0fec785e92b16d47663a074a1cbe555e8274d71bda3f9c6cf4608cbba7f38729ee61008aaa700427b092373e056bfc46c35512bb969e8f9b6fda6c071713247736dd1744000919ede8b429b867ee190e260c558c31c0d92e6153557cfab0f47da5a8e3c3b8e6163ae0494d4b20c569cb391cf31b0019c5e736f54264adbb3145278ef889455abeb6f1100ae4b17b0f8a0ec83e13ed62681f0c4a18527912ea2d60cbaed7e4e7ff4aa8abecb38650bb2995ba591e4c813d1e5a1bd43b4250e365293a6b71058218c2479d7a622c1d3626b408b40aeae9cb9bc7febfabb6cfbe2d0c0147992a6231cfa236c91af78acbe27c625a943350f3657141efcafeace19d7a3d818fd333d6d9b42294157110ee1d0f437c4bffc147292f680e81f324f3e072cc2d8d14534ffe7bff82e5e23804a805c717f3668a8ba43c24dc353257d19305dc2a2876c1973973123d409ace582b33f79646e432d6d94b535ecc33c72a7f9a18fcdaaa3e28666b84d58492f7ebab3b6a98d969c38069f5d2820ae8993a2c0bf306827951abc0a12803b80c7aaf1989b09ee57c3116d5e0f8b49d0c44fb5668a6cf0b8af0b8ff8e53c9ae02234eb5a3c1e15a7d203e55a7d2d172b1ae3a700ff0163d3d409fd15fad7aae993d56c043b9ba6584c2a73b23db093a271ad8aa69f2448277266683d81d3f008aeced9c45e2589f55e6d6fb4137000ea8c76340a4f842fb360c36548449105698b1e9f0ba0b352ab638aa74a03fe551e92af13cbfdc5344c50bf3227e64198b88ccd99e19941b009b87b43c9e503b841f0c44fc48b96f68bd748dfc6582035f41a788b788152c44d6a8efbb785cf913e592596717ab5628f8517a3d14539e7a8a8826adf47134d71946ab1cc7f83f7d781a21d90d3bf4434a6dea30fc2d108876e5dffe811eaf9c2009ed1a9a0e2f1acc30f2e5f7a1f49eef961ffe8a09b11c8c25532163be3200cc631e1953e3cfc35ff7a0f35d86859940935a1e9ef51df1381b79738c030c17560327d5c7a1112869ca837e4f3b4200c04378994c2ec0bbb636a5e672a70531e4e04672cef070b91375194e67f4ba3c8655307ea72dea875f63f0f8fafe168e7c732a906f598452a77b17122b267c3badcefbf2121ba1116f2051a64573e63e2e91a7bb213e0fcf5b46f9e6a0602e4563cd575673676a330eeaefc05ea24da3b8b0d9ff3d554d010b234502f509a50077ad81a3de0d716a24d3af68ab94f756ea3f7ba9a523d4919e7e68987921ff492b6944261c4add22b67cc226a1242f5acdd5122655d96243e04779e5daac46255db842602cd84ecae8245c26dd8de7d9d1c6706a51e8d6e4e3b7a5ee3a6098dc3ef5ca8a9d296861ba4ba3dc5df660ee5dc0fd50f021ff068b724785679285856901c3c9fdca5a1da219e40c2eed21bf31d618599101ccccffb18d0e8c42b390229ce0d4c5979f73dd612abc0f484e375dc5abd75178a09c369ad300e9113b53ce1b448a3eea071d8ffd3c5acce58c01fe550a1fce1c55c82c47caba9889f65e6494147fd8613e9abb49e23fc8f800842b3ac8988e747612fa712b93b8a19e84b0ef045e484dace6b2f513ff0d2b345b39222221e2c35e5b9415106e44fed9bd61dd62f90dbfaf5c5d781d822d94229ad0dfa5e37658cefd2efa780adf118decce5bd178a95838a4eb68ff01fb07f01ccd4d73bbbd26ec335c428c74d233b5e02b4b0385beef62606c096499606e37b223e9129182dda6e07cdb24b0175139aa5c47f1fa7d01a976eb6a70c8a3162fa68f561c5ed72de5274e95fedbad238c115550d5a262431d58f253d3f0ccbf4280f441b533b8945aff6a7e55884394e28fcbb7e349cd6e69d8b7af0e6003f5289257f6f10c2c4f1271e8127c8b960ee54c4476ee564d8ed70bffd12e3d629ebbda3eaa07e26f491b520fd5974a34823587d95cb86fc578fbd576eb692691cf2f1bf7db8074b7cc9f5461c9083f268a66e12a3414343c84d4cd7be6bb56e22b3d074e089884371d8e0ba3575ebde35bd985682836194ae18bdce71dbbd7ad2db4469da85a0ecef75944c7306af50ba00868c94ff051c82f9010070bab3709c9899f1fa6f4a9a8928101ded5a2ddbb5fb7631b67102edb60ff5d5c3e02c6d446ac077f6f6e46d3e04589bd64504b74ea3b8c5ed2b7493725f7ce4cabbcdb6895fc5dd8c6bb268a3827011097410d51659c8175becb535c20f6154a0d5ab37ea4833f50c807d46acd75f44bff3575f3887b92941abfefd7876db58acc1fab78b7cd16225ccf7f57195bd7bd8ce0bb7f152fde761e7fcc7a0fbcf8b33a92a79383ba924c84340ae7661431704aeb5337cd22fe363c65be5fbfea2f529d24d424b28b64363454e351924d011545a054e0d889a29c638871e576b74954869726b5e3e005c030c0c48dc1f4864e12b174784bb16435a206a25c7add0c39da3078203ffb418aec71d314268a25251879ef36e287eb7d829f026857efdf79fc58cf71ddfa8842c14a8787aa5e2d57d549e2d762337b6251e7189e0b8430f2bd664b53650609d9d28d746f23595410d8208e0f1e7528a8dc4b7916ed99940a7430a17c8917bf6b87504e30030072f16fbd7205b84edf8741c385d61443605fbcc7d88b222f0ae8b079961cbcaebc4b89a7cdce05c92367f8ff32c275724d2a917dac7ac195231f2c523761d50e267609c3d53c7512854930ce0178513ecce17eaaef48605f79f52849910d7230d242ce29bae20afecfdb248ba172289e4cd3438202f39bb2c74ca346f8ba00c8c71eecd1cba9ea6ab961789f863d89976a72b8384343a866a940b516be6efccf3fd642195603862025759f20ae57e9f4060be16e5c1b73e9d5f41606d71ff7629337d7b93b2b4b6362b079da95681386454b13acf6108ca8d023bc5fb60ff84f4b615db271eb5bcdd058ca2355a40034605fbc0f295899be95ce9d86f40c98ee7869ad51ec0133ec32277bb62baf2f615db1f43592b8b1bfce4ff58896651c9e01c5b0083cc2c7af8edca0f9b0bc148bfa6707651062cb62a1e9221f8a6bea7682e46c9fce1117430be1eb80af5858ea5834d0bc427abfb5634e510539ceed4689cb16f39e77c3f2f394b41720187a27bb9e6179a272b020212caba4e3bbcdff5cd8b3fe0218227929e6cc70c00776f97c02b193644e637cb73e958287ec51bb07b45e0b701066a69de6a573767d582b21dcfa163e088eeb575ac9837140a5ea094cac364e34a41586397c88eb4dd741b71acefe6e1f0b502392713d68565d9ad558fd872542c1f0dd722a5fbb31ed05892691d5d2b0e79c58bcc99e387c2f265a78d9ab450bdf843c176ea0ee4cfb786874c27dc3cafbbc2ff472023ed50e5db832fad60cf4ec2d211f370d27a2e94c90be2bfb5ba1c9d08960691469d415689cd28895742fd8f30b7d359c3577047e81f7150d1b5729d6ae93323ab0b259cbdcc7f243c1fac99f3ca511d6db4e124ea64592ef7ec1a7cedba40e4b33dcc7377344462e48a73bd488192cde67582e1a2aed555f79c4ae4699563804d295169d6f85c586cfd961e8c6e70d97fbd82b1e9d855f4d53d070e09bc52f3781e8ad2b6def05b4f948075ec77be66bf59adff1bd4dcfaf2aeae66c622a7f7442ec159e60a3eb99a75989c5b29c32f77af2eec70c8d9140cacda96b319389e8ceb7002cdbcc40e7d959d10d12f8dd78f6217035323be735c6b9f5b578521d45bfe6ae8eaf3f2dfda90e2e5d6ca8ce076b515c54a9cbdef1e6989dbc50de7fed1d20f235aded709ce7b76f9a295384bfb9690876c758e2b1ed0ded6dc2a90429a8ce667de82e49010e4f435bfe2a495deae013b67cd0fc85fc73b997ee322da83cf8ec1313564dcfb2467036ab7b9dbe074868c19e7aa956911409ddbdaa38b64951ceb1fe968c23719007b92884d6e75c2b806ed2404107018f8ec43718ec4666e91fb4e9b478fdc517c3647450dc504ffc1069c9cf68a726aa69288a7320c927c29a3bc9704cd1c74d6410522e9a3f7cb9e591a011374fe80bd64104481fb9e4ccaef57c6a98025130744752d606ff6527e32109d5e27ef067452867dc7c4fb89b0c7a81de7236696bcf7beef5da0992972766a87d3e9c1cb55f52efdee6375ec8eb31aca6530433a8897a2f7b3e3b1e0a257c5b3fc3434dce54c857f3f2bc3be88f62efa10428bdcd922a853049f275a346cef1aaac0ccb090b724f702d8733f83dcce877a6097ae8a0dbb7253f554a25457dd13e52a9707c16f996159007931db0049427101e866a08155bf3476e2e4ed04fa814a4a77b9a67b54d5abe869ab5f65c36c5840201ca2fcb6a48efc8947837c5fa7ca4f7be6ce69f08829c102d163383ad10feb14f627ef142b651872155ddc4291fd0c5957693fd668b326dd592575517669807284af49d2811df1b920fea4b7adcb8ecd2c210100c820e87e7135251100e8adbc7f7c50ca44d4871ea988ccac8518d9c2050d731a56d691df6a83587099417e6f6a67a12ee21d5", @typed={0x8, 0x25, @uid=r4}, @typed={0x8, 0x37, @ipv4=@multicast1}, @nested={0x2d0, 0x1c, [@generic="b2820b7ca27509d92432f50e1fa7551bfa67781a1e7899d9904ce798c7688da117a5f0ba37135d753c5bf36a42db3961e016404d1bd449709c93785c76d8fe2c74d7cabe5f1def3d94cbb87ef116b2f7bef665e096b8a866ae6b732c334a8076bb621dfd97f12bc0818b4b1c484b573d2fa3911aa641a35895d8d1fd57668fc5583f3c9c7b6d9bd9f007dc5bb54242569c30bb813d728f9855002a96586d9996b70f2bb514584605b1c4d400f2d97d0396268560e9d25d83f77c1c2079b6b1863020507fc4176f3484d3563b142255ea84612a6040ade5d7dc3ad69841e300f1cd", @typed={0x4, 0x91}, @typed={0x8, 0x38, @uid=r5}, @typed={0x8, 0x90, @pid=r6}, @generic, @typed={0x8, 0x5, @ipv4=@remote}, @generic="7231679ab8b6322e862807b5a86d3340d8103100ff8219609f96cbbe9e5dfa075293938363bc622afee1bc023146d60d1eeca1a47b54ead33cc468169619433cec3b5105fe5d8a6ff1bcd354293aa6abadd5c109996cf90e76ecf9cd6e9a2fe3ea9be9a940aff0ff5dbddcbd527d1540c40d448eb137ef1a5b6f63c5827974a5ddedbe3c77bf50a4ea98eae9352f07fcf9ff74b67b2a2c1f2a051304226307d14c38c51148fc750cdab8cc7d82c7b592ad82772f31513c31480c4ae56a10913a2a6dc91824bce91b4313fb5e5631e99f9c9fdd8628504e6106e20fcaefeb908cae6ebc10b5eff02eae2d900ee2d4dd6a74a2b1d688956f8b", @typed={0x8, 0x30, @uid=r7}, @generic="66509e9a01", @generic="2347e31d69a29f28b6bc4fc29d59f02b80484dca1a0070102bb8c67971dc0a801adc247a4c644ea6f77ced8b131b5361dedb0d06505056996178acf869a066a8539cea9577557af41e715481f6e3d10ca260d1972cfa4dd3272fb461bea106b2547cd2233214cee92abcb001de6a399ad12ac5e37f1165d09d6e4a8894079cfb27c88d7b50d649a052944d88798293afef5e5340bede746c2629cceda3b2b84e3054fc390305282245d87859c8aaaacadfc35a112024e9802f1f8eed24afc39847aa22e3b71abbfd2096"]}, @typed={0x8, 0x2a, @pid=r8}, @typed={0xc, 0x2a, @u64=0x101}]}, 0x1304}, {&(0x7f0000002d00)={0x1500, 0x2f, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0x51, @u64=0x8000}, @generic="31623177beca72ac78b02c43a2ecbe98cf8a95287ad14dba2508bc3ee71affe7f097096de17249c38801fc31632b97268fb0094558c8b72d8b261f70d79b578268d761ff2e92344ce066ab9271c4e9a0e86f57ad18f94032ba8acf3705ecb2a6fe03e7c1df", @generic="a022a36da81203f958cf7cf1c721fb841e625b2eba8287f880a8bdcdee70a2c80f55cf697cdda310752aeea7794f44c93666d48aaf48e306192ea445d485c502d73e6c974d3dc9995b8331df51eab414bb72d71284cf68f40b269035922140fde0c1f33b8ddbfcdecb501534baeed5c20dc77bb03de9521e5fd60beb63952174c1b0a87c22e93b1c8baab43ad09a1650e376c065e12dd2324f8099f47ab7ed559480bc57d3df905d93c270144b9c35e74f2a86b4d81277f24b3a0f2263f3fdae3a49fb79c01e8f08846be1ef0d6e424e29d89f9732b685624ad69326affb68dfe44875e10e308c8303b0252b1a2e024477982c24044ecf69bac493d2f97d", @nested={0x180, 0x59, [@generic="d910ee12307e565f19cf9cd74878ac4cf5ba11681d9cf0a38fb7dd259d53939ae17a55f9e8bd75f03f0a31281de45565f2fd11da8d1d2df4f217d66819827ed844f488c5e5ea969f4689f42c54dac5c12411ac302834556750bf5f8b066317e46a79d1f37195ac230a8de1df3f934a0f204c4f38bf16f707e540d479e8931cfd22301c0b", @typed={0x4, 0x82}, @generic="ea5514707ad063aeab33e5bf62b0b3632b5ee93887112347d7f214f545b4a95660278533ce1533d5ae650317cc8d1409ad47e43e92affb9a99973e5f680a9366c1b2db8766697e085e23f6325065ba8756212c8c852c6444bd96bde53528e4f68cdb7bf5a3dbcf11c3e79ef34fec0ea346376df0e7755f754a0831ab8e47f2615bf306575c4a32c86f6f085d553a12da204a2716c2008e797c20bc6bfce0a9e82d349ddc9bd27bf611beccc4bc9f160b1bc0d7b8c3291cc31bc08081bf05d3af81e38bb943b431072f4e32953e16d9ce2bad52b7c37f79e112fee3c0a2376741963aa501f27309bf82500975fdc7c69e7c"]}, @generic="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", @nested={0x1d8, 0x8, [@generic="20f459e99a85c9edb921d74846746fe24b4376756dc82d934045122b8153c54da5f3ee2fec88a266d0e75c44073f488314caaa1260221f4cf51aece99d83ed5a75ce9769142e05709d5c680502db6140eb1684a1977bd4a305b702cebd4d0819addbeac41d0e3a1df860857324721217d29363a5f972fd45e98aa5e276f0dd9c053e10661d129cbbcdea226822b3e0509e4e648ff40309c4e80fd0c59e07a654e80ce87150d3e1180a9c099b8f47b3278e5bf1fc6abc257e23032db1b3db78e956", @typed={0xc, 0x82, @u64=0x1}, @generic="557c077d920f6c3d6b8cc338cabe6a1dc0f4afbdf14babf0de2cffed0949e95f37367adebae1954747a2c88dc17c906e00331a082891fe1deb966b1ed53cded023345ca008ea2ebf9831a02bee9912fe21cfdf9ef1e5f5ddcce602fbf91ed6920864a2b16bba84f37685b15ac244b632db95ca56c81e1aac37b5dd6833c1b596330970a411b124d7f32156e697e58a064efdf128794ff4af6c5ed55aa3a65972f78fb0566bf2a45541a54ea0c27b1a6b67cf3201a010ac0b9bdb6cb01c74ac929284c111984a23b9512dee8fe9e7eccd", @typed={0xc, 0x80, @u64=0x9}, @generic="3475ff8bbcbaeabde82e852aeacd96", @typed={0x8, 0x37, @fd=r1}, @typed={0x14, 0x75, @ipv6=@mcast1}]}, @generic="b00143e4c245dd2445b72e559d37eaba9f54f3b68e324470982e327f11f5f2e73aeead47991c"]}, 0x1500}, {&(0x7f00000003c0)={0x1c, 0x26, 0x100, 0x70bd2b, 0x25dfdbfe, "", [@typed={0xc, 0xa, @u64=0x9}]}, 0x1c}, {&(0x7f0000000400)={0x14, 0x34, 0x208, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x4, 0x6b}]}, 0x14}, {&(0x7f0000004280)={0x1270, 0x3e, 0x100, 0x70bd28, 0x25dfdbfd, "", [@nested={0x123c, 0x0, [@typed={0x4, 0x2a}, @typed={0x14, 0x22, @ipv6=@mcast1}, @generic="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", @typed={0x8, 0x22, @pid=r9}, @generic="9d3c24665a1c4542f5b85fcb0845a9bed88d1755a5cb40c3d7b0f0f0fc6d4d69fef6c01ad22229d2e81d86ef9c0dab283e181127903535ff67f9c4f66f6f66888b7befa90061fe137a0829cedda2f443746b9dae333e8f8e98e244f152966c20204277fd688c3eda67ee6208a83bd271ee00ab8be2df8c90cb2138913cd1e3928d7da12cb68b45942f813402ff6bdb5368097a7e1d9c2d48a129d7bc26b3d38373dfedb93d2214c6a5d859896d4260517c1170d009a2b694bb3d60c2ecdc9dfea5f6e402ef0fa9d78c7c6512083cf222f00152e47a4b0c9d84efd7d9471929", @typed={0x8, 0x7856, @ipv4=@multicast2}, @generic="9b400f75be0af721e1f5667c8cd44fba7da07600328416d65db2274e37b8559fa5c92d04c6de6c512a3a1f70b7ece6e4485442329c22867fa2ee5cd0eae6194ba02604dff8c4376ae910cc13556c5a5f0327a048d7a35dba5ba28bb376d8d23b71709175cb91c18eeb2d4e6f2c68e9916b904f28a6c37657ad8e36b0e9c8164bcbff426b3764433a6845152aa4454a3e4a9cc56cb042f8fea44dba9f0de5571a8a23656af970a7f92ed44f10d7148874c4600bba435082125d75578de4bae9a9de050f1e991fc0f26cb15969f6a1b4aa5eeb3db8a889a7132cfdb1624d828e8bb02e322e163d3b", @generic="ad3567306c812ce898e4f98fc34bd5162d9c11dcd4b48da22b5f65e4d51d4c7bb2f6846a0f286faef9ddff71377c68ef90f0d06616fdf76c5ed7b64ddde5296d21d2c53476df5cee29a4"]}, @nested={0x24, 0x57, [@generic="7fb00434b6843773b78779ce0e5d527328ce3d5e59919fd89db50ef2e1a651"]}]}, 0x1270}], 0x7, &(0x7f0000005ac0)=[@cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x18, 0x1, 0x1, [r1, r2]}, @rights={0x20, 0x1, 0x1, [r2, r0, r2, r2]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x28, 0x1, 0x1, [r0, r1, r1, r2, r2, r1]}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r2]}], 0xf8, 0x90}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:21 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x3f, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00>K*'], 0x0, 0x0, 0x0}) [ 152.435065] binder: 6329:6341 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.435129] binder: 6329:6341 transaction failed 29201/-22, size 0-8 line 3199 [ 152.435623] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.441675] binder: 6336:6338 ioctl c0306201 20000440 returned -22 [ 152.482205] binder: 6322:6326 transaction failed 29201/-28, size 887272067003-8 line 3137 06:14:21 executing program 1: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 152.497723] binder: 6337:6340 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.500728] binder: 6339:6346 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.500792] binder: 6339:6346 transaction failed 29201/-22, size 0-8 line 3199 [ 152.501430] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.536314] binder: 6337:6340 transaction failed 29201/-22, size 0-8 line 3199 [ 152.536482] binder: undelivered TRANSACTION_ERROR: 29201 06:14:21 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) wait4(r2, &(0x7f00000000c0), 0x9, &(0x7f0000000100)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0xf024, 0x3, 0x4, 0x7a4}, 'syz0\x00', 0xc}) 06:14:21 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x80082, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x7e, @local, 0x1000000000004e21, 0x2, 'fo\x00', 0x29, 0xf80000000000, 0x6e}, {@loopback, 0x4e23, 0x3, 0x5, 0x800, 0x2}}, 0x44) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0xb630, &(0x7f00000000c0)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 152.551598] binder_alloc: 3360: binder_alloc_buf size 887272067016 failed, no address space [ 152.562753] binder_alloc: allocated: 256 (num: 26 largest: 32), free: 12032 (num: 1 largest: 12032) [ 152.576803] binder: 6348:6349 got transaction with invalid offsets ptr [ 152.585661] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.586237] binder: 6351:6353 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:21 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:21 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) 06:14:21 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140), 0x4) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x400, 0x401, 0x4, 0x2d7}, {0x3, 0x2, 0x100, 0x5}, {0x1, 0x6, 0x9, 0x8}, {0x1, 0x1f, 0xfffffffffffffffd, 0x3ff}]}) keyctl$session_to_parent(0x12) pipe(&(0x7f0000000080)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000000c0)={0x80000000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000008912dc60f600000000000000000000000800000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000005682c3266403305b0a62a9bde2f573030c2c2d28f57e9f536f6bd208497427dccf1171a21f529f1c020515c2c6daa34fe0626306fc1289e27de6446391c44eb7b21d37"]], 0x0, 0x0, 0x0}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0) 06:14:21 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x20) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 152.586306] binder: 6351:6353 transaction failed 29201/-22, size 0-8 line 3199 [ 152.586617] binder: 6322:6352 transaction failed 29201/-28, size 887272067003-8 line 3137 [ 152.588480] binder: 6348:6349 transaction failed 29201/-14, size 0-8 line 3164 [ 152.595455] binder: 6321:6324 transaction failed 29201/-22, size 0-8 line 3199 06:14:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x3d, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES16], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES64=r1, @ANYBLOB="83117974cf9c2a865d7b5548f5e0684dfceb39e0045d6aaf080960eb8a97c294a345bbfb6ef387e6998883877a52a82851efcb5a6a4bd912c2ab7184139c31f33bd461677f21546ada46522e1674106b", @ANYRESHEX=r0, @ANYRES16=0x0], @ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x2) 06:14:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000500)="0000000000000000000000536d2b467c0760359300e16c923a3986d29819b668ad3b778a9d3ff145644ed5a3cc2a11d1dd0afea91dfcc882d692c44e82") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000100), 0x1c) r2 = dup2(r1, r1) ioctl(r2, 0xffffffff, &(0x7f0000000140)="fa0ad77c6ae5f4a4fd9ae79fc0006c30c9cf57b743f770d6c4d42372883b44ae7ee9af4455b50aa436938b0606427dd6bdf5de68520262ba0f3748830be701d841b1a5c8759666439ad0a9805100ff202c97a5778be7c47d10a5331e4c9e4d1331d429f79d1daed0175eaa5e7231a79961daad5c8e6e7ddcf26bac14643684997c52a19fa7f58342103dd9ffbbbff4a96281edfa7a243e41abfde95a84ed15116e2d4fbeb94ca0ad61e7d7427cbc5f762efd37b0499349b6ce94b51bc5606d521cea88c38b83a81ea0c57b36354476f4bb0008") setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x132224) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0xa8, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffffcd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x837}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffea7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_netdev_private(r2, 0x89fc, &(0x7f00000002c0)="1cc973a24a7e57c1e96b09ebeb4fde1bf830bfcd8d26bcc5c085dddd56452084279060518a4d8497e3f70eb42a8653e7d4ad95e3caa9e7571d0b0e20116cbee4d9e8f46c9972030e94bb257ec38097e13d5139be1ace025635a58a8e4d7472884f76bc81b6cf3ed0673e7bfa1baed073093ddca3fe7ef1d93384054c14e6196006452a85ab738c3e2713da9f3eb6db102953c6952190f6766029fd43a8d5078b8f88ee4ef045ca257792") getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000440)={'ipvs\x00'}, &(0x7f0000000480)=0x1e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) fcntl$setstatus(r2, 0x4, 0x42803) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000004c0)={'yam0\x00', {0x2, 0x4e23, @loopback}}) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 06:14:21 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00ae4040000000000000000000000002000000000000000000000000010000000000000000000000000000000800"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB]], 0xfffffffffffffef0, 0x0, 0x0}) [ 152.724673] binder: 6362:6365 unknown command 0 [ 152.730349] binder: 6369:6370 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.748740] binder: 6369:6370 transaction failed 29201/-22, size 0-8 line 3199 [ 152.776091] binder: 6362:6365 ioctl c0306201 20000440 returned -22 [ 152.776187] binder: 6371:6373 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.776236] binder: 6371:6373 transaction failed 29201/-22, size 0-8 line 3199 [ 152.794664] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.794779] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.794839] binder: release 6359:6368 transaction 346 out, still active [ 152.794842] binder: undelivered TRANSACTION_COMPLETE 06:14:21 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000280)=0xc) write(r0, &(0x7f0000000480)="d75665d8df78332f7894fa2711d1c136e6aa1a0a20c3bc1d2ae95e9de4fe3be1d55e8656fe45c375334cd32a3450abf52ad539b51a093dae3f5e4b7674659fa4da3b4f8648ab101b1b6f605b8c79eef64e3f533e587543a59773acca3ebd39536929c657b2e00358a28f0601fec00273077cd75f86d50f35b85f1cb681a4aed07b2eb8df311cbc1c9783f1267da9331028f105b867fa08b1693bc099ad4ca3086904b405", 0xa4) getgroups(0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0]) write$P9_RGETATTR(r3, &(0x7f0000000300)={0xa0, 0x19, 0x1, {0x82, {0x4, 0x3, 0x7}, 0x7c, r4, r5, 0x401, 0x100000001, 0x4, 0x4, 0x0, 0x5, 0x0, 0x3f, 0xfffffffffffffffb, 0x28, 0xffffffff, 0x6, 0x3a, 0x4, 0x8}}, 0xa0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x50000, 0x0) write$P9_RWSTAT(r6, &(0x7f00000000c0)={0x7, 0x7f, 0x1}, 0x7) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000008d0e53519c980000000000000000000000000000000000000800000000000000000000000000000034e29f84fe55a1885da915cc6215c2c1c609441075df", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) write$P9_RWSTAT(r6, &(0x7f0000000100)={0x7, 0x7f, 0x1}, 0x7) 06:14:21 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 152.795141] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.795308] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.795504] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.795659] binder: undelivered TRANSACTION_ERROR: 29201 [ 152.843524] binder: 6378:6381 unknown command 1077980672 [ 152.843535] binder: 6378:6381 ioctl c0306201 20000440 returned -22 [ 152.867826] binder: 6378:6384 unknown command 1077980672 06:14:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000180)={0x4, 0x0, 0x3, 0xffffffffffffed28, 0x7, 0x9, 0x7ff, 0xff, 0x6, 0x7fff, 0x3, 0x200}) r4 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x2, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x78, 0x38, 0x78, 0x40, 0x18]}}, @release, @free_buffer={0x40086303, r4}], 0x1d2, 0x0, 0x0}) 06:14:21 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) [ 152.874310] binder: 6380:6383 got transaction with invalid offset (0, min 0 max 0) or object. [ 152.878740] binder: 6386:6387 unknown command 808482864 [ 152.878750] binder: 6386:6387 ioctl c0306201 20000100 returned -22 [ 152.885391] binder: 6386:6388 unknown command 808482864 [ 152.885401] binder: 6386:6388 ioctl c0306201 20000100 returned -22 [ 152.919694] binder: 6378:6384 ioctl c0306201 20000440 returned -22 06:14:21 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:21 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x10000000000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:21 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet(0x2, 0xf, 0x7f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 152.973921] binder: 6380:6383 transaction failed 29201/-22, size 0-8 line 3199 [ 152.997423] binder: 6395:6402 unknown command 0 [ 153.010439] binder: undelivered TRANSACTION_ERROR: 29201 06:14:21 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:22 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1_to_team\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x3c, "86b2a9b4861c01e1cfa273f574504a876571639bb1284d27d48540640ebe7abb82b2abcf19c287facc91928f28473a9ab4a5fc02df1d7518ae1e216d"}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00808d45ff2e12b4"]], 0x0, 0x0, 0x0}) [ 153.027675] binder: 6400:6403 got transaction with invalid offset (0, min 0 max 0) or object. [ 153.056969] binder: 6395:6402 ioctl c0306201 20000440 returned -22 06:14:22 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], 0x0, 0x0, 0x0}) [ 153.083638] binder: 6408:6411 got transaction with invalid offset (0, min 0 max 0) or object. [ 153.095400] binder: 6400:6403 transaction failed 29201/-22, size 0-8 line 3199 [ 153.111527] binder: 6410:6415 got transaction with invalid offset (0, min 0 max 0) or object. [ 153.126307] binder: 6414:6417 got transaction with invalid offset (-5471258923383291904, min 0 max 0) or object. [ 153.135250] binder: 6408:6411 transaction failed 29201/-22, size 0-8 line 3199 [ 153.144619] binder: 6410:6415 transaction failed 29201/-22, size 0-8 line 3199 [ 153.145861] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.145919] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.177019] binder: 6414:6417 transaction failed 29201/-22, size 0-8 line 3199 [ 153.191517] binder: 6420:6424 unknown command 0 [ 153.196333] binder: undelivered TRANSACTION_ERROR: 29201 [ 153.208579] binder: 6420:6424 ioctl c0306201 20000440 returned -22 [ 153.228472] binder: undelivered TRANSACTION_ERROR: 29201 06:14:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getpgid(0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x7, 0x4, 0x9, 0xf80000000000000, 0x80, r2}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getdents(r0, &(0x7f0000000100)=""/97, 0x61) 06:14:24 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20100, 0x85) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000000c0)={0x20, {{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x12}, 0x1}}, {{0xa, 0x4e23, 0x3, @rand_addr="fc77a5331e2c940f8e11ea70f0092fb4", 0x7}}}, 0x108) 06:14:24 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000034252300000000000000000000000000100000000000000000000000000000000000000000002000000800000000000000000000000000000073bf5e9742a0e197adc13d89bef52535637db1a5a30d3fa09ac296adc83d2a86ff02be1a42450a8a46232aa768af03e010fda89db97e049a8981d88bff9e16e9f528cc7e605ddb046242a96be38c33c25e9cf493e55c1017dc7e1c09d6ed84af0731650700"/174, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) recvfrom(r1, &(0x7f0000000480)=""/4096, 0x1000, 0x0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast1}, 0x2, 0x2, 0x4, 0x1}}, 0x80) listen(r1, 0x7) 06:14:24 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:24 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x20, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/32], 0x0, 0x0, 0x0}) 06:14:24 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:24 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 155.889594] binder: 6435:6437 got transaction with invalid offset (0, min 0 max 0) or object. [ 155.893524] binder: 6432:6434 got transaction to invalid handle [ 155.893535] binder: 6432:6434 transaction failed 29201/-22, size 0-134217760 line 3014 [ 155.897624] binder: 6431:6441 got transaction with invalid offset (0, min 0 max 0) or object. [ 155.897687] binder: 6431:6441 transaction failed 29201/-22, size 0-8 line 3199 [ 155.898165] binder: undelivered TRANSACTION_ERROR: 29201 06:14:24 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x22) capset(&(0x7f0000000400)={0x20080522}, &(0x7f0000000240)={0x46a1cace, 0x10000, 0x0, 0x200000, 0x0, 0xfffffffffffffffd}) 06:14:24 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffc5b, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0}) 06:14:24 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x20, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/32], 0x0, 0x0, 0x0}) [ 155.902877] binder: 6431:6441 got transaction with invalid offset (0, min 0 max 0) or object. [ 155.902937] binder: 6431:6441 transaction failed 29201/-22, size 0-8 line 3199 [ 155.903552] binder: undelivered TRANSACTION_ERROR: 29201 [ 155.963562] binder: 6435:6437 transaction failed 29201/-22, size 0-8 line 3199 06:14:24 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) write$binfmt_elf32(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0xb779, 0x3, 0x5, 0x8, 0x0, 0x2, 0x0, 0x0, 0x3e3, 0x38, 0x10a, 0x2, 0xfffffffffffff845, 0x20, 0x1, 0x800, 0x7}, [{0x0, 0x89, 0xe1d, 0x8, 0xffff, 0x7fffffff, 0x100000000, 0x22}, {0x0, 0x55, 0x5, 0x0, 0x0, 0x5, 0x8, 0x20}], "a5e5d56cad97b251648fd2efc2d24ecf4cd0438ff564dbef6f6ac51d2a408d70b9ee6ece2a849adaf3a9c7290ccfb0ebc831460d0d821aef92cbb4d47ee54d9fb07fa07e2be33a838486a0ab02edf76010184293d3dc33c8b1ea27f369c459360b740c03061dbaa5", [[], [], [], []]}, 0x4e0) [ 155.989779] binder: undelivered TRANSACTION_ERROR: 29201 06:14:24 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.events\x00', 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x8, 0x7, 0x1ff, 0x4, 0x18, 0xfffffffffffffff9, 0x40, 0x280, 0x6, 0x9ea}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x151000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) sched_getparam(r1, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r4 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() getsockopt$inet_int(r4, 0x0, 0x100000000000001, 0x0, &(0x7f0000000000)=0x1) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x27) fcntl$setstatus(r4, 0x4, 0x2000) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r6 = syz_open_pts(r0, 0x40000000000003) flock(r6, 0x0) [ 156.064738] binder: release 6463:6467 transaction 357 out, still active [ 156.067063] binder: 6465:6466 got transaction with invalid offset (0, min 0 max 0) or object. [ 156.067181] binder: 6465:6466 transaction failed 29201/-22, size 0-8 line 3199 [ 156.096910] binder: 6471:6474 got transaction with invalid offset (0, min 0 max 0) or object. [ 156.105976] binder: 6465:6472 got transaction with invalid offset (0, min 0 max 0) or object. [ 156.121074] binder: 6471:6474 transaction failed 29201/-22, size 0-8 line 3199 [ 156.138427] binder: undelivered TRANSACTION_COMPLETE [ 156.147580] binder: 6465:6472 transaction failed 29201/-22, size 0-8 line 3199 [ 156.151856] binder: 6471:6478 got transaction with invalid offset (0, min 0 max 0) or object. [ 156.151915] binder: 6471:6478 transaction failed 29201/-22, size 0-8 line 3199 [ 156.173124] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.178707] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.184665] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.190341] binder: undelivered TRANSACTION_ERROR: 29201 06:14:25 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = fcntl$dupfd(r2, 0x406, r0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f00000002c0)={0x2, 0xffff, 0x1}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="200926bd7000fbdbdf25040000004c000200080002000800000008000200ff7f0000080001002ba0000008000100050000000800020048454911080002000300000008000200ff7f000008190104090000000800020093210000280006000400020004000200080001000100000004000200040002000800010004000000040002003c000200080001000500000004000400080002004b0100000800020000000000040004000400040008000200ffff00000800020000000000040004001400090008000100080000000800010009000000"], 0xd8}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) signalfd(r0, &(0x7f0000000380)={0x3}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:25 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:25 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x20, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/32], 0x0, 0x0, 0x0}) 06:14:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$TIOCSTI(r1, 0x5412, 0x821c) ioctl(r0, 0x8001000008912, &(0x7f00000001c0)="0a53855f4262b103f9c54a") r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') dup2(r0, r2) 06:14:25 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0xffffffffffffffcc) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syncfs(r1) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:25 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1, r1}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 156.677087] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.680206] binder: 6432:6450 got transaction to invalid handle [ 156.680216] binder: 6432:6450 transaction failed 29201/-22, size 0-134217760 line 3014 06:14:25 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x30, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0}) 06:14:25 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x82) socket$inet(0x2, 0x3, 0x8dc2) 06:14:25 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:14:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) close(r2) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x16) close(r3) [ 156.725759] binder: 6483:6491 got transaction with invalid offset (0, min 0 max 0) or object. [ 156.757256] binder: 6483:6491 transaction failed 29201/-22, size 0-8 line 3199 06:14:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 156.773075] binder: 6496:6499 ioctl c0306201 0 returned -14 [ 156.784142] binder: 6498:6501 got transaction with invalid offset (0, min 0 max 0) or object. [ 156.784965] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.785033] binder: release 6486:6493 transaction 363 out, still active [ 156.785036] binder: undelivered TRANSACTION_COMPLETE [ 156.785321] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.838264] binder: 6504:6512 got transaction with invalid offsets ptr [ 156.855226] binder: 6489:6494 got transaction with invalid offset (0, min 0 max 0) or object. [ 156.861654] binder: 6504:6512 transaction failed 29201/-14, size 0-8 line 3164 [ 156.866465] binder: 6498:6501 transaction failed 29201/-22, size 0-8 line 3199 [ 156.875050] binder: undelivered TRANSACTION_ERROR: 29201 06:14:25 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 156.875114] binder: undelivered TRANSACTION_ERROR: 29201 [ 156.904124] binder: 6511:6514 ioctl 8912 20000000 returned -22 [ 156.907615] binder: 6518:6520 ioctl c0306201 0 returned -14 [ 156.912567] binder: 6489:6494 transaction failed 29201/-22, size 0-8 line 3199 [ 156.920328] binder: undelivered TRANSACTION_ERROR: 29201 06:14:25 executing program 5: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x4d2000, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:25 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x21, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/33], 0x0, 0x0, 0x0}) 06:14:25 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:14:25 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 156.946081] binder: 6511:6517 ioctl 8912 20000000 returned -22 [ 156.985919] binder: 6529:6530 got transaction with invalid offset (11, min 0 max 0) or object. 06:14:25 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:14:25 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x21, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/33], 0x0, 0x0, 0x0}) [ 156.988698] binder: 6526:6532 ioctl c0306201 0 returned -14 [ 156.990272] binder: release 6528:6533 transaction 369 out, still active [ 156.990276] binder: undelivered TRANSACTION_COMPLETE 06:14:25 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000000}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000e012a76990d0ff5768dcd1014a926ee8a80e96c1e391b3612848be152a80ca66732dedf9db54af85c09e432433fd337073faf4c860ab709b377c8e31f8bc098f572480c56e925bcb5f7d48a49a30f1933044f58701b1be1f627295a8ba928457d409a613e9de5ca585dc78c6a5b73c57a36390049a384fd043a61139109b42b3e188787bfba0c440768638cc", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) [ 157.040939] binder: 6531:6537 got transaction with invalid offset (0, min 0 max 0) or object. [ 157.041831] binder: 6536:6541 got transaction with invalid offset (0, min 0 max 0) or object. [ 157.041896] binder: 6536:6541 transaction failed 29201/-22, size 0-8 line 3199 [ 157.042217] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.048013] binder: release 6540:6544 transaction 372 out, still active [ 157.048018] binder: undelivered TRANSACTION_COMPLETE 06:14:26 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 157.052301] binder: 6536:6545 got transaction with invalid offset (0, min 0 max 0) or object. [ 157.053373] binder: 6536:6545 transaction failed 29201/-22, size 0-8 line 3199 [ 157.053744] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.121038] binder: 6529:6530 transaction failed 29201/-22, size 0-8 line 3199 [ 157.144013] binder: 6531:6537 transaction failed 29201/-22, size 0-8 line 3199 [ 157.149332] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.159558] binder: 6529:6552 got transaction with invalid offset (11, min 0 max 0) or object. [ 157.167995] binder_alloc: 3360: binder_alloc_buf size 1360087087465889792 failed, no address space [ 157.168003] binder_alloc: allocated: 296 (num: 31 largest: 32), free: 11992 (num: 2 largest: 11984) [ 157.168048] binder: 6547:6550 transaction failed 29201/-28, size 0-1360087087465889792 line 3137 [ 157.168720] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.201224] binder: 6529:6552 transaction failed 29201/-22, size 0-8 line 3199 [ 157.203148] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.216338] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.216407] binder: 6531:6557 got transaction with invalid offset (0, min 0 max 0) or object. [ 157.216455] binder: 6531:6557 transaction failed 29201/-22, size 0-8 line 3199 [ 157.260948] binder: undelivered TRANSACTION_ERROR: 29201 06:14:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000580)="a2e6565b", 0x4) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendto$inet6(r1, &(0x7f0000000100)="ce841100001b000000911efc1fb35c22cc6dc37916215963e15505", 0x1b, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x101}, {0xa, 0x4e23, 0x0, @remote, 0x4}, 0x10000, [0x8, 0x6, 0x1f, 0x44, 0x8, 0x9, 0x9, 0x7fff]}, 0x5c) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000000)="a606908de19b5cbdfd09a7d625ffb3cfed6cc124468af56c108fe8b2ba7931a902eb5aa8446355", 0x27) 06:14:26 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x21, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/33], 0x0, 0x0, 0x0}) 06:14:26 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:14:26 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:26 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_OPEN(r0, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x3, {0x0, 0x1}}, 0x20) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) 06:14:26 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x12, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) 06:14:26 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:14:26 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/41], 0x0, 0x0, 0x0}) 06:14:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x1, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000180), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x1e, 0x6002, 'veth1_to_team\x00', 'caif0\x00', 'syzkaller0\x00', 'veth0_to_team\x00', @link_local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xe8}}, @common=@nflog={'nflog\x00', 0x50, {{0x8, 0x3, 0x3ff, 0x0, 0x0, "0b93fb1877919ea0558189eafcf4550274b936abbdf76e2153c3b1aef1f871dba266a479333c75fc5ada3cfc9e8bff9b701518f951899249c8115398d8160a4f"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1f0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000f37e7ad159d15b470a268eaea8a20ec2f63fb9a56da8fb2b8814d6cd19b6dd440ff98876085b592bb08f7f9c1fe4c4b8e2ee31231e407168a82c2db9572b6ee9911f1adaa963e9bba99e991291aa7e2bb15d29387c83784164ae0a198afec1d34635a29ab27765a28bb0164ada236395225f217b2e714670cf7241ea498108944027eada62d660d001f0634fe6276013cf51ac363141f06e863a50b590ca0f2e837da111d624b15dd90415129b2e10", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) flock(r1, 0x1) r3 = dup3(r1, r0, 0x80002) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000400), &(0x7f0000000480)) 06:14:26 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCSIG(r1, 0x40045436, 0x3a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000a7000000000000000000000000000000000000000008000000000026b70000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x40040, &(0x7f0000000480)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}], [{@dont_measure='dont_measure'}]}}) 06:14:26 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) [ 157.707279] binder: 6563:6567 unknown command 0 [ 157.720223] binder: release 6561:6569 transaction 377 out, still active [ 157.727198] binder: undelivered TRANSACTION_COMPLETE [ 157.736187] binder: 6563:6567 ioctl c0306201 20000440 returned -22 06:14:26 executing program 1: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000280)) ptrace(0x10, r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f00000000c0)={0x0}) [ 157.797282] binder: 6563:6583 unknown command 0 [ 157.807215] binder: 6563:6583 ioctl c0306201 20000440 returned -22 [ 157.831831] binder: 6584:6588 got transaction with invalid offsets ptr 06:14:26 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:14:26 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/41], 0x0, 0x0, 0x0}) [ 157.850143] binder: release 6586:6591 transaction 379 out, still active [ 157.857250] binder: undelivered TRANSACTION_COMPLETE [ 157.883200] binder_alloc: 3360: binder_alloc_buf size 162330960421978112 failed, no address space 06:14:26 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 157.904461] binder_alloc: allocated: 312 (num: 33 largest: 32), free: 11976 (num: 1 largest: 11976) [ 157.923402] binder: 6587:6590 transaction failed 29201/-28, size 201373836640256-162129586585337856 line 3137 [ 157.923418] binder: 6584:6588 transaction failed 29201/-14, size 0-8 line 3164 [ 157.930020] binder: 6584:6588 got transaction with invalid offsets ptr 06:14:26 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:14:26 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/41], 0x0, 0x0, 0x0}) 06:14:26 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') setns(r0, 0x0) 06:14:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc70") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x2) [ 157.930083] binder: 6584:6588 transaction failed 29201/-14, size 0-8 line 3164 [ 157.946125] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.946200] binder: undelivered TRANSACTION_ERROR: 29201 [ 157.946260] binder: release 6598:6600 transaction 381 out, still active [ 157.946263] binder: undelivered TRANSACTION_COMPLETE 06:14:26 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:14:26 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 158.012274] binder: release 6617:6621 transaction 383 out, still active [ 158.043148] binder: undelivered TRANSACTION_COMPLETE [ 158.063836] binder: 6625:6627 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.080596] binder: 6615:6626 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.084518] binder: release 6616:6630 transaction 387 out, still active [ 158.084522] binder: undelivered TRANSACTION_COMPLETE [ 158.084590] binder: release 6622:6623 transaction 384 out, still active [ 158.084593] binder: undelivered TRANSACTION_COMPLETE [ 158.133762] binder: 6615:6634 ioctl 40046205 2 returned -22 [ 158.136708] binder: 6625:6627 transaction failed 29201/-22, size 0-8 line 3199 [ 158.147829] binder: 6615:6626 transaction failed 29201/-22, size 0-8 line 3199 [ 158.149435] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.149504] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.166140] binder: 6625:6636 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.166216] binder: 6625:6636 transaction failed 29201/-22, size 0-8 line 3199 06:14:27 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000004"]], 0x0, 0x0, 0x0}) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 06:14:27 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x0, 0x0, 0x0}) 06:14:27 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:14:27 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x7b6, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x0) write(r0, &(0x7f0000000000)="b5a80e37550f0c764ef4c1872cc644f5d1f69d484b5dff681db2f556a2f5a3e5597250966d4e5f3dd3a26449a36c", 0x2e) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000100)={0x4, 0x98, 0xff, 0xf5f, 0x3, 0x22}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) ptrace$getregset(0x4204, r1, 0x4, &(0x7f00000000c0)={&(0x7f00000001c0)=""/197, 0xc5}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000080)={0x9}) 06:14:27 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000dfe2a026487e6a4300"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000080)=""/150, &(0x7f0000000140)=0x96) [ 158.166567] binder: undelivered TRANSACTION_ERROR: 29201 06:14:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x8002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) syz_open_pts(r0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000600)) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) syz_open_pts(r1, 0x0) pipe(&(0x7f0000000480)) eventfd(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 06:14:27 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/42], 0x0, 0x0, 0x0}) 06:14:27 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 158.219707] binder: 6638:6645 got transaction with invalid offset (288230376151711744, min 0 max 0) or object. [ 158.224845] binder: 6639:6644 got transaction with invalid offsets ptr [ 158.225913] binder: 6639:6644 transaction failed 29201/-14, size 0-8 line 3164 [ 158.226336] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.239653] binder: release 6640:6648 transaction 391 out, still active [ 158.239658] binder: undelivered TRANSACTION_COMPLETE 06:14:27 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 158.295527] binder: release 6646:6653 transaction 392 out, still active [ 158.303526] binder: undelivered TRANSACTION_COMPLETE [ 158.311598] binder: release 6655:6659 transaction 394 out, still active [ 158.321006] binder: 6615:6634 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.332741] binder: 6638:6645 transaction failed 29201/-22, size 0-8 line 3199 06:14:27 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f00000000c0)=""/152) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:27 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xffffffffffffff40, 0x0, 0x0}) 06:14:27 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/42], 0x0, 0x0, 0x0}) [ 158.343617] binder: undelivered TRANSACTION_COMPLETE [ 158.362735] binder: release 6646:6658 transaction 393 out, still active [ 158.368233] binder: 6615:6634 transaction failed 29201/-22, size 0-8 line 3199 [ 158.399770] binder: 6638:6649 got transaction with invalid offset (288230376151711744, min 0 max 0) or object. [ 158.403892] binder: undelivered TRANSACTION_COMPLETE [ 158.404071] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.404766] binder: release 6662:6663 transaction 397 out, still active [ 158.404770] binder: undelivered TRANSACTION_COMPLETE [ 158.404837] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.404894] binder: release 6651:6656 transaction 395 out, still active [ 158.404898] binder: undelivered TRANSACTION_COMPLETE [ 158.405083] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.413512] binder: 6664:6665 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.413576] binder: 6664:6665 transaction failed 29201/-22, size 0-8 line 3199 [ 158.413595] binder: 6664:6665 ioctl c0306201 20000440 returned -14 [ 158.413884] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.415864] binder: 6664:6667 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.415923] binder: 6664:6667 transaction failed 29201/-22, size 0-8 line 3199 [ 158.415938] binder: 6664:6667 ioctl c0306201 20000440 returned -14 [ 158.416263] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.450852] binder: 6669:6670 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.450917] binder: 6669:6670 transaction failed 29201/-22, size 0-8 line 3199 [ 158.451387] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.453179] binder: 6669:6671 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:27 executing program 3: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x1) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:27 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 06:14:27 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000000080)="23e24f78e9ee35d0948573bd48443b1af1c89b62cfd280c9b63df08ad71a6fa75f4a55856a1323abdc08744f20790b60019c75c524d86fb7e525f09ff2308ace3b521188d2e172f5d149c4632dc1875523e437f5b5a62b1d22429b2d00d4aea02f5ae975858fcc1a655b2b50cc446bf36a3151f3883a379d25aa755f3eff42b454b42e", 0x83, r1}, 0x68) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x5290, 0x8001, 0x6, 0x5, 0x401}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:27 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/42], 0x0, 0x0, 0x0}) 06:14:27 executing program 1: unshare(0x20040000) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 06:14:27 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) flistxattr(r0, &(0x7f0000000480)=""/68, 0x44) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000280)={0xffffffffffffffff, 0x7, 0x5, 0x7, 0x6}, 0x14) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") vmsplice(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)="c79746bb3976336171bb30fdde4453ebe71da5a89986a1990ff44f7235cfb02a8b630121a135ba25972c5b8c5e5add6a4eefcfccc342e8d70a11ff08a6fbafac3a797b9074e63872199aef1b8c62c42c5ada1eb2c906104f36984d161f5f4396e59a379d9045ee40ca567ac10fcc4153b747e230954ececcee16d268c3865e21bef8350670edd65a992ea348f924957c575233d3e954fd644b38dd34e2b73249eb8b9a0d17b91b49ceb293655772f17e6a819900f8523a2e67845c", 0xbb}, {&(0x7f0000000380)="4df431e907fdc878924a3afac411611d5447df49d7d79e662cf5461f5104b4fff9b503a001563dbb8df26f8b3667b5f133a9ec99759acbccb2692e34f9733f9714259678a7ece275573cd5befea47bb78b9b3a7835005d7b9b105f678e2ca021ce2e87ed0690a12b97767e71e308b7bc1b7d691605b4fce5e97bd81950c54494a63a", 0x82}], 0x2, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 158.453241] binder: 6669:6671 transaction failed 29201/-22, size 0-8 line 3199 [ 158.453737] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.489303] binder: release 6672:6673 transaction 403 out, still active [ 158.489309] binder: undelivered TRANSACTION_COMPLETE [ 158.574062] binder: 6638:6649 transaction failed 29201/-22, size 0-8 line 3199 [ 158.581755] binder: undelivered TRANSACTION_ERROR: 29201 06:14:27 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xa000, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x6, 0x9f, "31d62ee993ebc1d2941173baefd99eb16867c5d57bf23701fdc5cbb0b9242cad570fd6eff91882a5f16ec00d0818fd88c105ca88894fa2072f5f849a38b302159d7fe8c7e90dbd2c3f4add63b984746e1475ddcbdfc5a3426aa84fb0d50843f3d5ebff40a4567efa4283222a297d1dd42374e7bd816e19dcdc5f0d4f6eda17f440f4a0eb45c60e28bc55db70327a744aab1b1d2c6ce50a7a340005197d083e"}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000050c40f7650f8769787aed98ebdf42ee8778b357e2cd2159a5745dd2e69c58956818ce90df0fa1b5d3595"]], 0x0, 0x0, 0x0}) 06:14:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000080)=""/95, 0x5f) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) timerfd_gettime(r2, &(0x7f0000000040)) sendmsg$nl_xfrm(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000d40)=@updpolicy={0xfc, 0x19, 0x101, 0x0, 0x0, {{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x3}]}]}, 0xfc}}, 0x0) 06:14:27 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="c376d730a36e19a7f5c4d417402674a7ee1d9fe350082d8c86807e4f1d30d9d437d30bed9ff0cfe87943e1bbc72621e49ec4e4edcb4673a2e4125d47127a318fffff7bdeb4040000aea1102e3edcc2dfaedca17da27a7a7e287f38dace8210ddf3e223e3be7d4db1b76598bcf78f65dcbeb5e808c1f11de7943b89456c2f0c7b9c9ccd9c264b4bf700edd2577c0c762efef658213e91d7a81f4ec00022676179605b8007c1d91b35"]], 0x0, 0x0, 0x0}) 06:14:27 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xb, &(0x7f0000000080)="e411") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) fallocate(r0, 0x0, 0x8, 0xfff) [ 158.607029] binder: 6678:6681 transaction failed 29189/-22, size 576461027181330432-281474976710656 line 3014 [ 158.646312] binder: undelivered TRANSACTION_ERROR: 29189 06:14:27 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/44], 0x0, 0x0, 0x0}) [ 158.676788] binder: release 6677:6679 transaction 404 out, still active [ 158.691747] binder: 6693:6700 ioctl b 20000080 returned -22 [ 158.697756] binder: 6680:6692 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.716210] binder: 6697:6701 got transaction with invalid data ptr 06:14:27 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/44], 0x0, 0x0, 0x0}) [ 158.726580] binder: 6698:6702 got transaction with invalid offset (-6405967347779668285, min 0 max 0) or object. [ 158.738128] binder: undelivered TRANSACTION_COMPLETE [ 158.743526] binder: release 6685:6691 transaction 406 out, still active [ 158.743535] binder: 6693:6707 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.744480] binder: 6693:6707 transaction failed 29201/-22, size 0-8 line 3199 [ 158.767477] binder: 6697:6701 transaction failed 29201/-14, size 2304-0 line 3155 [ 158.776060] binder: 6680:6692 transaction failed 29201/-22, size 0-8 line 3199 [ 158.783777] binder: 6693:6707 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.783947] binder: 6693:6700 ioctl b 20000080 returned -22 [ 158.784074] binder: 6698:6702 transaction failed 29201/-22, size 0-8 line 3199 [ 158.784123] binder: undelivered TRANSACTION_COMPLETE [ 158.784257] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.784318] binder: release 6704:6706 transaction 411 out, still active 06:14:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000080)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:27 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070") setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080), 0x10) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000380)=[{&(0x7f0000000280)="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", 0xfa}], 0x1, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x3f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="006340400000000000000000000000fdff00000000e8ffffff000000000000000000000000000000000000000800000000000000000000516ab7cf3a3a21f4f4e0da1cd0e003e9583d03bbe469bfa94d1891f423f4b7d2c89734d326b0d36bacbd276a0eafd0f670472302270f1870734b61447aaa897e1072d9307dc5a5fddbe889b0b233e95723d4ddf7562e8a796182aca5f7bc1ced9b56f09bb0d510fbeb87bb3b3bba8ae63e30f1b4e81b6c8a50da29dadb0818d83af9251aa8886cbbdd2aadf39ad2193b5125b048a490b09fea079c13d6667323eb9f60", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0), 0x10) [ 158.784321] binder: undelivered TRANSACTION_COMPLETE [ 158.786182] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.786912] binder: 6698:6710 got transaction with invalid offset (-6405967347779668285, min 0 max 0) or object. [ 158.786972] binder: 6698:6710 transaction failed 29201/-22, size 0-8 line 3199 [ 158.787443] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.827129] binder: 6712:6713 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.827205] binder: 6712:6713 transaction failed 29201/-22, size 0-8 line 3199 [ 158.827617] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.880948] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.886774] binder: 6716:6717 got transaction with invalid offsets ptr [ 158.894698] binder: 6680:6718 got transaction with invalid offset (0, min 0 max 0) or object. [ 158.896868] binder: 6716:6717 transaction failed 29201/-14, size 0-8 line 3164 [ 158.897846] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.901111] binder: release 6709:6719 transaction 417 out, still active [ 158.901116] binder: undelivered TRANSACTION_COMPLETE 06:14:27 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'veth1\x00', 0x3}, 0x18) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:27 executing program 2: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00'/44], 0x0, 0x0, 0x0}) 06:14:27 executing program 3: syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0x0, 0x400002) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xfffffffffffffffc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)="67c6e28eb61c2041fdb72b8254ade43f3f6fe6cb1b735e601e6fb486401bc3aa7794b5fc7d16d9bbc70600551844ce191944cfa43bd8dbc02e1d6403dc18fc13290b1ab6fe8b7a9b20f76e8fd6779fc1e51c6cfa28e1c1ca2702d0e14db6f0be4cdbe491421683538c7aab724aaa067a10ca1da2b5f3f87038b6ef6dfe77dd936439166d41912d", 0x87, r0}, 0x68) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="effecbe5d6e402f7fc23cb0f7badf81ea2ab9f2af60473d2fffb827504b076ca868714f23ae6147083a532ee1d089ef7a33136d8f0d68208e5196b74355dab723fe71583b44cef199c42b6bd6822e51347e7db2947052c66a7f54494a01c68c0bf21296eecf9794e2faf3cc9d6f28426a9c8b9"]], 0x0, 0x0, 0x0}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000480)=""/221, &(0x7f0000000240)=0xdd) r2 = dup(0xffffffffffffff9c) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x80ff}) 06:14:27 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0xdf, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="0000000003000072f3e700"]], 0x0, 0x0, 0x0}) [ 158.906784] binder: 6693:6707 transaction failed 29201/-22, size 0-8 line 3199 [ 158.906890] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.935682] binder: 6716:6720 got transaction with invalid offsets ptr [ 158.935733] binder: 6716:6720 transaction failed 29201/-14, size 0-8 line 3164 [ 158.936244] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.962132] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.967003] binder: 6680:6718 transaction failed 29201/-22, size 0-8 line 3199 [ 158.993940] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.002961] binder: 6697:6723 got transaction with invalid data ptr [ 159.011357] binder: 6727:6731 got transaction with invalid offset (8214565733208686592, min 0 max 0) or object. [ 159.026837] binder: release 6724:6726 transaction 420 out, still active 06:14:28 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x200000000802) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="008000885b6e6ef14ac29a00e9006d7e"]], 0x0, 0x0, 0x0}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/keychord\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x6, 0x1, 0x7}}) [ 159.046158] binder: undelivered TRANSACTION_COMPLETE [ 159.048268] binder: 6697:6723 transaction failed 29201/-14, size 2304-0 line 3155 [ 159.063786] binder: 6727:6731 transaction failed 29201/-22, size 0-8 line 3199 [ 159.096219] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.103772] binder: 6727:6738 got transaction with invalid offset (8214565733208686592, min 0 max 0) or object. [ 159.118836] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.122390] binder: 6741:6742 got transaction with invalid offset (-1049780323727933440, min 0 max 0) or object. [ 159.122455] binder: 6741:6742 transaction failed 29201/-22, size 0-8 line 3199 [ 159.131950] binder: 6741:6742 got transaction with invalid offset (-1049780323727933440, min 0 max 0) or object. [ 159.132022] binder: 6741:6742 transaction failed 29201/-22, size 0-8 line 3199 [ 159.167520] binder: 6727:6738 transaction failed 29201/-22, size 0-8 line 3199 [ 159.178926] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.184612] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.191640] binder: undelivered TRANSACTION_ERROR: 29201 06:14:28 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) 06:14:28 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x420200, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e21, 0x3, @rand_addr="7f3162f7e0ffb3545a5ad69696f8bec0", 0x800}, 0x1c) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000380)={'broute\x00', 0x0, 0x4, 0x6d, [], 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000280)=""/109}, &(0x7f0000000200)=0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'bcsh0\x00', 0x4100}) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:28 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001700ad4d18d2e3c9f63e330101000000000020000004000000"], 0x1}}, 0x0) 06:14:28 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:28 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xfd, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000010b4703dc0fe9de591168d32779a5968b79e1580407ca9c789dca8a0e136afad8d0d345bbdb2405a986b7783b3e0e375ab8df0901b6336c0025d61dfe6bdcb7db5effe87cc24fdb0082f7faa4193957fa1daed668439461c2ce7333cc9ecae8ed51efa45d7d0267379a9583eabf7719ea80f2975804823a2cbbab75fd639c7953e182262b84755d2845c46b6583d2833480b6f92a850953b0425a3c65390dc50684310ad018545c335cea5f106149504eb341bca13b8b0a33", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 06:14:28 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x80000000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:28 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x2000, 0x0) [ 159.518193] binder: 6754:6756 got transaction with invalid offset (0, min 0 max 0) or object. [ 159.521888] binder: 6751:6753 got transaction with invalid offset (0, min 0 max 0) or object. [ 159.521952] binder: 6751:6753 transaction failed 29201/-22, size 0-8 line 3199 [ 159.523977] binder: 6755:6759 got transaction with invalid offsets ptr [ 159.524123] binder: 6755:6759 transaction failed 29201/-14, size 0-8 line 3164 [ 159.524239] binder: 6755:6759 ioctl 6611 0 returned -22 06:14:28 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 159.525848] binder: 6751:6760 got transaction with invalid offset (0, min 0 max 0) or object. [ 159.525907] binder: 6751:6760 transaction failed 29201/-22, size 0-8 line 3199 [ 159.564007] binder: 6755:6759 got transaction with invalid offsets ptr [ 159.564100] binder: 6755:6759 transaction failed 29201/-14, size 0-8 line 3164 [ 159.564212] binder: 6755:6762 ioctl 6611 0 returned -22 [ 159.598318] binder: 6766:6767 got transaction with invalid offset (0, min 0 max 0) or object. [ 159.598383] binder: 6766:6767 transaction failed 29201/-22, size 0-8 line 3199 06:14:28 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) recvfrom$packet(r1, &(0x7f0000000140)=""/37, 0x25, 0x40000021, &(0x7f00000003c0)={0x11, 0x1f, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00539f4f22ae26ae"]], 0x1eec8739fd75c87f, 0x0, 0x0}) 06:14:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") clone(0x800000409ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000000)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="79e43f605c5bf72600b0f988649e6990983e15802821163e8afd2cc00cef90e51bb7401835611f06b2352c37b32d323eeb9ff5789f0383b771"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) [ 159.611869] binder: 6766:6769 got transaction with invalid offset (0, min 0 max 0) or object. [ 159.611935] binder: 6766:6769 transaction failed 29201/-22, size 0-8 line 3199 [ 159.633142] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.638669] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.652080] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.657635] binder: undelivered TRANSACTION_ERROR: 29201 06:14:28 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x81, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x4e23, @loopback}}}, 0x88) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x40000000002) fcntl$dupfd(r0, 0x0, r1) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x7417}) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) [ 159.664427] binder: 6770:6771 got transaction with invalid offset (0, min 0 max 0) or object. [ 159.670351] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.670422] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.670567] binder: 6754:6756 transaction failed 29201/-22, size 0-8 line 3199 [ 159.705089] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.712769] binder: 6754:6756 got transaction with invalid offset (0, min 0 max 0) or object. [ 159.728668] binder: 6754:6756 transaction failed 29201/-22, size 0-8 line 3199 [ 159.751330] binder: 6780:6787 got transaction with invalid offset (0, min 0 max 0) or object. 06:14:28 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="568793fc57e65858"]], 0x0, 0x0, 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x10507e) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xfffffffffffffffe) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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") r3 = ioctl$TIOCGPTPEER(0xffffffffffffff9c, 0x5441, 0x9) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000180)=""/101) 06:14:28 executing program 1: r0 = gettid() getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ff9000/0x2000)=nil) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) rt_tgsigqueueinfo(r0, r0, 0x41, &(0x7f00000000c0)={0x36}) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/92) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) tkill(r0, 0x1000000000016) 06:14:28 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x26e890b7e2d2c9ed, 0x0) clone(0x800, &(0x7f0000000100)="afc4488f5981f2530c7b5ac2490178b195172ffc704a454ce9ad07871aadbd1b38359ae5e10c09400632b17b089a1d183850090b96bd8b873d57b730c5bb4003735cf0f46bb24f4dd8b3fb0404b1276d6afd33468f1c38aafa777051bf947151ae394752da9f7a81d9012cf287b94042cbada653c1aa0a6924ebb2d7c0689d850690d085ac114781dd471c0bd0d7857d4b7b3b00731fa5421187a8aac7b8d93b3f18213a3de7a323486a9acd673f4748809e656c16b8a9edf86bb0e567a290d3ac3deacaade8b75022d2f69dd55fa70d0cd4", &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000480)="bb74b1ab39864ee4c8992612d8882ff24972cf6c4deb815d20ee288767c37ebf2c9d1dfec19ee3986c3be13b6cb1daec8e260e59e01bc78aac9ec3b859b91d28e0743b09d02a672a42082cca8d871af00c5f2440fdcf10b7118d5a679d9cb4d74ab61bb7b188c56d419c5c32598480abc158d1dd2aee0eff7c1e65248c573b85d0168ff0eb8edbcc9615ca4889ccfa305c55d680e5a1e00e7cb1afd6bd18ff77ea38be271c917aeaca110700b8db948c7c5ef534773bee2924db2a74087a61b8729f008ab838d0ab331d7bd62476f9af715d76e2d4fa94fc442faa4a732ec622dac06d140f2ca53e8afcd552939b0b17887ad2906438beaaf9a8d9923304c6bf2634190c381fb78cfc959ae5c2c01424921c1a2152bcc1eebd64c2258c936e67b182a3405b25edba2d575d8995155892e7768053e5a75cfa40278c3c4c2451651645c59a508069471010d68983c8d556b7975e15769fb5a1afacdb18aa1f1ef452a41f2f4ad2b5a5927c2d08fe12c86c7c5ede79d7978692988311955acf77d1140fefb90d70cee0ae4066f47e0d498f924b71523aed078d61ae44c7b8d3114719095d5e9a935ffb46b14b95b8c9223f7e1cea392fb7af93231b1a129675671bcad41525fa327cf29c80cb1fdfbacaae90269a048f6a5f3e163151c16541afa3a9e9cec8a1686be6ab7d76fc2412a947fbdcec609cc96de70a37a229143ea5753b742daa51ccd544b189795f3e454b479d6e5124dc10a534d878d09a58e26556361ac5c5e90a96fc2dd686fd62743692af1b1c70a89b6c353bccbcc99f4dbf468b522665ba88382fa67d1257ea35dca187e83c626fb0287753e44a1a9be82b91ca6843979cc4847d3ad5beb3a1d912686622106c1acc30d693ba0395cb7cd2f409995d9f18bb2ff2cd7abf7e4634bb06f72269cfd4d5fa7b7f72f9c0ae9b362903cd55417ca1184a968e79d24fd3c41da63e495a2eab4b7089a119e9316ca16cf699d49cc2f524f1307f4d7396172128749bb140140831f81002a557761a409ac5201686926a36f653e079da8d60710bf8806ab36a8176e8975a543415238a9380ba0409f117b338f811375a04a8cb22d431a9a4e540f5f91fdbfd81daa0fdbee69df9095cadbcd851544ef5115191d7b4adfc99c07e07da2bd721f92c289611531d302c9d4ed9f732101f5065ab6548c15de38a9e793331d88010455bb0f403d5a1f57482263d240cedc90cdaaf0dbdaee58a96545db341e2fdfa4b470f41c4ea0a636c9208865e2ef04498ab230fb96a89ec434774b56f1a5ab70ba29899d24bbcbcba503e1c0a8b55fb7c8983f1edc161e3cbe03242c7f671a723f16dc716c2c66d942de450ddecb7a917fbfad91ecbd413ab344887bd754214a8430ee835386354bfb0e3e8e03977f62365bfa9d2e63672517399f798a498a832ae9ea78a1556de0447c97dbd9ae3ef0cfe376308b06af334c0a1abd6531324ced06cc395f6ea56a3d76232927aebfadd3ca44e8ee481a18874bcebd20aa315b436c0f43ac182759e022c64b258a2d4450cd56f91ee407dcdf50a36e42fd53a338f0a20a1bcef08355773bee4ba52df4e8aa6f8927127c5d184275a169ddd8822ef400643d874ab73a0ea5ae11868fa5dbf7ea2f1df077a0b07ff3ec12aeabae3e66b6a9a0c91efa7cb7fa45bed2cb1a1417f3921bb871f2b6b78b570efd56f9765b415bc5605f87f9064b07c9cb52548fd04d52e39d33388615ebbe498f04d7494cdeee2b829742c67633b553834c05bdcff14e057a2332994ab5e68523237a4bf9be9ada03b78eff38ce48d261d6af70572bc4ec85fb10db09239065eb3cc2179a0a45aa28407b629e592db55a187bbe6f1953831a72a6bab095a42941f4370f77d3f14aefb0734f3aab23fb3847da214a8cbedbb2b36df207914fb0dacd6ea699669ef4cf2496fe5a9422ff567303fdb5a2df4d26694ee754c6dddbfb8d4b9ee8865df2f6a31227e4000ac6aebd399748018bbf0d50e6bf1a8c485b939622786558ff50e1033185ae1f670d2493b1f8f4cb32cf8f01c8d21feb07ddcfd720c5236820fc3b0fba151a89dc25db9e24a477272c4a2e09b4cdc44a6927a97016c583ec8c0389c3fc590e7bde9d5dc89f898a487596ca56cbba11cd355afef4063f376d15f9c145c8367b0b6e9bd4eafc128b189ab0e830758223553daffcd405c64cd897e1436f3dff1007026be07cbc71b52be702fb5303bfeb1a3071e6a49cac9ce26cd9b8667db4e94e994ba8b43a830a14f254b214c7bceea4257d75bb62c40bb32e1449a307da99d36aedffdb8d521cd9f195a3f260a10907f95421a3600ab9fef23df29096b50a7dfe7c8ba95105e3d164960d1f3a5df6a130a4f7f9f095a69bbd93d66731097565a1c278d7f6efcf6e77d358bde282290c526450c7dca2aafed701b00267300dfe36bcfbc4cfdb34ac8f436898280c8acbf3aa0e6dbd28a4eb54a384d533c363625bffa74f5c0eafa2fa8c7b3a846c4cea9e8d490c07063023f94ea5b4c383b4578c182609082e22d988ce6bc40c8fb1d20a5bf2de614753e6edfb0070298bdd2b2f08f24153d613afbc25147be553dace508170b7c60950a347699a3e1979f3a06db3cdec525c9ddae7e70ceaffb86acfc3bc7f23002441a4ef060c3113f07b27868754252bc9efd09fb40f5a7e010e3a49562ab1e3175c628419d61f550efa36cd536c9d51cf140d720cb0994b474aaea73070b2b8d8d9d51c4446705e64f92a9c68fcc22b3b2255677057346938aac5268c9fe77e90465e633707efbc3d265bfbb8d754b582557a4c0d6afee9cbf6ebda223a3763b85182af75e67ab01c0c858292573805053a209a61f46b945e4fbbcdef85c9b7b167aef3db9fbcb0228bb3f7b320faf4fbc172f378506e96e37ebc354bff46de3b8643c5b3de25d927099e07e5ea2782d87e70210bf4b54dfdc64642c8890916d7c2afa335f900d4f3cfb96bae5a00414041d63a01b055f83b3738fb6cb7d41b99b9a3c4b93cd5217ab3c96ba8a76b358b4cdc55d73681c33755a8c7836b69fb789277b1e3234d499e1800a629d2d733a83333657f7cd9cf40293ab8a407f949eea180e72a632e5e3495d3fa5ff4bb45b2fddc29de691e2d3d192ea812245f8636fe4069b1135f0ef31c15b316581d399b6a47e407397890c5351fb02d6c375f7f7147b83e9df1a3f439e55855db8b4d4789b628ac9520c8b6bd3d2a8a9c57ddab90e7c470c9257519b3f18e46c78cb9871fef725c99723ee93eee18488afdadaffa9884a38ab79ea4d1a5792110cf1212d805873e4bf62253e30d380643a74027c3c313a5e13888b1501235fa17d517b68abd3c2e707d7d21ee5e36a4ba510681743b14dfc683e9ac82b3411175bff24e634272307d3954e34cce256e8708b289722ac76657500da05284b1c9d4bf400f184eacd65f0891246c689216e198d0844b8aad0fbd9643c2e096fe86805a55d7c99977e41562d6c90459906972f4df8767dcd2360f7d1ea864afb5fc37401976078e04790b81601d3d656bddc84b34860dfe51ca269e879afc02731ccabe06737cf35468d7e948eea2e125d9188464272ca60a7f2ce385c1d149a6174cc792f00108581ba5226e1fdeea7e1e2e461d0fe573268a4c55af55352a96efad308ff31a36a5ef9274739580bbd7a368747763a5778b7da90c022ed975af9f4e48ac7a586e2508117586c86d1e01bbc3df868f558e98cbdb20a008d5d611679faf4cc80467b3754e5d775868c80f406843fb788228f6405646506e7154a41f9609e120f99336bc2b954dc3e6955d3ad2eb9702becb8495e7340c50edc816fc1722e9226a859c6d55b5c18afbebf3a65aabe41f8b9e42a4c946dd9a827ff237d4a8802c53cdb418b7d2a464413c23116632c8bbfdc96137b6552f782dd39f3eb50bf377c9736dde93e5eea0c5b4a67b1604aca804642dc797361ddec29d311a845e3751f35674638d5a20aee0795bca76d2fe81407ab97b7ab4258a2591f0d63b67e18747d98a5ff2dd1ae474e54803270ca0014ad27533e13668bd8ae901a33eb5cbf129ce2410ae71b2cf6c03f03be72be44d621cdefe3d868f4ac9fb64c9387d66a66ed7db323e1a09dee6ee2e9c554d5f3760890b4e2cdcf258fde1e9200f8a66c38e1957323678aa436ba95af7c6e621a4f41d3917e4a446ade61c9f651feaa211cfeaf9f5135455eabf246cc14d2db45d5d7f5552f13f62544e3d0d69665cea4751fdcecfee1e2a2a68b7de79309731f2472b240b78c57306e902f607d0a631e10a9a9fc03047898be0bfea70c795903ef276732b64e7b8cf37b43b36d57bdc66418c58432a7dff12385306b41f63e5af3ed58c83e0abf2854ea675931a9058f61f54e3b4fcdac152ef817fb9116ffdff75a993a0fe7a6806e6f80202b12d802cf4af4b5d1d3a250baeb0b22a27a2dce8a7344d410424439419122b4cf38a1bf545ca387410ab966e253809830f558d4c1995622787ed7f4ef98dddcbccd540797e0668adc2a0727304d585519476fe0c4b1997003e48a783b90b48a94073608a0329155a8d7b7ca3cbe7d85344a67a07a068b6c525b36d2bb0c08c0c7099e5b8c510f4a3a06897cb1c5d7d65bd51d57c70483e25163e7c9b7f1cc7748321c82b857de75f90c68959ac364dc8e377b8f0bc8f3076f44c98674407abf1a3b0b7fac48ed3d8e13672a4bb3b6a95e2c99b57f48421118a080881823a9adb6c9f80496ce2ee4456850043b171b7dbc5e35c46bf708c9a1a1c52ef267ec024c504e7c762e3783796dd2b3dcb9d7328075dd584811266d2833b08f7a8efdb46886ef4d03f2b97da9b24c3341d74eca22ff20b6c6fff35a3284625bbf0160e34faf0dcc51593f554f492c1f4344180f4c87cd69b4bf34a59e42b6dfd6c1688c407607817ca7f3a3581f1181397b9473fc534b0d296d22752d11cc636af20b110c0ab4ce8ef7b9ae4ef3f924419ef6cd159cfd15631d05f2170a2c195ad057d8ce024256395d78a74adb071e844da048e5aa4c6cc48ce95dbf3e7647f663bab5db3959988eba68453db5a27578bb0d8f92f680e157a19e1d518438ab0d1b8a4c0e2cd10ed45c3440f2fa422613960b3db729e81d76490fe5709c99bf946b779988207c456e14f40ccd193a843af00ff97ca5543da3de61eed2f4fac52f1f6c458a3e3c41700d9559140824d414aaf93eaba6e1e23a5cbaf78768dba11da8307f74278e81ac143b4328df999154d6fdf2fa4e8e0427eb934e3df6ca9b8ec465432224899db3a8750678419371cbe1e30a066e4591f4c17b03e69d5952135c2f64ab9e129f69cdf5637fe677aeb6ea8b3c0665df7667e419312d25e7e9bc1e7ab39b69a395f6caa7e11c1f325c66b325711f3ee20707d2ce7c8bd45443af38d7354f1cb3ed9e55e191347609b30673e8efff43d9d39e1926baa073875e82807cd49830510d3266ebd923da01e970e5f2e6222b849813583f85a4dac3fa17df0d536fd3aca17555be09f1d9313383f84805d004af870d611c645097a0afc4b4b02a3488240086901bef01391e4578e5c8cb7123f4bc8ab31eadfa95903cf7bd58b007a3aa77b16940ff60d76c17b83926eddea9ecfa79b4dddce5ee0e8cf941d94a4348ca04335e6f0dbc0fa9a65466f6e6b9007dd2aeda159e3928d00effc8964b91f6bb4984ae3e25b633d09a2a61265163cc55d89e5d2828e8e24236b017cedbeb133131cfa639697b59442b2dd42ec63a69d357542a6f46") ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000000c0)={0x9, 0x3}) timer_create(0x2, &(0x7f00000003c0)={0x0, 0xf, 0x4, @thr={&(0x7f00000002c0)="da", &(0x7f0000000380)="85f5f9b31167ca57c875ad9a97c9fc784e"}}, &(0x7f0000000400)=0x0) timer_delete(r3) [ 159.772343] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.794986] binder: 6780:6787 transaction failed 29201/-22, size 0-8 line 3199 [ 159.825523] binder: 6770:6771 transaction failed 29201/-22, size 0-8 line 3199 [ 159.844423] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.852315] binder: 6793:6795 got transaction with invalid offset (6366091338862266198, min 0 max 0) or object. [ 159.864567] binder: undelivered TRANSACTION_ERROR: 29201 06:14:28 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) munlockall() r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:28 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x6, 0x11, "a66a0437d38bd6b8b6a13b1af436eb44ca06c1781fec913f37779c65e98f9b78d48cc27ea9c989ebbd9af0a651ef11954cf7c21da465db624a2afae012a358f7", "49ae6015debd226d6989ff9cffa3e89d68c40fe5b7539684c29208232625aad4e41b76aa940e95f4f90493948954f2aaf1ccfce4c8669f3a1054b9d92c884dba", "69bcc081e156b9509d3d8b3ecca7892ed482edc3ef8beeeb5c69c1d69804d40b", [0x100000001, 0x3]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") exit(0xffffffffffffffc1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="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"]], 0x0, 0x0, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80000, 0x0) write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x0, 0x3, 0x5}}, 0x14) [ 159.872841] binder: 6796:6797 got transaction with invalid offset (0, min 0 max 0) or object. [ 159.876464] binder: 6793:6795 transaction failed 29201/-22, size 0-8 line 3199 [ 159.877313] binder: 6793:6795 ioctl 41009432 20000080 returned -22 [ 159.888859] binder: 6793:6803 got transaction with invalid offset (6366091338862266198, min 0 max 0) or object. [ 159.888907] binder: 6793:6803 transaction failed 29201/-22, size 0-8 line 3199 [ 159.889512] binder: 6793:6795 ioctl 41009432 20000080 returned -22 06:14:28 executing program 0: openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x540, 0x0) syz_open_dev$sndtimer(0x0, 0x0, 0x0) unshare(0x40400) pselect6(0x40, &(0x7f00000000c0)={0x7b}, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x7ff, @loopback, 0x1}, {0xa, 0x4e24, 0x80000001, @empty, 0x1}, 0x101, [0x6c, 0x9, 0x100000001, 0x9, 0x9, 0x9, 0x2, 0x9]}, 0x5c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:28 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) ptrace$setregs(0xf, 0x0, 0xb0a, &(0x7f0000000380)) openat$cgroup_ro(r0, &(0x7f00000000c0)='memory\x89\xc8\x15;.sw\xed\xd39\xdcurrZnt\x00', 0x0, 0x0) [ 159.949614] binder: undelivered TRANSACTION_ERROR: 29201 [ 159.970084] binder_alloc: 3360: binder_alloc_buf size 633318697598984 failed, no address space 06:14:28 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) timerfd_gettime(r1, &(0x7f00000000c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:28 executing program 1: r0 = creat(&(0x7f0000000e40)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x84003ff) [ 160.004110] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.004454] binder_alloc: allocated: 440 (num: 49 largest: 32), free: 11848 (num: 3 largest: 9552) [ 160.004514] binder: 6807:6810 transaction failed 29201/-28, size 0-633318697598984 line 3137 [ 160.005967] binder: 6815:6817 got transaction with invalid offset (0, min 0 max 0) or object. [ 160.006011] binder: 6815:6817 transaction failed 29201/-22, size 0-8 line 3199 06:14:29 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") rt_sigsuspend(&(0x7f0000000080)={0x2}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040c35a4bbc06b9475d2b6430000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/71, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000028000"]], 0x0, 0x0, 0x0}) [ 160.065143] binder: 6808:6821 got transaction with invalid offset (-1913279116512066304, min 0 max 0) or object. 06:14:29 executing program 2: 06:14:29 executing program 2: [ 160.114621] binder: 6825:6827 got transaction with invalid offset (0, min 0 max 0) or object. [ 160.137362] binder: 6808:6821 transaction failed 29201/-22, size 0-8 line 3199 [ 160.146303] binder: 6796:6797 transaction failed 29201/-22, size 0-8 line 3199 06:14:29 executing program 2: [ 160.161309] binder: 6825:6827 transaction failed 29201/-22, size 0-8 line 3199 06:14:29 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) 06:14:29 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) splice(r0, &(0x7f0000000000)=0x2c, r0, &(0x7f0000000080), 0x3, 0xa) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) fcntl$notify(r2, 0x402, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 06:14:29 executing program 2: [ 160.189252] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.191131] binder: 6825:6838 got transaction with invalid offset (0, min 0 max 0) or object. [ 160.191207] binder: 6825:6838 transaction failed 29201/-22, size 0-8 line 3199 [ 160.237811] binder: 6831:6842 got transaction to invalid handle [ 160.255543] binder: 6840:6843 got transaction with invalid offset (0, min 0 max 0) or object. [ 160.268222] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.272595] binder: 6831:6842 transaction failed 29201/-22, size 0-0 line 3014 [ 160.278517] binder: 6840:6843 transaction failed 29201/-22, size 0-8 line 3199 [ 160.281278] binder: 6840:6848 got transaction with invalid offset (0, min 0 max 0) or object. [ 160.281338] binder: 6840:6848 transaction failed 29201/-22, size 0-8 line 3199 [ 160.359832] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.365453] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.379371] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.385265] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.469198] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.753127] binder: undelivered TRANSACTION_ERROR: 29201 06:14:29 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:29 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setlease(r1, 0x400, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setlease(r2, 0x400, 0x0) write(r1, &(0x7f00000001c0)="68d1", 0x2) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f00000000c0)={0x6, 0x4, 0x9, 0x9, 0x3ff, 0x8, 0xb4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000bc5bf1"]], 0x0, 0x0, 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @local, @multicast1}, &(0x7f0000000140)=0xc) 06:14:29 executing program 2: 06:14:29 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r2, 0x8, 0x7}, &(0x7f00000001c0)=ANY=[@ANYBLOB="656e633d3235362d61726d17342d6e656f6e00"/78], &(0x7f0000000480)="ea01d947d42cb9b4202afe5cc3f4f069eaeda857739b3992aa51244af51aaf915e324d8b5ad92a784b6cd8e6f84c12f4e489f59a958354e7772beafb152b3c7fd21a752315ac5a0fdf38ddffca6c8990c4088b5db6efa7811eee770fb1a9dec60ff0e7f4501c269c7f2cad6718fd3a57682f47cda1528e99e7a7dd7371c29ce18efdd1477423551154e955037cdc4521584599ec6c36d383e0566ae3869237767fc94089cd2d19f9cb35a4b3bde2fbbc2bd2114296cf37fd2d326edd13980dffff834e7b1ffc4ebf8f8c", &(0x7f0000000240)=""/191) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") keyctl$invalidate(0x15, r2) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) keyctl$invalidate(0x15, r2) keyctl$get_security(0x11, r2, &(0x7f0000000800)=""/176, 0xb0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000180)={0x15, 0x67, &(0x7f0000000380)="ee193e48221dca2950462004bf291b8406eaa428b444adeb2df37612388e049f911e93e8cfc3c238217426617880c8911fdddde2646a4e07e7781873ba26edd43a92e1213bd0dd1dcf15d1ba853ad2d120e1a645e5b47e8cabd3542622f6c09528fd10a9aaf5c3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="3ca70000000000000000c04eb09cf99601822fd3af0d5aee5a0f6ec1aaf61f72487c083a55ef97866ee3944d4101b6d5d9c6c1ab8124f541eee044332aa65dfde4b8f90641f272d8f5a53ea6c58e91d4ee435be19a79"]], 0x0, 0x0, 0x0}) 06:14:29 executing program 1: [ 160.801306] binder: 6808:6821 got transaction with invalid offset (-1913279116512066304, min 0 max 0) or object. [ 160.811823] binder: 6808:6821 transaction failed 29201/-22, size 0-8 line 3199 [ 160.819704] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.844593] binder: 6856:6859 got transaction with invalid offset (0, min 0 max 0) or object. [ 160.857489] binder: 6860:6862 got transaction to invalid handle [ 160.863976] binder: 6856:6859 transaction failed 29201/-22, size 0-8 line 3199 [ 160.873616] binder: 6860:6862 transaction failed 29201/-22, size 0-1032 line 3014 [ 160.882759] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.891831] binder: undelivered TRANSACTION_ERROR: 29201 [ 160.937738] binder: undelivered TRANSACTION_ERROR: 29201 06:14:29 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000108912, &(0x7f0000000080)='\np') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00f3000000000000"]], 0x0, 0x0, 0x0}) 06:14:29 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000400000000000000000000000000000000000000000800"/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:29 executing program 2: 06:14:29 executing program 1: 06:14:29 executing program 4: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x7, &(0x7f0000000040)="0adc1f85b4a0c9cbde23be") ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'veth0_to_bond\x00', 0x2000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:29 executing program 5: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:29 executing program 2: [ 160.989344] binder: 6831:6842 got transaction to invalid handle [ 160.995457] binder: 6831:6842 transaction failed 29201/-22, size 0-0 line 3014 [ 161.003307] binder: undelivered TRANSACTION_ERROR: 29201 06:14:29 executing program 1: 06:14:30 executing program 2: [ 161.041819] binder: 6877:6880 ioctl 108912 20000080 returned -22 [ 161.051124] binder: 6871:6876 got transaction with invalid offset (0, min 0 max 0) or object. [ 161.066177] binder: 6874:6879 transaction failed 29189/-22, size 0-8 line 3014 [ 161.077825] binder: 6877:6880 got transaction with invalid offset (62208, min 0 max 0) or object. 06:14:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000400)) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000280)={@loopback, @multicast2}, &(0x7f00000002c0)=0xc) r2 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000380)={{0x2, 0x4e24, @remote}, {0x306, @dev={[], 0x25}}, 0x20, {0x2, 0x4e20, @empty}, 'ip6gre0\x00'}) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x202000) sendto$inet(r4, &(0x7f00000000c0)="cb3450363a973115f26c410746d0775fc81df213d7d6474833a172ffb2227ee3d9ae5064954c74d1e2157521963c1dde6e77a2446515eae595be3dc9a7a6e202136c4127b4ff16311bbb710b63af5fa86d4d8cdabacee1e67268ae2881f104249720ed5c4b48d1efb920d25409aac6a3fcd7a4cbf05b55529f2afa644d4a4feeb3ffdc1ad18453bc0a096cf530ad78d8b6fc7dcacf8a9b749b2b4b9e2f345abe4c9c72896ff2383e3bb87e52aaa240352d98acef4e23b81143b838e4658dd43c56b5bef708c760b014e07a93ea5bfc395c26ffd0705193ebeba84c795520c85b5278ed", 0xe3, 0x4000, &(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000480)) socket$packet(0x11, 0x2, 0x300) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0000000004000000"]], 0x0, 0x0, 0x0}) ioctl$int_out(r2, 0x2, &(0x7f0000000080)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) 06:14:30 executing program 3: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = dup(r0) write$FUSE_NOTIFY_POLL(r2, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x3}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:30 executing program 1: [ 161.089983] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.091461] binder: 6871:6876 transaction failed 29201/-22, size 0-8 line 3199 [ 161.096880] binder: 6877:6880 transaction failed 29201/-22, size 0-8 line 3199 [ 161.100345] binder: 6877:6880 ioctl 108912 20000080 returned -22 [ 161.100629] binder: 6877:6888 got transaction with invalid offset (62208, min 0 max 0) or object. [ 161.100690] binder: 6877:6888 transaction failed 29201/-22, size 0-8 line 3199 [ 161.138127] binder: 6874:6890 transaction failed 29189/-22, size 0-8 line 3014 06:14:30 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001700ad4d18d2e3c9f63e330101000000000020000004000000"], 0x1}}, 0x0) 06:14:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) 06:14:30 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x800, &(0x7f00000009c0)="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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:30 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00634040000000000000000000000000ba443872034130e2244ea869a808e20000000100000000000000000000000000000000000000000000000008000000000000000800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000140)={0xc0fd, 0x2}) [ 161.165890] binder: 6872:6891 got transaction with invalid offset (0, min 0 max 0) or object. [ 161.189471] binder: 6894:6897 got transaction with invalid offset (0, min 0 max 0) or object. [ 161.200815] binder: 6872:6891 transaction failed 29201/-22, size 0-8 line 3199 06:14:30 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000000c0)={0x2, 0x9, &(0x7f0000000080)="d37cad73d65ab580e3"}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) 06:14:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) shutdown(0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 06:14:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x2102001bfc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000600), 0x10000035a) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f00000005c0)) 06:14:30 executing program 3: syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @empty}, {0x2, 0x4e24, @multicast1}, 0x200, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='veth1_to_bridge\x00', 0x418, 0x6beda327, 0xa6}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) [ 161.250714] binder: 6894:6897 transaction failed 29201/-22, size 0-8 line 3199 [ 161.333032] binder: 6904:6914 got transaction with invalid offset (0, min 0 max 0) or object. [ 161.344456] binder: 6918:6923 got transaction with invalid offset (0, min 0 max 0) or object. [ 161.351224] binder: release 6910:6917 transaction 457 out, still active [ 161.351228] binder: undelivered TRANSACTION_COMPLETE [ 161.351353] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.351556] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.351712] binder: undelivered TRANSACTION_ERROR: 29189 06:14:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x100010, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000d0376c1cdf3d1300000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) 06:14:30 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r1, 0x897f, &(0x7f0000000140)={'syzkaller1\x00', @ifru_hwaddr=@broadcast}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0063404000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000007d8e5f86aa41bfda3f3688e2f1f2714a6c17020ef731949095a75a12076f841e4628d9dda7deb307a5c6cf43d4aa6ff1bd572d03a8fe28be21fb6d1c865d9a303429f33cf538a563ac41", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB]], 0x0, 0x0, 0x0}) 06:14:30 executing program 1: clone(0x100000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) r1 = memfd_create(&(0x7f0000000100)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) ptrace$poke(0x4, r0, &(0x7f0000000000), 0x0) [ 161.351879] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.351971] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.353784] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.370838] binder: 6904:6914 transaction failed 29201/-22, size 0-8 line 3199 [ 161.371345] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.414220] binder: 6919:6925 transaction failed 29189/-22, size 0-8 line 3014 06:14:30 executing program 0: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000240)='/dev/keychord\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RLOCK(r0, &(0x7f0000000200)={0x8, 0x35, 0x2, 0x3}, 0x8) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000340)=""/169) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'TPROXY\x00'}, &(0x7f00000002c0)=0x1e) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0xffffffffffffffbc, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0063404000373c6c6200000000000000000000000000000000000000000000000000000000002280000000000000b04a0000009e7e833d5f581a076d30a3c1cac3541cd67dd8d1b76c46fe12a495ffeb3bdd3a4f75fb315dacc724263c86dc5fa15b8bcac4a0a50cc39bac2067fd0100000000000000a7dd2006c6f473298c8e1e378f86ff0372e42b9534497fa81c736aabdc9b6ccdca3e327f3647fb1938c4221e80bd49bca28c72189e0e66b80042a8d70de26d0c790954a6ab97fc8f277b6e20079cb2fa4390c6ac2be00f26eb1a15ca25c2ee3a19f08e66218a38940214742faf02dc4a7f14ed381c59c24ca1e314c8bceaa27f3b492ca78c586dce4c79e140fc9449decb1ff045ee203d9b1d9e48d2c9878889ca27ebffd664e5b2534b87b98c03aa50019680467299ed54c78b8fe849784a", @ANYRES64=r1], 0x0, 0x0, 0x0}) [ 161.457221] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.465836] binder: 6929:6932 got transaction with invalid offsets ptr [ 161.473839] binder: 6934:6935 got transaction with invalid offsets ptr [ 161.475628] binder: 6919:6938 transaction failed 29189/-22, size 0-8 line 3014 [ 161.483913] binder: 6929:6932 transaction failed 29201/-14, size 0-8 line 3164 [ 161.490578] binder: 6918:6923 transaction failed 29201/-22, size 0-8 line 3199 06:14:30 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x68c3, 0x0, &(0x7f0000000100)=[@reply={0x40406301, {0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[0x28, 0x38, 0x70, 0x0, 0x0, 0x38, 0x0]}}], 0x3ca, 0x0, 0x0}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) 06:14:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x100000890f, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 161.504598] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.522362] binder: undelivered TRANSACTION_ERROR: 29201 06:14:30 executing program 0: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) getgroups(0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0x0]) r5 = getuid() write$P9_RSTATu(r2, &(0x7f0000000480)={0x89, 0x7d, 0x1, {{0x0, 0x67, 0x8, 0x7, {0x29, 0x0, 0x2}, 0x0, 0x4, 0x2, 0x101, 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00'}, 0xd, '/dev/binder#\x00', r3, r4, r5}}, 0x89) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00634040000000608610e3ba611e5a141aa4000000000000000000000000000000000000000000000000000000000000000000000000000800"/71, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x8, 0x40, 0xa, 0x0, 0x8, 0x1, 0x5c0}, 0x1c) [ 161.555254] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.573423] binder: 6949:6952 got reply transaction with no transaction stack [ 161.582218] binder: 6948:6951 ioctl 4008556c 20000080 returned -22 [ 161.588935] binder: 6949:6952 transaction failed 29201/-71, size 0-0 line 2922 06:14:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0x0, 0x1) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={0x0}) r4 = mmap$binder(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x2, 0x1010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000280)={0x0}) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000540)={{0xa, 0x4e20, 0x2, @remote, 0xffff}, {0xa, 0x4e21, 0x80, @empty, 0x401}, 0x7fff, [0x7f, 0x6, 0xff, 0x37, 0x3, 0x1000, 0x80]}, 0x5c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x94, 0x0, &(0x7f0000000380)=[@enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x48, &(0x7f0000000100)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x4, 0x35}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x3, 0x36}], &(0x7f0000000180)=[0x48, 0x68, 0x28, 0x28, 0x30, 0x40, 0x30, 0x20, 0x30]}}, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, r3, 0x3}, @release={0x40046306, 0x3}, @register_looper, @enter_looper, @free_buffer={0x40086303, r4}, @acquire_done={0x40106309, r5, 0x3}], 0x0, 0x0, &(0x7f00000002c0)}) [ 161.610732] ------------[ cut here ]------------ [ 161.616803] binder: 6934:6935 transaction failed 29201/-14, size 0-8 line 3164 [ 161.623419] binder: 6948:6951 got transaction with invalid offset (0, min 0 max 0) or object. [ 161.623482] binder: 6948:6951 transaction failed 29201/-22, size 0-8 line 3199 [ 161.626930] binder: 6948:6956 ioctl 4008556c 20000080 returned -22 [ 161.647205] binder: undelivered TRANSACTION_ERROR: 29201 06:14:30 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x100000001, 0x10000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = fcntl$getown(r2, 0x9) rt_sigqueueinfo(r4, 0x1e, &(0x7f00000000c0)={0x39, 0x1, 0x5}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/60, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00be9e00000000f4"]], 0x0, 0x0, 0x0}) [ 161.655859] binder: 6949:6952 ioctl c0306201 20000440 returned -14 [ 161.664549] WARNING: CPU: 0 PID: 6954 at mm/gup.c:388 __get_user_pages+0xae7/0xfd0() [ 161.678119] binder: 6959:6961 transaction failed 29189/-22, size 0-8 line 3014 [ 161.688192] Kernel panic - not syncing: panic_on_warn set ... [ 161.688192] [ 161.695585] CPU: 0 PID: 6954 Comm: syz-executor.1 Not tainted 4.4.174+ #4 [ 161.702517] 0000000000000000 fe43fbddf51ad47e ffff8800a3007960 ffffffff81aad1a1 06:14:30 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x3, 0x4) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) [ 161.710591] 0000000000000000 ffffffff82835ee0 ffffffff82892ea0 0000000000000184 [ 161.718692] ffffffff8142cb27 ffff8800a3007a40 ffffffff813a48c2 0000000041b58ab3 [ 161.726763] Call Trace: [ 161.729377] [] dump_stack+0xc1/0x120 [ 161.734744] [] ? __get_user_pages+0xae7/0xfd0 [ 161.740893] [] panic+0x1b9/0x37b [ 161.745919] [] ? add_taint.cold+0x16/0x16 [ 161.751722] [] ? memset+0x32/0x40 [ 161.756839] [] ? warn_slowpath_common.cold+0x5/0x20 [ 161.763525] [] warn_slowpath_common.cold+0x20/0x20 [ 161.770117] [] warn_slowpath_null+0x2a/0x30 [ 161.776108] [] __get_user_pages+0xae7/0xfd0 [ 161.782276] [] ? follow_page_mask+0x10d0/0x10d0 [ 161.788611] [] ? __access_remote_vm+0xc9/0x3c0 [ 161.794884] [] get_user_pages+0x6d/0x90 [ 161.800524] [] __access_remote_vm+0x1e3/0x3c0 [ 161.806678] [] ? do_page_mkwrite+0x360/0x360 [ 161.812747] [] ? get_task_mm+0x9c/0xc0 [ 161.818294] [] ? _raw_spin_unlock+0x2d/0x50 [ 161.824275] [] access_process_vm+0x66/0x90 [ 161.830175] [] ptrace_request+0x5b5/0xac0 [ 161.835979] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 161.842549] binder: undelivered TRANSACTION_ERROR: 29189 [ 161.842691] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.845282] binder: undelivered TRANSACTION_ERROR: 29201 [ 161.859301] [] ? generic_ptrace_peekdata+0x100/0x100 [ 161.866064] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 161.872918] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 161.879942] [] ? wait_task_inactive+0x3a9/0x890 [ 161.886252] [] ? migrate_swap+0x570/0x570 [ 161.892038] [] ? mark_held_locks+0xb1/0x100 [ 161.898006] [] ? ptrace_check_attach+0x253/0x390 [ 161.904436] [] arch_ptrace+0x3f/0x970 [ 161.909877] [] SyS_ptrace+0xb6/0x170 [ 161.915228] [] entry_SYSCALL_64_fastpath+0x1e/0x9a [ 161.922183] Kernel Offset: disabled [ 161.925895] Rebooting in 86400 seconds..