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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:15 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000400)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000440)={0xfffffffffffffffa, 0x9, r1, 0x1, r2, 0x9, 0x2}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r3 = semget$private(0x0, 0x0, 0x44) semctl$IPC_RMID(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8800, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000080)={0x7f, @multicast1=0xe0000001, 0x4e23, 0x2, 'none\x00', 0x20, 0x6, 0x6a}, 0x2c) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 2033/05/18 03:46:15 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x100) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000080)=0x10001) 2033/05/18 03:46:15 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x402c582a, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2800000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:15 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1033.260188] binder: 31016:31021 got transaction with invalid offsets ptr [ 1033.283380] binder: 31016:31021 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:15 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xd0b0b00, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:15 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000080)=r2) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1033.315097] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x42ef, 0x40040) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000100)=0x80000000, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) getsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:15 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000ffffffffffffffff00711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1033.341112] binder: 31016:31037 ioctl 40046207 0 returned -16 [ 1033.445783] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:15 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c05, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18de753f000001000000000000d60f00000600000000000000000000000000019500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000930000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:15 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:15 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xe00, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:15 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x2, 0x4, r0, 0xe3c3}, 0x2c) 2033/05/18 03:46:15 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f6ff3fad9e9cf58c81d9ba2"}, 0xfffffffffffffe6d) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000200)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f0000000140)) 2033/05/18 03:46:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='com.apple.FinderInfo\x00') bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r1 = semget$private(0x0, 0x3, 0x88) semctl$GETVAL(r1, 0x4, 0xc, &(0x7f00000001c0)=""/243) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) r2 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x40000) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000300)={0x8, 0x6, 0x0, 0x5, 0xfff, 0x1}) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x81, 0x8001, 0x1) sendto$inet(r0, &(0x7f0000fd0000), 0x2ac, 0x20000800, &(0x7f0000000140)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000340)=""/122) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:15 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000200)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1033.585771] binder: 31070:31075 got transaction with invalid offsets ptr [ 1033.619160] binder: 31070:31075 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:15 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100000000, 0x4000) mq_timedsend(r1, &(0x7f0000000080)="e05bad432aedbd3f6af532ac7ea5f77b5d524bb0f51a1490e4276fd11c", 0x1d, 0x3, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x400000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1033.651601] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:15 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x1f1, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:15 executing program 2: close(0xffffffffffffffff) socket$inet(0x2, 0x805, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xfffffffffffffffe, &(0x7f0000ed4000)=0x7b, 0xffffff4e) sendto$inet(0xffffffffffffffff, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000140)=0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x3b2) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x3, 0x5, 0x7fffffff, "899b67d9a2d26dc9687828874c4ef509cc079c8438962f3ab7dbb7de9417da88e9c9e5aaba9f98462ad3b46eedc90b8090daeb6291b6b9ddd1f427f81c729297e3a3d5c74476c86599b69c7a37483a1b"}, 0xd8) sendto$inet(0xffffffffffffffff, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x80, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000200)) [ 1033.695404] binder: 31070:31082 ioctl 40046207 0 returned -16 [ 1033.792143] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:15 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:15 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="1163484000000000000000007a000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:15 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x127c, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xe803000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:15 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000000095000000000000006f973e9bd52fd58f530d2d80cc893c9e174e24451d32ef13692bc8f86d11bcc6c176ef49c7458160bbd87674b7298ea96ddd61b04c"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xff, 0x410000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10002, 0x3, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x7f, 0x2, 0x3ff, 0x1, 0x0, 0x1}}, 0x8) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f00000000c0)=0x100000001) 2033/05/18 03:46:15 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:16 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c04, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xbd01000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:16 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000480)={'security\x00'}, &(0x7f0000000500)=0x54) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000002000000711000000000000000000000000000000700000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)='/-\'|\x00', 0xfffffffffffffffd) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000340)={'yam0\x00', {0x2, 0x4e22, @rand_addr=0x1f}}) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="6cb9fa48905031a6df75a89cccd0f414a1f570173300c554bd6df02991ec1323e0749b8ca275d090c06cf1a48b5d9f2f5f86a0d0fec1a8ed5d926ed841ef9084a566ad257d8d624286", 0x49, r3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x202000, 0x0) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000300)={0x3, 0x5}) [ 1033.963441] binder: 31128:31130 got transaction with invalid offsets ptr [ 1033.999695] binder: 31128:31130 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:16 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x362a6e8b, 0x2, 0x2, 0xe, 0xc, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x18}, @generic={0xdce2, 0x1000, 0x7, 0x7}, @generic={0x3, 0x9, 0x6c0, 0xea}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0xed, &(0x7f0000000200)=""/237, 0x40f00, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000000000f112b7cc6920683324f609823fcb06cdcfbe5fd53223d3a55b5973dada1de7a3a0b48e26dcb4b8404acdbcb1db560fce2edf5b4e22e26b23bc7a8c54db44fdc34c8b6c9ca0b9fa7756e295e2e827c4a062088976f0537257539f6cd25115d3565d38f528e5e67f377033a762b99a02e2d97a0e658a0c335bc502a86f058bfccff24844e682654febcc8e894fc8f6fc32de62cf2adfdacae60e1a8d2d908d17fea5e2fd0acc89ab"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) dup3(r0, r0, 0x0) 2033/05/18 03:46:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000004840)='/dev/autofs\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000004880)={0x0, 0x80000000, 0x4, 0x5, 0x2, 0x1, 0x9, 0x1, {0x0, @in6={{0xa, 0x4e22, 0x80, @empty, 0x3}}, 0xffffffffffffff80, 0x1, 0x80, 0x7, 0x1}}, &(0x7f0000004940)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000004980)={r2, 0x4, 0xf9, "316adced008803402e6df99a131d174aef6cec7d6b136b773a991522ce067259a2eaa95276b1f0362902d91d1e5556b4e0f45b92ffbcb9655269ce2ce1f8253c164b1d8e20edaf72594d7aa13721eac60a14583eea54234ba68d306f3a035f68e2ca19cd28c6557d82c657f6319cca74645dcfd62915ddf1182e96e0ad509372ea06d7e9990df14787e9dd0fd06728a789948349454a742baec2a6d0638378a01bcd00ab60c8bdb1fcbf4411a2184fa536a05442d3629ebf048a0fbd528c9a5d78dffaf7e3ab30a1f2953cdb3fee7ce7126359e7c4b40273d10e5189033478881dafae208793f70979d8c716a3e4feb5af9aab96365e0ec034"}, 0x101) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x10011, r0, 0x0) [ 1034.058170] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.086083] binder: 31128:31139 ioctl 40046207 0 returned -16 2033/05/18 03:46:16 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6488], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:16 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) [ 1034.228296] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x2000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:16 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x203, r0}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000002000070000000000364e76fcfead4dd06750b86768e5db8543cb681510d996c40b98ffe19b676c34cba27676143dd1a4091a9232bacd2b8efad08f5cd391a0d96176ac5e011203f7fdee248748fcd923008b03efbea3d647062bc500a0b999d855771c91da569e85924cb25ec1397ca77f05646adae4e458ace35f7ae237ece5d866514789237f93fee6da4a4bd6fcdc0951d846260335f7ff63f0a5755e68b218d603a6835746a984c1c7a29d29484c8ad73320d6733681ced14fe6583c9e0ae503f706e017e5aa5e6c02f39803506481f6976be4d5586a"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r2, 0x6}, &(0x7f00000001c0)=0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000fffffdfd0000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:16 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000000)) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4001) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0xc0401273, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8035000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000080)="a2bb2f3edac3", 0x6, 0x200007ff, &(0x7f0000000040)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:16 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = dup2(r0, r0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r2 = socket$inet(0x2, 0x6, 0x8001) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x2, 0x5, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x5}, [@typed={0x8, 0x51, @ipv4}, @generic="5be8626c4762dd3e0fc115d2da72", @typed={0x8, 0x1d, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x20000044) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r1, 0x2, 0x3}, 0x14) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000100)={0x4f, "7363f546b65ebb6a0814877caad3d89adc3abcd80ddb8335b9346d84dc8092de10bf418683494753d4f028b5c574517ba716dd621b919b705abdfd872da892ed692242b9dd25253e950e87e73662c4"}) [ 1034.368887] binder: 31174:31187 got transaction with invalid offsets ptr [ 1034.389887] binder: 31174:31187 transaction failed 29201/-14, size 24-8 line 2991 [ 1034.400449] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.407772] binder: 31174:31195 ioctl 40046207 0 returned -16 2033/05/18 03:46:16 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x822b, 0x10000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="d70000008ea84df1937beb53969840de8709849b85fb0891c7b2033f9b892c82815bec5f9204f5d3948642c65441d6143ff0ee6f1a6079e7530064d8c142317ef780925fbd70f75917ebe3e2d16f50f2e6df8c101dfb895e2a3468d6695e9533c24e37d8144eca15b58b632a8c81853312df0023c5320c1dc04c414885e22438c8f03949d98d3b187ca0374c478fdfbd733d44695d9e088e0cd7b6b52ac046661d117fb2f5b8dc680e363b651f5f54b8ab4c64dce82f64dc9242b88ea3b4889ad8ed1becc38b2926ca32a48486b23ea2ea00000000000000000000"], &(0x7f0000000080)=0xdf) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r1, 0x1, 0x2}, &(0x7f00000002c0)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x40041271, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x500, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:16 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x200, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0xe, 0xb, 0x202, 0xffffffffffffffff, 0x2}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', r2}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x1, 0x0) write$fuse(r0, &(0x7f0000000080)={0x20, 0x1, 0x0, @fuse_ioctl_out={0x0, 0x400, 0x101, 0xffff}}, 0x20) write$fuse(r0, &(0x7f0000000000)={0x20, 0x3, 0x0, @random="79eeaf478aee878db09dbe57bc31cf61"}, 0x20) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000001c0)={0xd5, 0x2bc, 0x3f, 0x9, 0x2, 0xfffffffffffffff8}) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = memfd_create(&(0x7f0000000000)="7d2d2f3a216574683091726f6300", 0x3) ioctl$KVM_SMI(r1, 0xaeb7) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x4}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r2, 0x5}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000000004"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000180)) 2033/05/18 03:46:16 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8847], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000007300000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1034.529318] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:16 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) sysfs$3(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c06, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x40000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1034.615264] binder: 31221:31222 got transaction with invalid offsets ptr [ 1034.639203] binder: 31221:31222 transaction failed 29201/-14, size 24-8 line 2991 [ 1034.701166] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.714356] binder: 31221:31229 ioctl 40046207 0 returned -16 2033/05/18 03:46:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:16 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:16 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xfffffffffffffffd, 0x103000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202, 0xffffffffffffffff, 0x3}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0xfffffffffffffffc, 0xffffffffffffffff, 0x1, 0x1000000000000004, 0x202, 0xffffffffffffffff, 0xfdb}, 0x5) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x5450, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x240, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:16 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18407a4a408a000000000000000800009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:16 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="116348400000000000000000000000000000006c0000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1034.768104] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:16 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5b01], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1034.852293] binder: 31254:31255 got transaction with invalid offsets ptr 2033/05/18 03:46:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) kcmp(r1, r2, 0x2, r0, r0) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:16 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x2e6, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1034.895367] binder: 31254:31255 transaction failed 29201/-14, size 24-8 line 2991 [ 1034.913197] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:16 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x127d, 0x6f2000, &(0x7f00000003c0)) [ 1034.942134] binder: 31254:31263 ioctl 40046207 0 returned -16 2033/05/18 03:46:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xd0b0b0000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:17 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000220000000000000071100000000000000000000000000000950008bc24c136bf520a050baee32f0af12b3479d9763662115eebd61d9ac42ba570f8579ea46cb3cff3eabfd7000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000340)=0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x10ac72344f4e89ae, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:17 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r1, &(0x7f0000000400)="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", 0xfffffffffffffd14, 0x0) 2033/05/18 03:46:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="116348400000000000000000007a0000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) r2 = fcntl$getown(r1, 0x9) ptrace$getenv(0x4201, r2, 0x4, &(0x7f0000000080)) r3 = getpgrp(0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:17 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x127a, 0x6f2000, &(0x7f00000003c0)) [ 1035.046898] binder: undelivered TRANSACTION_ERROR: 29201 [ 1035.124050] binder: 31282:31287 got transaction with invalid offsets ptr 2033/05/18 03:46:17 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:17 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x786e, 0x20002) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x10}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r1, 0x1, 0x2, [0x8, 0x7fffffff]}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f0000000180)="b82283392dc50ff1fb635a58494e95e12aa8da8a90fa911500a0076f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000004000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x640000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:17 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x541b, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xff1e, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x5, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80, 0x0) connect$ax25(r1, &(0x7f00000000c0)={0x3, {"0cdadac45b44c6"}, 0xffff}, 0x10) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x2, r0}) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1035.165235] binder: 31282:31287 transaction failed 29201/-14, size 24-8 line 2991 [ 1035.193652] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.208807] binder: 31282:31303 ioctl 40046207 0 returned -16 2033/05/18 03:46:17 executing program 0: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x1010fd) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f0000000240)}, 0x10) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8800, 0x0) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000200)) 2033/05/18 03:46:17 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) accept4$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14, 0x2b3bd72a539d59a6) flistxattr(r0, &(0x7f0000000000)=""/27, 0x1b) 2033/05/18 03:46:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000060000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1035.329736] binder: undelivered TRANSACTION_ERROR: 29201 [ 1035.385252] binder: 31330:31331 got transaction with invalid offsets ptr [ 1035.426265] binder: 31330:31331 transaction failed 29201/-14, size 24-8 line 2991 [ 1035.448047] binder: BINDER_SET_CONTEXT_MGR already set [ 1035.459112] binder: 31330:31336 ioctl 40046207 0 returned -16 2033/05/18 03:46:17 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xffffffffffffffd0, &(0x7f0000000400)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x8, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000002c0), 0x4) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)="9ae60a527aa94d41de595b5b99a76c59a906c2cfc52d9516ba8e44decdd2053638fa6f6e6962bc823b5f6cb959752914fbbe2f8278d2e27d3cb4676174df34ce2fdde341eb82bd82a0e060d3a3c8bb71558ea43f62bc0402469ad0d1ea4603", 0x5f, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000200)='user\x00', &(0x7f0000000240)='GPL\x00') socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xe000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:17 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1ff, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0xc020660b, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000f4ff0000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) fchmod(r0, 0x15) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) 2033/05/18 03:46:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000007050000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000001c0)={0x7, 0x0, [{0x6, 0x4367, 0x2, 0x9, 0x14c00, 0x7, 0x9950}, {0x1, 0x7, 0x4, 0x3, 0x6, 0x1, 0x2}, {0x0, 0x5, 0x6, 0x1, 0xfffffffffffffc01, 0x1f, 0x1}, {0x8000000f, 0x3bfd, 0x7, 0xff, 0x4, 0xffffffffffff085d, 0x401}, {0xa, 0x7, 0x1, 0xff, 0x0, 0x2, 0x3}, {0xc000000f, 0x9, 0x1, 0x0, 0x0, 0x6}, {0xc0000000, 0x1, 0x6, 0x200, 0x3, 0xffffffffffffff01, 0x2}]}) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1035.477255] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:17 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x14000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:17 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1276, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed\x00', 0xc) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x2200) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)=""/122, &(0x7f0000000180)=0x7a) sendto$inet(r0, &(0x7f0000000040)="085ec865586283d6129802ad3d31ab4c0fa831618b79a5ff49eedbc9804479f69776abd41c62edf3f4eaf8cae05a09205d9a2c5d7587b41c86a3d72b943b75b124514538351aea8beef91a8dc90b5af86b54409ca907f96f956b50d2ed9490d031c9d2e593b291af87ffc6b8fb998b9512515240807128892e71b555b220a7fb3a6095ee41ca7653788e8d94fa068e35f4b41837caf1c384fefad838075138ecac351afbdbdfea924fe4d50d469adc62f5cef69c70bb59fb9612b28a656d928453d19a06fc2b21fea6d145cf2c4eb32c7ac0f1f09279a257e43bb7baf7f0f4eaf93477703218977c76192de003ce966ef8", 0xf1, 0x24000084, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) [ 1035.547143] binder: 31351:31354 got transaction with invalid offsets ptr [ 1035.579265] binder: 31351:31354 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:17 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) socketpair(0x10, 0x4, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000180)=0x1, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003c80)='/dev/hwrng\x00', 0x410000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000003cc0)={0x0, 0xfffffffffffff001}, &(0x7f0000003d00)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000003d40)={0x20, 0x9, 0x2, 0xe27, 0x7fff, 0x5, 0x3, 0x8, r3}, &(0x7f0000003d80)=0x20) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000000)={0x1, 0xfffffffffffffff7, 0x100000001, 0x5, 0x2fe}) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) signalfd4(r0, &(0x7f0000000000)={0x8001}, 0x8, 0x80000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff}) sysinfo(&(0x7f0000000180)=""/164) ioctl$sock_ifreq(r1, 0x8917, &(0x7f0000000080)={'yam0\x00', @ifru_addrs=@vsock={0x28, 0x0, 0x2711, @any=0xffffffff}}) [ 1035.631199] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:17 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x1, 0x3}) finit_module(0xffffffffffffffff, &(0x7f0000000180)='wlan0selinuxbdev\\#vmnet1systemGPL-%6\'\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080)=0x6, 0x4) 2033/05/18 03:46:17 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1035.687410] binder: 31351:31364 ioctl 40046207 0 returned -16 [ 1035.785995] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:17 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x4002, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:17 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1261, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="3b000000000000000000000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000060000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x440, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000080)={0x3ff, 0x1a, 0x7, 0x6, "3094e208e2ea6b8d788818bb7b9b9ca2b217d766ed5dc09b322b243d8b656b5c"}) sendto$inet(r4, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x440402, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f0000000100)={0x6984, 0xb38b, 0x100000001}) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) sendto$inet(r4, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:17 executing program 5: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="f8000000762d00000000000099d508967110000000000000f9ffffff000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1269, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair(0x9, 0x6, 0xfff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000180)=""/240) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe6ff6)='/dev/ptmx\x00', 0x0, 0x0) r3 = epoll_create(0x30fd) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r2, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:17 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1035.893978] binder: 31401:31403 got transaction with invalid offsets ptr 2033/05/18 03:46:18 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:18 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xbd01, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) r1 = add_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="78975d9d1cdff1a3a86c0f12aaf8618efc6b55f96c53fd5efd314ab5dffbe6f82d166659ff4679449b5d65441423318e5989d124c352153c2b5c1713d41fdec09a2938ef2d3db7c22a448699a797e1454a94112ad55359cfc06b45dbd6c39d1c1dc46ceba12e2a94fef71c5443702c03e8464d4c5eeca71f", 0x78, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000002640)='user\x00', &(0x7f0000002680)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000026c0)="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", 0xfc, 0xfffffffffffffffd) mkdir(&(0x7f00000000c0)='./file0\x00', 0x52) keyctl$instantiate_iov(0x14, r1, &(0x7f00000025c0)=[{&(0x7f0000000300)="d26e6f5464ac2c339a451b56bdcdc713db7862b20bd39351e790f4b174403068", 0x20}, {&(0x7f0000000340)="99100668df95df9cdf1800573f69924ff602aee5a20a7f66d69f71a1fed20fdd94f53f0e33dfeaf877a4177d6b4a", 0x2e}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="44aede8b8a5a05ca8741cce028", 0xd}, {&(0x7f00000013c0)="aa8d4fe47370e13fc8e09114aa1f029eab69e1473dc7d47de83bc344db5fb9ebf6efc82a15b02faf3b40acd264faa8cda392f056928d86f372ea852ff8d3a32f4cc01b124814f17a2a30638119ff814ec01cba64bf868f4a6a546fb00452c20229a2fdd1105c8858449028ee9bf7832065443e1408e42eb71e9978ad0de435229a3bf4393aca7535edb59fa546543fd23c8f8749", 0x94}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="7285bb515728feeaacbb4ca68b7569ab096c3fe5568224752962426b920d267c611aa22d34d12aa5efe4270c9fced7a2d92f2f58e0cd60c1102bd8d1c1f87d5d41069cfb4b7ce9f15392c8ab26cf26778b0fda5fd1bbff0162d6669f1bc08927515a829c61dea89fb6e62fa44980308fc47239220cca8d8f373bec7566467ab8dd9a589b141723f95b4466d7faf121c975aad3acf43adce22bf3c8be0f91ceffd7b82d8584b1a0a15a03829e96d18f6dca9184c0234886feaabddb9e99bc4568835b7f3319232ddebdffdc564ea803707fbbb19d23d3898022f093d1fe1fa5dce0e27286cd2d46e205", 0xe9}, {&(0x7f0000002580)="72278cc40320d8b20d977f02", 0xc}], 0x8, r2) r3 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)="d8", 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x7, 0x11, r3, 0x0) write$binfmt_misc(r0, &(0x7f00000027c0)=ANY=[@ANYBLOB="516deecf6f8320ed0edefb09916f1b4f128adafb835413cdc1a6"], 0x4) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [], 0xa}, 0xb) 2033/05/18 03:46:18 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7, 0x41fe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1035.951220] binder: 31401:31403 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:18 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1036.006087] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000100)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x20, 0x7}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1036.044139] binder: 31401:31418 ioctl 40046207 0 returned -16 2033/05/18 03:46:18 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000009000000000000000000fbffffff00000000950000009e580000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f0000000400)}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r2 = socket(0x5, 0x5, 0xfff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002cbd7000fedbdf250600009f8c00025b44cf610000000004"], 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000004c0)={0x9, 0x0, 0x4, 0x0, 0x8, 0x10000, 0x400, 0x6, 0x7f, 0x4, 0xff, 0x4c, 0x0, 0x7, 0x2, 0x2, 0xfff, 0x8000, 0xa34}) sendto$inet(r2, &(0x7f0000000180)="1254bad4fc9df8d2ef3f55e023776c0540d73035336d7a477799cd2b1463bb557ef51775837a58afcb8d85109aa3e357a6bdf28d6d3c5ece799a36ba4be226d17c78a131d1dfb3845c03c3ed5d38e9578e2f", 0x52, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x3000, 0x4000}) r5 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x6, 0x200000) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f0000000340)=""/90) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:18 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88480000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1036.141398] FAT-fs (loop5): Directory bread(block 112) failed [ 1036.186445] binder: undelivered TRANSACTION_ERROR: 29201 [ 1036.194376] FAT-fs (loop5): Directory bread(block 112) failed [ 1036.240804] FAT-fs (loop5): Directory bread(block 112) failed 2033/05/18 03:46:18 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x1f4, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:18 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000180)={0x1, 0x3b28, 0x7}) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:18 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4020940d, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000740000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:18 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4788], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="018eaa111f05a36a124b0a01d3c792adf7d00f0c20ee6d1de7081f149f00e6941575d57b846871599af4f29865e7c126911e1e079aaf02ef9e3f1a8942f347b6bf768d0d73ba81f7943d7e8c4dcd7de2c62f9ce55fc81eac492d19bc008781c18d46819e53d985b40eba6efa31703913f020f78aad5f", 0x76) 2033/05/18 03:46:18 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x8000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000180)={0x401, 0x2, {0xffffffffffffffff, 0x3, 0xf8, 0x0, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = dup2(r1, r0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000000380)=""/43, &(0x7f00000003c0)=0x2b) getpeername$packet(0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@empty, @loopback, 0x0}, &(0x7f0000000600)=0xc) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1) io_setup(0x21, &(0x7f0000000180)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @dev}, @in6=@mcast1}}, {{}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080)={0x1d}, 0x10) io_submit(r5, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="050000000000000000000001cfbdbedee32e68b3a251fd2cfd09684d9c7a18e320bbf22a2ce3cb58fa63c42a238cb85f1023fa8108000000", 0x38}]) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) ptrace$cont(0x1f, r6, 0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000140)={'e\x00\x00\x00\x00\x00\x00\x00\t\x00', {0x2, 0x4e23, @rand_addr=0xfff}}) 2033/05/18 03:46:18 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3580], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1036.347234] binder: 31462:31465 got transaction with invalid offsets ptr [ 1036.367189] binder: 31462:31465 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r1 = semget(0x2, 0x4, 0x10) semctl$GETZCNT(r1, 0x3, 0xf, &(0x7f00000001c0)=""/191) getsockname(r0, &(0x7f0000000280)=@alg, &(0x7f0000000300)=0x80) sendto$inet(r0, &(0x7f0000000440)="afaf1f064133950da030076de46fcd36e185359ee700b6bc967a20e3f7c82b3f2178d71090a0e718fd531de0aa8f92ef5e8e58c0b3eec7476aa0032750266e78945e0c3e6579afc490ee04f491096bbe241b8a7f8c8b467c5d5ba9130aa1d565aceeac1ba175f0a0a29d6e350ba66e4467dfa7ed94175d668b1af07b42514bef195c683e317392a9bcf8377cab96675140b8bc471698a73a169022e750acc3f7063e92c8c8cb051794f7f134037f0ccd507d915b67342a891eb6d3ab98a6e5eacd9418748559263c840b391fe97dc5cb949c7b5aadad300408d49516960e2769b93c9c71ce50ee2766a7d103a17155f8e716d62a15d116ff4d370f3f38ad9de8f80d155e887dea75d5ccf10d42aa445bdca2bb2c05b83424b7b14f0c114e811941e359fc3095f887cca39b0e5015b0335e3617d7f624b55cee78d88551042a87e1f6f44082d97fe566713ab32a40c4ae921ea0ff851b3926519e61be75899da93db0223229d1734b3e5a4f69c14ab76224636fcce9a0353315b6b14011cefe36b04b7d5f526f585e28fe3f08f71e1bb2", 0x190, 0x4000, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0xfffffffffffffd1b) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000080)={0x2, 0x2, 'client0\x00', 0x2, "56e8cb58d8bec519", "6d3a7955636ebb12f862b3df7bc12da66fa813f037bc5eafda5caa0a2eb2fed4", 0x4, 0x4}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000140)=0x2, 0x4) 2033/05/18 03:46:18 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1262, 0x6f2000, &(0x7f00000003c0)) [ 1036.408573] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:18 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xe, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:18 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = syz_open_dev$sndpcmc(&(0x7f0000001500)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x101000) ioctl$sock_ipx_SIOCAIPXPRISLT(r0, 0x89e1, &(0x7f0000001540)=0x7f) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1036.431919] binder: 31462:31474 ioctl 40046207 0 returned -16 2033/05/18 03:46:18 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:18 executing program 5: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='nouuv\x00,noattr2,\x00']) 2033/05/18 03:46:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000680000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:18 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1036.540223] binder: undelivered TRANSACTION_ERROR: 29201 [ 1036.592421] XFS (loop5): unknown mount option [nouuv]. [ 1036.626863] binder: 31500:31502 got transaction with invalid offsets ptr [ 1036.649587] XFS (loop5): unknown mount option [nouuv]. [ 1036.669410] binder: 31500:31502 transaction failed 29201/-14, size 24-8 line 2991 [ 1036.698120] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000ed4000)=0x7b, 0x4) r1 = socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x3, 0x33, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000001c0)=""/51}, &(0x7f0000000280)=0x78) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sync_file_range(r1, 0x4, 0x4, 0x4) r2 = socket(0x3, 0xa, 0x7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="fa40abbbb5bf864a8bfe08920000000000000000000000004732ec89d9dbfc73ff6cd1b9328732975bcfa4be5cc4080c314e19b7c3ff2c268f2e6697b0113d6ef149cb4f107a903a0e66c76737e00618ea5ed17289539fbafa033478592237cfb6cd17cf6ed103f70ce6d4727a5bf67c544b6f796b82f043c6e3a9cac0bef71c2d62385d1d309ac295ce3dd74deb6d433da0ec0c974ad256a17f6975733fde8ad99b7094c8ce3e0bb9f26e2e3a4765545d142bf028efd27f2125f9e1f917a58a55fd7ebd6e8928ed01929ab920eafc9a68765c"], &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000000c0)={r3, 0x3}, &(0x7f0000000100)=0x8) 2033/05/18 03:46:18 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x2000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:18 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c03, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:18 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1300], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:18 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000080000000000000041d00000000f6ff95000000000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = gettid() r2 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(r1, r2, 0x16, &(0x7f0000000080)={0x2e, 0xc96, 0x4, 0x7}) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0xfffffffffffffffe, 0x10001, 0x202, r3}, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:18 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000068000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:18 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x800) recvfrom$packet(r0, &(0x7f0000000000)=""/186, 0xba, 0x41, &(0x7f0000000140)={0x11, 0xf9, r1, 0x1, 0xecd, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) syz_emit_ethernet(0x2a, &(0x7f000025a000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1=0xe0000001}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 1036.745065] binder: 31500:31511 ioctl 40046207 0 returned -16 [ 1036.762376] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:18 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf0], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) sched_setscheduler(r1, 0x17d8bc53d84d7946, &(0x7f0000000300)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x7, r0}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}}}, 0x3a97, 0x2, 0x9, 0x3ff, 0xa9a}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r3, 0x10001}, 0x8) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000010000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000000c0)=[@decrefs={0x40046307, 0x4}, @transaction={0x40406300, {0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000000), &(0x7f0000000080)=[0x28, 0x18, 0x78, 0x78, 0x18, 0x0]}}], 0x37, 0x0, &(0x7f0000000140)="3e6077c60acb4b391dd55fe3e6b7745dd4e1f9699dd9752732ca41ecb21c7cfb04471999f3877625e3209f31b1b3e53d46290f24c60a8b"}) 2033/05/18 03:46:18 executing program 1: openat$cuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cuse\x00', 0x400000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000080)={@empty, 0x0}, &(0x7f0000001880)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x546a}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x21cea0f3}], {0x95}}, &(0x7f0000000240)='GPL\x00', 0x5, 0x9c, &(0x7f0000000280)=""/156, 0x40f00, 0x1}, 0x48) sendto$packet(r1, &(0x7f0000000180)="85f2a5022b0d484145b97a8dc8d43f2fe5692a3c2c9477bd80d5f48e2b64d30d72308713a2ec5b85b514c3157003a54cfdaf06e4856691bd99a5bcdacdfee9bc750c51037aa578c0111ccada2569fd8795daa3f608a7ac61f39374a49706f79bfb1284a18169d2a362047f858f64391fa629a6e45d46ca8353df536cabe124b6b2a49c8e2ec37efb95dbb1", 0x8b, 0x800, &(0x7f00000018c0)={0x11, 0xf6, r2, 0x1, 0x7, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000440)=0x44, 0x4) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0xffffffff, 0x200200) 2033/05/18 03:46:18 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = add_key(&(0x7f0000000180)='trusted\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="5c86982b2f62d6fb6e6391c43eca4fd40459b8d8b33f315cc4103d9fdb392f3610808a2befac3f58b035", 0x2a, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000540)={r3, 0xa}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f0000000380)) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x202, 0x0) sendmmsg$alg(r4, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="fab494cf7751afb4c7fccad066950b296ea50cce9f6220d589a15a719a5276b8df84b31e89d95c157352cfe8c5ea47918512bfa2d99a60864e79f34028632402f806deb1bb51d46e0760bc6c528be6cf0ce82fa05df9b7097d97d1e6eecb184b53ec8f0658538d6e44309d6141ef9ebcc0087b6e21b5589b89ef74f8104f9698", 0x80}], 0x1, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x1340, 0x20040800}], 0x1, 0x1) 2033/05/18 03:46:18 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125f, 0x6f2000, &(0x7f00000003c0)) [ 1036.841808] binder: 31532:31534 got transaction with invalid offsets ptr 2033/05/18 03:46:18 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x7000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x3, 0x4, 0x200, 0xfffffffffffffcb8, 0x100}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1036.910249] binder: 31532:31534 transaction failed 29201/-14, size 24-8 line 2991 [ 1036.922096] binder: BINDER_SET_CONTEXT_MGR already set [ 1036.962875] binder: 31539:31541 ioctl 40046207 0 returned -16 [ 1037.005762] binder: BINDER_SET_CONTEXT_MGR already set [ 1037.030339] binder: 31532:31558 ioctl 40046207 0 returned -16 [ 1037.088788] binder: undelivered TRANSACTION_ERROR: 29201 [ 1037.728912] binder: 31539:31567 transaction failed 29189/-22, size 0-0 line 2848 [ 1037.853656] binder_alloc: binder_alloc_mmap_handler: 31539 2000c000-2000e000 already mapped failed -16 [ 1037.867010] binder: 31539:31568 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 1037.874807] binder_alloc: 31539: binder_alloc_buf, no vma [ 1037.880394] binder: 31539:31568 transaction failed 29189/-3, size 0-48 line 2963 2033/05/18 03:46:20 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:20 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x5f02, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:20 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1260, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:20 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x2, r0, 0x1}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@local, 0x0}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000004c0)={@empty, 0x0}, &(0x7f0000000500)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000f00)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000f40)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000001040)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000010c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001100)={0x0, @multicast2, @dev}, &(0x7f0000001140)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002680)={0x0, @multicast1}, &(0x7f00000026c0)=0xc) recvmsg(0xffffffffffffff9c, &(0x7f00000029c0)={&(0x7f0000002700)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002780)=""/23, 0x17}, {&(0x7f00000027c0)=""/160, 0xa0}], 0x2, &(0x7f00000028c0)=""/249, 0xf9, 0x8}, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002a00)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000002b00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000004040)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004080)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000004180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000041c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in6=@mcast1}}, &(0x7f00000042c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000008}, 0xc, &(0x7f0000004900)={&(0x7f0000004300)={0x5f0, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfffffffffffffffd}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x21c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x47}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r11}, {0xf0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x220, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xc9d}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x200}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7d7}}, {0x8, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r19 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r19, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000050000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:20 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xfffffffffffff800, &(0x7f0000000040)=""/103) syz_emit_ethernet(0x376, &(0x7f0000015e15)=ANY=[@ANYBLOB="ffffffffc13caaaaaaaa00ff86dd6076605100303afffe8000000000000000000000000000ffff020000000000000000000000000001860090780014000060c5961e00000000ff010000000000000303000000000001ff020000000000000000000000000001"], 0x0) 2033/05/18 03:46:20 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) recvmmsg(0xffffffffffffff9c, &(0x7f0000001f40)=[{{&(0x7f0000000200)=@ipx, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000400)=""/217, 0xd9}], 0x3, 0x0, 0x0, 0x3}, 0x4}, {{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/79, 0x4f}, {&(0x7f0000000380)}, {&(0x7f0000000640)=""/206, 0xce}], 0x4, 0x0, 0x0, 0x9}, 0xad5}, {{&(0x7f0000000780)=@can, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/89, 0x59}, {&(0x7f0000000880)=""/222, 0xde}, {&(0x7f0000000980)=""/108, 0x6c}, {&(0x7f0000000a00)=""/220, 0xdc}], 0x4, &(0x7f0000000b40)=""/4096, 0x1000, 0x80000001}, 0x1}, {{&(0x7f0000001b40)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001bc0)=""/223, 0xdf}, {&(0x7f0000001cc0)=""/248, 0xf8}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/64, 0x40}], 0x4, &(0x7f0000001e80)=""/140, 0x8c, 0x7ff}, 0x8000}], 0x4, 0x3c0851a899d34a5, &(0x7f0000002040)={0x0, 0x1c9c380}) accept4$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14, 0x80800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x1, 0x5, &(0x7f0000002080)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000002180)="73797a6b616c6c65720053df0968d9bab422e19c14e860303096e8cd07c0101a44ccca7d9ce6b1211f21294e28636861529a3075", 0x3, 0x92, &(0x7f0000002380)=""/251, 0x41f00, 0x1}, 0xffffff23) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000001c0)) [ 1037.997552] binder: undelivered TRANSACTION_ERROR: 29189 [ 1038.003065] binder: undelivered TRANSACTION_ERROR: 29189 [ 1038.045400] binder: 31569:31582 got transaction with invalid offsets ptr [ 1038.077810] binder: 31569:31582 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:20 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x127e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:20 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000007103030000000065fe1f6d9e43000001000400dd65c894009500000000000000005f0900000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:20 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xe803, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:20 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:20 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) getpgrp(r0) 2033/05/18 03:46:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed\x00', 0xa) r1 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x7, 0x0) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) recvfrom$inet(r1, &(0x7f0000000180)=""/255, 0xff, 0x2, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'eql\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) [ 1038.103145] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.112180] binder: 31569:31591 ioctl 40046207 0 returned -16 [ 1038.137209] binder_alloc: 31569: binder_alloc_buf, no vma [ 1038.142922] binder: 31569:31582 transaction failed 29189/-3, size 24-8 line 2963 2033/05/18 03:46:20 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000000095000000000000001df4ca7c5057b51b42c62a616fa4f1be83fea228f10ffedd1565c561fbbbf82574c3d8a2ca888787e45e7e6fe872aa6d91716605805b8395c9103c0e654298dd1317a34bd2dbaed203376843e67e699871658823e8ef415e3f4c83639cdc0e78"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x2800) r2 = open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x10) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000280)=r2) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f0000000000)) 2033/05/18 03:46:20 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:20 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x690002, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x40000000000005, 0x20000800a, 0x4, 0x6, 0x0}, &(0x7f0000000240)=0xfebb) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={r1, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x6, 0x1c, 0x8, 0x924, 0x5b}, &(0x7f00000001c0)=0x98) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xf20, 0x101, 0x2, 0x4841, 0x38, 0x6, 0x0, 0x7, r2}, &(0x7f0000000180)=0x20) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f00000004c0)={r3, r0, 0x5, 0x0, &(0x7f00000002c0)="4b28f4313ebcab93e4ff480fd691aa99020b3c3f74c4640875cab2c755ef60477cad6fc2bca13d72f6a0", 0x3, 0x3b0b48d5, 0x100, 0x8, 0xff, 0x33, 0xffffffffffffffc0, "7c4e62458dfb7f8d99eaab19fe278f6f1cba256d4129e2aee735b2ac07207517a7bcd9816ecba47f37341b580e88b6314cacd3b249756fc5b4b026e6885e3436afb1700f17cfae29b7711934ad27f8a5369572879147953ae5b98d0fc9bf3d0022de412a29a4cb5b27e576e5c47a5c300f6bf5c45952ec3c2c6c69e2306e4133c5c7f23e48bbec28d3194625b1bd48a1586995d147ad5e1b767775b9fedb93a27392037c410b863c3edd72edc5dfbff867fa325281ab6723c7fcdedec49a1c0894e49c1af080e5ba124e375d3f6b36f6b0be90c36832257125c34f7e6a5c9a28ccd6fc32c40c9c7c63122b15945a7dc9f316399b82f0"}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000480)={'vcan0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0x50, &(0x7f0000000340)}, 0x10) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000280)={0x1, 0x6, 0x7f, 0x2, 0x291f}) 2033/05/18 03:46:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000003000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:20 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1263, 0x6f2000, &(0x7f00000003c0)) [ 1038.262417] binder: undelivered TRANSACTION_ERROR: 29189 [ 1038.268693] binder: undelivered TRANSACTION_ERROR: 29201 [ 1038.358563] binder: 31620:31627 got transaction with invalid offsets ptr [ 1038.382266] binder: 31620:31627 transaction failed 29201/-14, size 24-8 line 2991 [ 1038.404908] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:20 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000000)={0xffffffffffff9ed0, 0x5, 0x100, 0x2, 0x6}) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffc, 0x1000000000000004, 0x202}, 0x2c) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) capset(&(0x7f00000001c0)={0x20080522, r1}, &(0x7f0000000200)={0x80000000, 0x4, 0x20, 0x3, 0x638, 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) 2033/05/18 03:46:20 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0xa00, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffeffffffff, 0xc0002) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000340)=""/75, &(0x7f00000003c0)=0x4b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'rose0\x00', r1}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xfffffefffffffffe, &(0x7f00000002c0)=0x7b, 0xffffffffffffff4a) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23}, 0xfffffffffffffdb5) sendto$inet(r2, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000300)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x2000000) sendto$inet(r2, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:20 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:20 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="1163484000000000000000006c000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:20 executing program 5: r0 = open(&(0x7f0000000480)='./file0\x00', 0x40000, 0x4) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x2}) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000380)=0x11004) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000100)={0x6, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={r1, 0x80000, r2}) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000180)={'mangle\x00'}, &(0x7f0000000000)=0x54) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg(r4, &(0x7f00000024c0)={&(0x7f0000000040)=@ipx={0x4, 0x3, 0x2, "8234415d8799", 0x5}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000200)="0c227e989cbb214382c4e43fb8f9c7a4e076c2f56a834004d25db58b8cb197209c55fdc1d06051c719656a4d7a7fab8647b7ac1a2274b79b724d8ff16ce195576956ff4f90345b0f1387a13b8b074ab805e130b63e6e952c4726df27682677ca8f3b7b3d37", 0x65}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="90000000000000000f01000052200000c7d548c0f6b1d1be2281bb27fdf5e6d8d703c6f3d75b977de63879f9ad9e02a6c4f69de6526ecbc2eff912f8c1a6be12fd8ce835b5b41282b5cb34daeff7d7b4aa98550c1dcf161de5ce42f4dfd643361a4d92b60b6638b00620b962592fe718770b7ee8e7e7e1d5b47b7afdc3420bf21fe279ee05206c69403e3343e600000018000000000000001d01000000011f1e05c1a977d677030008c611393a0abab1075f5df982a2d7ef830f42602da4677984e38e380f831f937faa3671b3696042c79f29a357c25449fe46c356bf9860164ffc3831d4aaa0db8684bddb8f10591a0c"], 0xf1, 0x20000000}, 0x40) modify_ldt$write(0x1, &(0x7f00000003c0)={0x6, 0x20101000, 0x0, 0x80000000, 0x3, 0x1, 0x100000001, 0x7670, 0x3f, 0x100000001}, 0x10) dup3(r3, r4, 0x0) 2033/05/18 03:46:20 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2012, &(0x7f00000003c0)) [ 1038.429522] binder: 31620:31632 ioctl 40046207 0 returned -16 [ 1038.467872] binder: undelivered TRANSACTION_ERROR: 29201 [ 1038.522211] binder: 31649:31652 got transaction with invalid offsets ptr 2033/05/18 03:46:20 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000002, 0x10000000) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r1 = dup2(r0, r0) r2 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x12) inotify_rm_watch(r1, r2) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000080)=0x3) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 2033/05/18 03:46:20 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = fcntl$dupfd(r0, 0x0, r0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x4900000}, 0xc) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x1fe, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000080)=0x80000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1038.565687] binder: 31649:31652 transaction failed 29201/-14, size 24-8 line 2991 [ 1038.595317] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.633966] binder: 31649:31659 ioctl 40046207 0 returned -16 2033/05/18 03:46:20 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x6, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) r2 = getpgrp(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000180)={0x1, r2}) 2033/05/18 03:46:20 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) eventfd2(0xf73c, 0x800) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080)=0xfffffffffffffff8, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0xfffffffffffffefe, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:20 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x1400000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000200)=""/246) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) 2033/05/18 03:46:20 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$rds(0xa, 0x2, 0x11) sendmsg$rds(r1, &(0x7f000000afc8)={&(0x7f0000004ff0)={0xa, 0x1}, 0xe8, &(0x7f0000010000)=[{&(0x7f000000c000)=""/4096}, {&(0x7f000000e000)=""/79}, {&(0x7f000000f000)=""/255}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000002900000043000000000000000000008b3fa10000000014010000d2f4568e0000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000015ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000008ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000040), 0xfffffffffffffea8, 0x200007ff, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000140)=""/16, &(0x7f0000000240)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:20 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000030000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1038.714935] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:20 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1038.792997] binder: 31686:31687 got transaction with invalid offsets ptr 2033/05/18 03:46:20 executing program 5: setrlimit(0x8, &(0x7f00000a3ff0)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x4400, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f00000000c0)={0x80000000000000, 0x0, 0x3, 0x4, 0xa}) r1 = socket(0x10b, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) getpeername$inet6(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) accept$alg(r1, 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[{0x8, 0x6}, {0xb}, {0x0, 0x9a8}, {}], 0x4) r4 = socket$inet6(0xa, 0x0, 0xffffffffffffeff1) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) close(r4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00008d6000), &(0x7f0000bd4ffc)=0x14) mmap(&(0x7f0000912000/0x2000)=nil, 0x2000, 0x0, 0x2010, r1, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000180)) bind$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, {0x4, 0x1, 0x2e, 0x40, 0x7fffffff, 0x200}, 0x3}, 0xa) 2033/05/18 03:46:20 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xa000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:20 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1038.843276] binder: 31686:31687 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:20 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x200000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x3ff}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x7fff, @ipv4={[], [0xff, 0xff]}, 0x200}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e24, @rand_addr=0x5}]}, &(0x7f0000000200)=0x10) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000300)=""/33) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x9, 0x100000001, 0x6, 0x8001, 0x100}, &(0x7f0000000280)=0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x1fe}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="7de97f9700000000000000000000000071100000000000000000000000000000950000000000000041400ff58563a1f686306f406df45efa23a20ac1"], &(0x7f0000000340)='GPL\x00', 0x4, 0xfb, &(0x7f0000000500)=""/251, 0xfffffffffffffffd, 0x4}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:20 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000180)="bead99ea37ce326533e70b8a5fe50cc5ed9de09db48c934a1deb5fb6a09e60525f079853eebed662c6fe5188707713398b151cd0a958a28bae897cca6d984e8c595565fe59f5e8d891220fb4a402d296adb6710bdd3d1671f85522a1cf385e5db63e9148c27dcb14ea7758ced2ac07a51f2cc57ed7a8ef6964103f43ecca547beccc1c4cd70f63e47560b362657abdf657c9323156007b0a51fdd109e6c57d1e8f5acfdf2c9a1f0050ff8bdebe2d5df648ddacbad11f8cecd913f274be3720c0746574cda1d573c99162045e3e76ae249fc410f24c8139e4f09e", 0xda) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) r1 = semget$private(0x0, 0x0, 0x486) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000040)) [ 1038.902549] binder: BINDER_SET_CONTEXT_MGR already set [ 1038.912294] binder: 31686:31703 ioctl 40046207 0 returned -16 2033/05/18 03:46:21 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xd43f58e118afee75}, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, [{0x43b7, 0x0, 0x8}, {0x7000000000, 0x0, 0x7f}]}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) socket$rds(0x15, 0x5, 0x0) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) 2033/05/18 03:46:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000040000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:21 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0xf1010000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:21 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x6) 2033/05/18 03:46:21 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x2000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000240), &(0x7f0000000280)=0x4) socketpair$ax25(0x3, 0x3, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) connect$ax25(r3, &(0x7f0000000080)={0x3, {"8dd9b224ae854e"}, 0x1}, 0xffffff1c) [ 1039.029875] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:21 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc0ffffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1039.127178] binder: 31731:31733 got transaction with invalid offsets ptr [ 1039.197607] binder: 31731:31733 transaction failed 29201/-14, size 24-8 line 2991 [ 1039.243890] binder: BINDER_SET_CONTEXT_MGR already set [ 1039.265352] binder: 31731:31756 ioctl 40046207 0 returned -16 2033/05/18 03:46:21 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) write$binfmt_misc(r0, &(0x7f0000000180)={'syz0', "d1c57f199908443efe40061faacae3cf444bb3b0b663ada204c7a9188c10e42c2c2b0ae1a28ceb6dde8a3c4336e64a3e76b87b2178cbca7f38bcfee3d477ed28950895d6d78226eba55f2b6948349e815ebe46a19096a2431980d03222a3f35f6c10de75cfdf03bca8d6093251cef16c6dbe1bddd9fa63993d393e8414f2261944fe634897fa2facb5ee8962cd08b68d747e6098cd9be4a92a84aeb1a16d277028e1cc08733a956f377609f1810cfcc284476f45acc1fa7728a54859ca7bcd74fbe9ffe5536d8e4be844ee8933f619915be487c1323f87a968fa90399423fe84d52b22580aa80f532438"}, 0xee) 2033/05/18 03:46:21 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:21 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="181000000000000000000000000000007110000000000000000000000000000095d3000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x20800) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x6, 0x4) 2033/05/18 03:46:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="1163484000000000000000004c000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:21 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3000002, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffff, 0x40) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000040)=0x4) ioctl$int_in(r0, 0x80000000005406, &(0x7f0000003ff8)) 2033/05/18 03:46:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) r1 = dup(r0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:21 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x14, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1039.303955] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:21 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffdd86], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1039.385091] binder: 31774:31779 got transaction with invalid offsets ptr 2033/05/18 03:46:21 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:21 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x1, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0xfffffffffffffe88) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:21 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x486080, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000003c0)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000700)={@dev={0xfe, 0x80, [], 0x13}, r1}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000000000004, 0x800000000000202, 0xffffffffffffffff, 0x2}, 0x2c) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000580)=0x4f45) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x2, &(0x7f0000000340)=@raw=[@ldst={0x0, 0x0, 0x6, 0x5, 0xd, 0xffffffff, 0xfffffffffffffff0}], &(0x7f0000000380)='syzkaller\x00', 0x81, 0xed, &(0x7f0000000400)=""/237, 0x41f00, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f0000000740)) 2033/05/18 03:46:21 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001700)="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") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xfffffffffffffffc, 0xb4, 0x8001, 0x8, 0x0, 0x3, 0x1000, 0xf, 0x2, 0x623, 0x9, 0x9, 0x6db0, 0x1ff, 0x500000, 0x81, 0x20000000000, 0x8000, 0x1, 0x7fff, 0x9, 0xddc8, 0x530, 0x545bfc67, 0xffff, 0x1, 0x100000001, 0x8, 0x3, 0xfff, 0x100, 0x20, 0x6, 0x1, 0xfff, 0x3f, 0x0, 0x3, 0x4, @perf_config_ext={0xdc, 0x3}, 0x102, 0x6, 0x7, 0x5, 0x7d1, 0x6, 0x640}, r2, 0x10, r0, 0x0) epoll_create1(0x618a3c57759f3a3b) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xfffffffeffffffff) sendmsg$nfc_llcp(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x27, 0x1, 0x1, 0x7, 0x7f, 0x9, "053586540dea24210cf4568c1e09bd354c6564e2e2371a422f6c5d9db1bfba656840ad9550c738b511bcd81153247e05c267e6fccb53486553e90778b5b5f7", 0x2}, 0x60, &(0x7f0000000800)=[{&(0x7f00000003c0)="6e7bbb314432b3e99a25aa39ab78ae7bfde26988d4d40374784c95525bfe9d1b2fa64a603a86e07fe257616a338a9a30bc80729ffecffb1395825555dd23818e52c88dd1722869093f8a1c20feb82355453d7fbca819b5fd9905e68ebb15cdc4e2a5a4a2ce866c7e72cb4ac37e6b9ed039c35489bebc6571c1931540afbb8f312534722b196e62f3d99f8157a5ccef67bbcf3cf30e2a9a7001b003682508376239e282a75f1b0d19d22c924d312603ad5ba0fe1be5652c742b86fc9a7b13a139ed440b1e91d8b766f458cd0f4c06a0254587493cd5710f4da5ab", 0xda}, {&(0x7f00000004c0)="10883778dea9d127e661", 0xa}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="8f5e400aa2bbfd3dae918f61669a3ab71558fd73aeba2d129ff816c7533932143b15b0c22c3c9a987eb3e3b83e4035665e133444b9cf631b4896fb9f4933fd6441ffcfadcfa69f03bf49932ef46e26bacdfa90ebff0748afaa8ee051f1219173fbdfed6c6ff35f9a43d6c51a865d8fec3a308fdc0e9a857d630d111b2fb2cbba7f9f50833054627d3a5a57", 0x8b}, {&(0x7f00000006c0)="587916ad7dd20b02d04d17130b68af37533bc4b4b3e81637fdb85b4672d8af84cf66e79e254a15f951950230c86e70d11c8b8bcc19d4159339d3183b8fe3bedb61d6b40fe4a88d63cf9027c7c81b4fb9f4936232c21572ec8e0517d8f77030145d0ef761944cf96d79b77e2f4904a8976e30aa9e2365645baa0824d58b9af735078df7b52ace42bba5242246e5f4c944e8429ad22371d09f40075f38a3a671685255187a6789db4928d616ab20edd0fc4a5ec63f1679289c86dfaf21e9bc40279370d2d6514d75583db0b08cf7c272d8c5950d1c75f559906f6c7519ff850d4de0376a840df4fe9871", 0xe9}, {&(0x7f00000007c0)="baa5088edb20d79debf795515505c10f84abcb260fd6be7e24c78c", 0x1b}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="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", 0x1000}], 0x8, &(0x7f0000000880)={0x90, 0x88, 0x8, "53b872623f44ad140b9e782b5c41638c3fd7a115d3cec49326338bf7dcd584e7b6b8a4dd10936b531e43611a298b57b9728bdc432b8cb6344938aaca8f55f96a24aabe18f6fa70cba5e394433cf1aea93d174e76b868529bd7f3c0d9a919878b11795afd8f2253ec410d74391e55788ff8229f5d0c8da6753e7b9503b712eb"}, 0x90}, 0x40) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000140)=0x78) ioctl$TCFLSH(r0, 0x540b, 0x401) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000300)={0x1f800, 0x401}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000040), 0x100000000081) epoll_pwait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x102, &(0x7f0000000100)={0xfff}, 0x8) [ 1039.429453] binder: 31774:31779 transaction failed 29201/-14, size 24-8 line 2991 [ 1039.465802] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:21 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x34, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:21 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:21 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f0000000240)) 2033/05/18 03:46:21 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2, 0x400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1039.549266] binder: 31774:31785 ioctl 40046207 0 returned -16 2033/05/18 03:46:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1039.620309] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="116348400000000000000000fdfdffff000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:22 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8864], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:22 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0xcd16, 0x1000000000000004, 0x205}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x100, 0x48, 0x0, r0, 0x6}, 0x2c) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:22 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000001174305763d010579b882317110000000000000000000004c171124e33aa16dd53414452e333c00245a327d5567a9458c3f8cd1de958f1a8512339afab84562525649bb2d546bdb6ce3d3747661f7b0dd4628667555e8be8fc10b43306a708fff36260f747a2b55437cb87edab200a10de8399b75c79e54945ee0e5ddb7f872c8fd77d2b64c874b2848f629987083f2f6a8aeabdc3b7911e49af8e2a61720bcdd75d87c6bd56cf94f449d83898119fca7e06e61f37eb9ab8ad25c30373189b90e01d7adb35479d58144f5ed2ff8318ac1422d65ca09b9569bdc4d6b26d3537d94263417fdce34733df47c5c3ef44e5997a3819da42d0324cc113caddc0d6282c945d458d52bdb36c81249e68b91d2d5cd34ab499e9d174be783dd6d3b4854b4dfeb6243aef5971e5f91d5b38b19c29dd4610000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:22 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xc400000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:22 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x480000, 0x11) write$cgroup_subtree(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="e8b4cb8e8a608e2caffe1c889b33c0ffad1bc02b18d3ca30fd0cb72e2992"], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180006000020000000000000000000007110000000000000000000020000000095000000000000002f751412adc9b91783bfeec9e560a5f2b98b279cd056c0f6a151c48922a028efe55ab4a2c6c904ebcdc8b896b62f1c58a3ee526afbe7513b884c56b0fe796428ff37e4a2ed79e9cd4c4ee5c91840fffb7740e5e84559"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd(r3, &(0x7f0000000340)={0x7}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000300)={r3}) r5 = accept4$netrom(r4, &(0x7f0000000180)=@full, &(0x7f0000000000)=0x48, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000005c0)={r6, 0x58, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x101, @mcast2={0xff, 0x2, [], 0x1}, 0x2c67}, @in6={0xa, 0x4e24, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x68}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000600)=0x10) ioctl$sock_netrom_SIOCGSTAMP(r5, 0x8906, &(0x7f0000000080)) r7 = gettid() mq_notify(r0, &(0x7f0000000440)={0x0, 0x5, 0x1, @tid=r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000280)={0x0, 0x80000}) r9 = dup2(r1, r2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000002c0)={r8, 0x80000, r9}) 2033/05/18 03:46:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt(r0, 0x2800000000000000, 0x3, &(0x7f0000000040)="41059faf908a6cee418731418e81568d6377515e074434b2325f45380d9c9993ea4098f9a0bb2d4a5067928714041c0658fab280228eed6b071ce2502cd16226313290326a12d45a7f1e323ae1fe3f", 0x4f) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f0000010000)="240000001900030007ff0907000083be8020000000040005031d85680300a3a2d188737e", 0x24}], 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x4080, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x0, @empty, 0x7}, {0xa, 0x4e22, 0x6, @loopback={0x0, 0x1}, 0x5}, 0x8000, [0x0, 0x101, 0x6, 0x7, 0x2, 0x8, 0x7, 0x4]}, 0x5c) 2033/05/18 03:46:22 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x101800, 0x162) accept4$inet(r0, &(0x7f0000000080)={0x0, 0x0, @multicast1}, &(0x7f00000000c0)=0x10, 0x800) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r1, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:22 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd00], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:22 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0x3, 0x4, r1, 0x8, r2, 0x0, 0x1, 0x7ff}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1040.641297] binder: 31833:31835 got transaction with invalid offsets ptr [ 1040.670848] binder: 31833:31835 transaction failed 29201/-14, size 24-8 line 2991 [ 1040.737268] binder: BINDER_SET_CONTEXT_MGR already set [ 1040.771215] binder: 31833:31852 ioctl 40046207 0 returned -16 2033/05/18 03:46:22 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0xc, &(0x7f0000000180)=@raw=[@exit={0x95}, @generic={0x7, 0x7f, 0x47, 0x6}, @jmp={0x5, 0x2, 0x8, 0xa, 0xf, 0x74, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, @map={0x18, 0x2, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:22 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xf101000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:22 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt(r0, 0x2800000000000000, 0x3, &(0x7f0000000040)="41059faf908a6cee418731418e81568d6377515e074434b2325f45380d9c9993ea4098f9a0bb2d4a5067928714041c0658fab280228eed6b071ce2502cd16226313290326a12d45a7f1e323ae1fe3f", 0x4f) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f0000010000)="240000001900030007ff0907000083be8020000000040005031d85680300a3a2d188737e", 0x24}], 0x1}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x4080, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e22, 0x0, @empty, 0x7}, {0xa, 0x4e22, 0x6, @loopback={0x0, 0x1}, 0x5}, 0x8000, [0x0, 0x101, 0x6, 0x7, 0x2, 0x8, 0x7, 0x4]}, 0x5c) 2033/05/18 03:46:22 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18ddffffffffffffff00000000000000711000000000000000000000000000009500010000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f0000000400)) r1 = semget$private(0x0, 0x4, 0x20) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000000)=[{0x3, 0x5, 0x1800}, {0xd117fbdf37101d2, 0x10001, 0x800}, {0x0, 0x5901, 0x1800}, {0x2, 0xb8, 0x1000}, {0x2, 0x80000000, 0x800}, {0x1, 0x6e42, 0x800}], 0x6, &(0x7f0000000180)={r2, r3+10000000}) 2033/05/18 03:46:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:22 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000060000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:22 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = msgget$private(0x0, 0x40) msgsnd(r0, &(0x7f0000000180)={0x3, "fb70a2e099733cb964d65e450a9e0fc9cc665f2312536884d5a47deaa1b2c270251948ee390a329523f6483f5cc1a57b921a80a83e842927de40afcc9032d2c046ca193de538c2b7fda819d4e5b96bf6a59b1ec084cf798abd910dac721eb129c5a91381825a9e07daab6f8d2d2250f95032b1112f39f8201ebd1123347c94b7a8a6cb0a9fa07acffd1cda7c9cd8d2f41cf48ab42dbe332916c20ddabc94f96b85f70ca7d118bc5d4162072f1385ca71be248ed809369ff436cc9d0bda00986d70475dbc27761c76b04a855a94c0ab9a97758a3052f05a07f107"}, 0xe2, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:22 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1040.828936] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:22 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0xffffffff00000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:23 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x43050000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:23 executing program 2: socket$kcm(0x2, 0x4000000005, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x206}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000006d9ab692b70000000071100000000000000000000000000000950000ade0221ab7007e1e76544a93f3a7a11cc84e5463554b012ab7138e51e7302245b2e4e625202448d1a56325d515c984397935a80043805cb18220b2"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) socketpair$inet_icmp(0x13, 0x93000f, 0x705000, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001280)={0x0, 0x286, 0x5, 0x7af}, &(0x7f00000012c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001300)=@assoc_value={0x0, 0x9}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001380)={0x0, 0xbf, "0491d3e2ef7d19ddb0b9c9d987bb6be1cc77985fa3aa59c9e9b3e8d957e86b9ab4fbfec3c3cc60a0aa1818d1475bb04b66e818e439519be2f0509effc11ae1345aa9b20f7eabc030021d174330e26ed473600751fd80935c28a1b61da96226b19fa95673af95889adc0940d6cdd0a15fbf8285b15092c66b7850ccbadc627d66e76e1d0ec9b6324314456b0dd7710123392ff275df2cce39d59ace66bc48a697c581149dd92e7d2d96bef4f727b47de903821032d93966c716a27bc8c29d78"}, &(0x7f0000001480)=0xc7) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000014c0)={0x0, 0xa6, 0x9, 0x9}, &(0x7f0000001500)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000001540)={0x0, 0xc2, "cc26babb42c0367bda8b3ac2e1cb92dd4764394b01c3a7ac97fff0b3fe0830f5bdebbd5374ba82e8779d5bd0f0e679ffc855f4f40cbc694a5153f1ab3d93bee0db87045abed55d6ab95f5d9794ad6e063e0461a46eb084ce5ef84cbda571ccc2b9bc9d596b6836f58e49d535bfdd5d7d3fb4cc864ed8dc394fb327ec6e0ab6dd5fc79603a1c1da4ff05f5a8d08b945b0a885c7bd4d8752e9538a99f31488e5e16680384df56faeab7d8378f520b84b68a5c14cdbb19490d0eba7e0959c4365aebb34"}, &(0x7f0000001640)=0xca) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001680)={0x0, 0x8}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001700)={0x0, 0x200}, &(0x7f0000001740)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001a00)={0x0, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xa5, 0x1, 0x9, 0x100, 0x80000001}, &(0x7f0000001ac0)=0x98) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001b00)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}, [0x5, 0x15, 0xa3c, 0x8, 0x5, 0x3ff, 0x8, 0x8, 0xeb58, 0x7f, 0xfffffffffffffffe, 0x48, 0x0, 0xffffffffffffff80, 0x1]}, &(0x7f0000001c00)=0x100) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001c40)={0x0, 0x7, 0x62, 0x100000001, 0x3f, 0x6, 0x100000000, 0x64, {0x0, @in6={{0xa, 0x4e24, 0x8001, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, 0x7fffffff, 0xffffffff7fffffff, 0x4, 0x10001, 0x3}}, &(0x7f0000001d00)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001d40)={0x0, 0x80000001, 0x8, 0x8001, 0x9, 0x7fffffff}, &(0x7f0000001d80)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001dc0)={0x0, 0x1000, "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"}, &(0x7f0000002e00)=0x1008) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000004dc0)={0x0, 0xe6, "6ec93a79839ad83d5c7d59de896d299e616e9007d708d8bd6a5fdeb76ba51f9c90234326dc49c30eee12c7b3c694fed75b49ce6a6fb74b00f61b3185e6a1556dce380969384a69f1076b4f0110d1c94f8986fd0c959537ac98c267930bbf2a5a02bf5e5b3a5634e0b43d887f30fdbe9927dc7040ec5fd820d1624f9351c7ab1c7a3e89f871e754fe8eda25f9712fce5e4f879b47b9a9e9edf6c443adb01a21652ecf5858988193809539452bc14c06cc5b7d0058e11b73da52b417228899ec9acfff7b44da28d339872e58f3d72c3bda8f66b69f6dc42c648a0e12aba6b629270f9aa6c31c4a"}, &(0x7f0000004ec0)=0xee) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000004f00)={0x0, 0x2}, &(0x7f0000004f40)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000004f80)={0x0, @in6={{0xa, 0x4e22, 0x80000000, @loopback={0x0, 0x1}, 0x7fff}}, 0x7, 0x3}, &(0x7f0000005040)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000005080)={0x0, 0x8, 0x7}, &(0x7f00000050c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000005100)={0x0, 0x5}, &(0x7f0000005140)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000005300)=[{&(0x7f0000000080)=@in={0x2, 0x4e22}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000240)="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", 0x1000}], 0x1, &(0x7f0000001780)=[@sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff9, 0x1, 0x8000, 0x2, 0x9, 0x200, 0x4, 0x9, r2}}, @sndinfo={0x20, 0x84, 0x2, {0xfff, 0xc, 0x0, 0x4, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x8000, 0x3, 0x10000000, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x8000, 0x7ff, 0x3, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x3f1e, 0x2, 0x3f, 0x6, r6}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffd, 0x244, 0x201, 0x73, 0x0, 0x7, 0x1f, 0x7, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x100000000, 0x1, 0x145b, 0x8, 0x1, 0x7, 0x3, r8}}], 0x150, 0x1}, {&(0x7f0000001900)=@in={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001940)="c96807b0942eaef510cb84d49ed1b4141a46733a090538ddf4a0ad2123a0f9afe02e36cf46831410c0d487c2ee48a24b174efe86e7f56a11fa1b7e7927277dd00d0339e550046c6455a0bdc8fd9f34648cbc7434b6bc0a", 0x57}], 0x1, &(0x7f0000002e40)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x0, 0x4, 0x6, 0x2, 0x5, 0xffffffffffffffff, 0x0, r9}}, @init={0x18, 0x84, 0x0, {0xf5, 0x6, 0x8, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0xc5bd, 0x8000, 0x0, 0xc22, 0x1000, 0x7fff, 0x0, r10}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x5, 0x201, 0xfffffffffffffffa, 0x69349b11, 0x10001, 0x8, 0x40, r11}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x8000, 0x87, 0x401, r12}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8206, 0x0, 0x1, r13}}], 0x120, 0x5}, {&(0x7f0000002f80)=@in={0x2, 0x4e24, @loopback=0x7f000001}, 0x10, &(0x7f0000004140)=[{&(0x7f0000002fc0)="5675d2df253646912983861c142940b5ff447ee14287bc88fb4b4a1d853f14c2ad69db5a7730ef4093338e6ff4509a8bf893ff5f314fe126d1d8d18f56e8474dd64ef0f573c1b07584ef7b3b1105a5110f4f3dab379d", 0x56}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)="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", 0xfe}], 0x3, 0x0, 0x0, 0x801}, {&(0x7f0000004180)=@in={0x2, 0x4e24}, 0x10, &(0x7f00000042c0)=[{&(0x7f00000041c0)="e16c2acc19aea2ce55108189bc362056efa95a8ffd5f2181f00d042de642a8dcd8b4dfd82fe92ead05acc60f597cd6bd3e657dc7402ca2bfca15171e4dd1a47ac02af44cba9e55a6c215fd6fecc80c50b6a25d0114f6c43a50357ad1764f7233840a4376dc3c12ccb39cec793d931c4a26d9562c7af46e78f5d2889f477a9dc4458559d423fe01afbce3d810c10303ceb5f2cbb8382c20e9ecb4e5a513f405e218b3f70a58bb13a89c92c69488ee65e72a5a511032282a00633d3f8a46ae6006055bc128a76030b834e4007ef1c326995d7102e0d516f604f23990605d5a", 0xde}], 0x1, 0x0, 0x0, 0x14}, {&(0x7f0000004300)=@in6={0xa, 0x4e20, 0x3f, @local={0xfe, 0x80, [], 0xaa}, 0x20}, 0x1c, &(0x7f0000004700)=[{&(0x7f0000004340)="98bd6c78b8", 0x5}, {&(0x7f0000004380)="5d33847da046366ca7052bd550bf12ae2452e89567f5a39c8c208ea2d4e072c839edd8f56fa9d35c459272d6be048da8fb0b4222f66f73ae0df74f867259e7a46fd9cee9c4806e1d6369a2d151b007826de2df36c416d89cdc319a634dfb55ff5a2ac917302104a6465d5956295d3bad8166b12195ed1c7fc1ca565dd603963d2a3e9ccf94318dcf76826ad893ac4e789c29dca42fbd4744ceb4d74ff605dc68d9380a153146338324a2b48f6d75df95d1a1735130c6c1a4fb3c1f8d69722f2277cf97dd9f6ea02e3d56c7333fa59cd856eaffa39fe3ed1ef996559b05", 0xdd}, {&(0x7f0000004480)="5e4c7517934c1d42e183d696568c073dfae7c3bb8533e61a1b6478e0512b9694540428347afe876c2956", 0x2a}, {&(0x7f00000044c0)="8e7273656b60c7b32f65dba96b8e3f9c7305fc064c21077d18fd773458f4909c4f294a70271b88d9ce8d305351ed85b055915b5957218303568e1ae54e07efbd3d8d523de2bf87f30061423e0495424a0ffb1dcab6253b37efb74ed20fbc322044bddcf9b521db1ad71c5d08474f23360d35018d24dc2e6b5ee7a44699557e08bbda9d44c3e0ea09b1e7b37f5f74f14294cce066eccd42ebf1a29fa90f511f6a7aacf719d32d14883f8f03bc83f55727bfd2e4511ba79e540f3daa0454c14562f8e395ec2390ef", 0xc7}, {&(0x7f00000045c0)="663fb51acb019b4c8d14c99bda06a6e27bafa5f122c84c4867bed4577e3661cb79f13037e665ef4a4e9660f80d8f604d4cc76f08814ba33aa33bc9bc7f058c71b988cd1b8a5dc0224f9a1ac69c18fb982fe3cc6c91289d0d76e6d11d4326fab7a95dd48f16372a46ee50", 0x6a}, {&(0x7f0000004640)="4238b516328cf5f2bb4880c6bfbb46e308d87c6f007250ebe7c45c36f5192f9b154405944798aee50ac1189bcf0eccee090dd19fe55beb5e2f4ad4f42430a533a2f9d08980f0b94dd9c1faf411c3aa88301f5062ce5b535490a5057b15c242b39daed3cd3256d0e2c917c29445d462d3ceac78b0077b3b8540eb82b77602f773fdf72cb96194aa03e04ead501d0e91d28258", 0x92}], 0x6, &(0x7f0000004780)=[@init={0x18, 0x84, 0x0, {0x0, 0x4, 0x7, 0x9}}, @init={0x18, 0x84, 0x0, {0xb02, 0x2, 0x5c}}], 0x60, 0x2004c040}, {&(0x7f0000004800)=@in6={0xa, 0x4e21, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c, &(0x7f0000004b80)=[{&(0x7f0000004840)="d80cadd25d408c17e22ce059b70b715191ffc8ec7370b09bbc9a7b1c02c603e7c3a2a9a1451e925bba46d4eb3f5866ac8db74d2c4b6a55febee9fd4da85a6a9b9aab5d54104b0b3c537bf66c9ba6a6ae53ceaa5b859062c9736a6ff1033d25a6351e97d65aedf68626ce161ab3dfefcc9afe3e9558c0bc7cc85ebad441a7d389178c4f6b1bcc0c3375df7cb3a95a444ee293cd52a4013b90af3510705a662413", 0xa0}, {&(0x7f0000004900)="b2108b880f069c30feda8af8b7602f40946fb7184f18ce481669dbf927165ce352aa336e01eeb7a78e43f37e4428d37dd7403db3006bdfa70c1b53831ee0caa70f5fc85aa8b0a74e7648d245920f74c339661654c217c9db96ce2f6aac015ac8411148d3cfef901e3b17632db0a899bca199f5ee305182496b9674820d0d9e1f1391884d77577e384a210d258f50302a607df8c455f3263337052225bd55f6db4dad2559f9b64b0ab06c5629a50dd63de726118f5098ae0d04c487250466", 0xbe}, {&(0x7f00000049c0)="69c42121a85d61a34e3c5e9565c2b4ab0469f39e13f03ecf2ceba9c9161a12894fc1279bf97292faebb0c6fdef5350d747964e24a589a37651cd9f911fa085d8acfcedba464025f6cdbe5664273daef5cc7efe9496e1a5828be939ba438c54537139a35a121fa24f38d0b7b5bb210a6ea7fc33638d52508502e198842349a3e83f19f3da61d43911fdddfd1c9be074107c723396072061afc9b2ce123015c6ebc530da", 0xa3}, {&(0x7f0000004a80)="eed02a6f41d110b95a5177d6d3e3ca2c8fd98d7864dd824453e1953674b0581bf0ab1e3d79c312b8e83c97fba0f64d04222e1dfb3e94b21fa6927d6e872b874da18738e0ac5afcc1b3b2b6", 0x4b}, {&(0x7f0000004b00)="dfc0dada475f181cd69bca7e19830f45679da733c48f67bbcff9779566998fdc35d2bd65f8ddbf5103617d28655d4c4a8785f9cd3613bb6b430f75a4d15fb59b2b7d99b75b8f47930a309989ffad2b58e25a60f80599e3ed73453f736f2f33318c4f84b9aa94e7d1fb7c0b5c5b46cb276cf51bbcafbc9c3ec929", 0x7a}], 0x5, &(0x7f0000004c00)=[@init={0x18, 0x84, 0x0, {0x1, 0x3ff, 0x6}}], 0x30, 0x40000}, {&(0x7f0000004c40)=@in6={0xa, 0x4e22, 0x800, @loopback={0x0, 0x1}, 0x10000}, 0x1c, &(0x7f0000004d80)=[{&(0x7f0000004c80)="2230c29f262007fa429da451608954aa86735f555b5b7d49292c1a37e7944a3af926163ea4220941e5b9e43668d16ce322ab18d0b8d57427b1c3fa97b83990fde1f283", 0x43}, {&(0x7f0000004d00)="f6c3fb9efdab71a466cd8327c2946acce485dbed9f167c1e06101707fd1b7bf3c7514daeaf6bf883777b498743633abb1d053397ef297c2f25db3edc0616b57a2a182aac2a3b9d42fecd7692", 0x4c}], 0x2, &(0x7f0000005180)=[@init={0x18, 0x84, 0x0, {0x888, 0x1, 0x20, 0x10000}}, @sndrcv={0x30, 0x84, 0x1, {0x8000, 0x0, 0x207, 0x8, 0xffffffffffffffff, 0x4, 0x212e, 0x8480, r14}}, @sndinfo={0x20, 0x84, 0x2, {0x52a, 0x200, 0x2, 0x8000, r15}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0x20f, 0xfff, 0x0, r16}}, @init={0x18, 0x84, 0x0, {0x1ff, 0x7ff, 0x7, 0xffffffff}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x2, 0x8002, 0x400, 0x3, 0x7fff, 0x1, 0x100000000, r17}}, @sndinfo={0x20, 0x84, 0x2, {0x89d, 0x0, 0x4, 0x7ff, r18}}], 0x150, 0x14}], 0x7, 0x4) [ 1040.938466] binder: 31879:31880 got transaction with invalid offsets ptr 2033/05/18 03:46:23 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000071100000000000000000000000000000672f01e52940e8bf"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:23 executing program 5: r0 = socket(0x11, 0x80002, 0x7) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r1, r1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x90) sendmmsg$unix(r0, &(0x7f0000f72eb0)=[{&(0x7f0000f72000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00003ff000), 0x0, &(0x7f0000f72000)=[@cred={0x20, 0x1, 0x2}], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x100000001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0x7}, &(0x7f0000000180)=0x8) 2033/05/18 03:46:23 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0xfffffffffffffe67, &(0x7f00000000c0)}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40002, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x8, 0x20, [0x6b65ceab, 0x7, 0x8, 0x9, 0x2, 0x7f, 0xa36, 0x7d0]}) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f0000000240)) [ 1040.981460] binder: 31879:31880 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:23 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000bc7e7df0007118e3000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000000)="5b9a83ef95748c4b2a9ad4528c30016bb8e1b2ed62e4b8fb22d8a5c80681b98428eacc5a1c6477142f84f1610c58e82811"}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1041.037612] binder: BINDER_SET_CONTEXT_MGR already set [ 1041.071165] binder: 31879:31896 ioctl 40046207 0 returned -16 2033/05/18 03:46:23 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x1000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:23 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x80350000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:23 executing program 2: timer_create(0x400000000000003, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f00009e4000)) timer_settime(0x0, 0x1, &(0x7f0000d89fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 2033/05/18 03:46:23 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xea) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:23 executing program 5: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) listen$netrom(r0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1, 0x4, 0x4c, 0x32b9, "cad330560ec2240ad5aa5d4bd2afbe0bca4d57bd5996d11a21c4b234b2186b86966381de7f40857194bdd269", 0x206}, 0x0, 0x0, 0x3, r2, 0x3f, 0x6, "41458d5dc82d32925fe69ef6f6fb469d94bbc5ff3fa0f00cefeb144adef16b1d8beccdc3c567c33eb9d3d61abb59ecb252f02bf2982f725884746064cc5535ec", &(0x7f0000000040)="9c656d316d643573756d29776c616e31", 0x10, [], [0xbec, 0x9, 0xfffffffffffff205, 0x20cd]}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000280), 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0xa14, 0x6, 0x6, 0xfb, "d7ac5cc804ea4c6d042a713515b13200c5b32c24c45d41f9c2fc7d21c7a3a4e2bfcd4c402540a5974e65587f", 0x6}) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000001c0)) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) 2033/05/18 03:46:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000070000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:23 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x10000) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bpq0\x00'}}, 0x1e) 2033/05/18 03:46:23 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) migrate_pages(r2, 0x63, &(0x7f0000000180)=0x12, &(0x7f00000001c0)=0x1ff) [ 1041.183130] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:23 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x3e8, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:23 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffca88], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:23 executing program 5: mkdir(&(0x7f0000109282)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0/bus\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x300431, &(0x7f0000000180)="4edb6cd825a7e05506d18cd1066aedf049d74103dfd9974cb2f08ddfb7325977af8f1c8b49536fe61dd2a4743a8da2635824502a60e8973e6099a907f7bc53e55212e54f2f0349f7dc05d9ac62cc5532ed49c518cb5285bb5dfc11738302756d2ddfef95e8382aa2e76e07ca3b1e06") r0 = creat(&(0x7f00000ec000)='./file0/bus\x00', 0xbc9cc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000040)={0x4, 0x8, 0x4}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 2033/05/18 03:46:23 executing program 2: r0 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='\x00', 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = memfd_create(&(0x7f00000001c0)='wlan0$cgroup\x00', 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x8b, 0x0, 0x10001, 0x8}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000240)={r3, 0x2}) sendmsg$nl_netfilter(r1, &(0x7f0000498000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x2, 0x2, 0x7ffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x6, [@generic="b4"]}]}, 0x1c}, 0x1}, 0x0) [ 1041.274970] binder: 31931:31932 got transaction with invalid offsets ptr [ 1041.297867] binder: 31931:31932 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:23 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000500711000db100000000000000000000000000095000000000000001c1d86ee5aa8cbace4a5e1c2fce3fc597e9572809640ba266545ea38a24906e975329eff6e9ff1d75cb3980543b9f4e45716db821c41829c267b94289e41276a83e160eb77ed3e36eb5284f4373172f4f8642351f27a6b0d46311070e6f2220c8dc0b943aa7fea981d379734b984de7b3f26863760053f610139d06e74649a0874c26a78e7a97817e354f425cbf86fcad1559cacc9098a58cafa294a3dbb6cb3f8dc528279712bc66faffbea12cdd1691b627a4e64bf49a9477c58b7c64d01"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0xa0040) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000180)=""/95) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:23 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000000095f8aa43eb000000b28f90763ce08f1d1105b876c91004ca159f451cc7c445248341a9bd3e6488ff450efe45e8d3f1193f5d6f3a596801adcf77e09188100b39"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:23 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101200, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x20, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0xffffffffffffff10) getsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000180)=""/158, &(0x7f0000000240)=0x9e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000800007110000000000000000000000038f768288a1909b8525509"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rfkill\x00', 0x4201, 0x0) [ 1041.374276] binder: BINDER_SET_CONTEXT_MGR already set [ 1041.429620] binder: 31931:31947 ioctl 40046207 0 returned -16 2033/05/18 03:46:23 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:23 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xa00000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:23 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x4, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}}}}}}}, 0x0) 2033/05/18 03:46:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xfffffffffffffffe, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCNOTTY(r3, 0x5422) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:23 executing program 5: mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000b79ff8)='./file0\x00', &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000f9cffb)='proc\x00', 0x0, &(0x7f0000000040)) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)) 2033/05/18 03:46:23 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0xfffffffffffffd86) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000480000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:23 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x400000000000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x40, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000180)={@broadcast=0xffffffff, @broadcast=0xffffffff, r2}, 0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0xfffffffffffffffc}}, 0x9}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e24, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x5}}}, &(0x7f0000000380)=0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1041.535326] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:23 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8906], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1041.614752] binder: 31973:31978 got transaction with invalid offsets ptr [ 1041.629173] binder: 31973:31978 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:23 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0xc4000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:23 executing program 2: sched_setaffinity(0x0, 0x4, &(0x7f0000000080)=0x6) r0 = socket$unix(0x1, 0x5, 0x0) fstat(r0, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f0000000580)='\v'}) mmap$binder(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) sync_file_range(r0, 0x10001, 0xfffffffffffffff9, 0x7) r2 = socket$inet(0x2, 0x807, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, 'c0*.'}, &(0x7f00000000c0)=0x28) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) r3 = msgget(0x0, 0x402) msgrcv(r3, &(0x7f0000000100)={0x0, ""/87}, 0x5f, 0x3, 0x2000) 2033/05/18 03:46:23 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20}, 0x18) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x5) sendto$inet6(r1, &(0x7f000035b000), 0x0, 0x0, &(0x7f00005d6000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1c) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001200)='0', 0x1}]) [ 1041.674250] binder: BINDER_SET_CONTEXT_MGR already set [ 1041.692108] binder: 31973:31989 ioctl 40046207 0 returned -16 2033/05/18 03:46:23 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000071100000800000000000894504200000000000009500000000ed00ae00010062b5f16c4ff6ccf634c4529cc8bf0e95a2ed9d5457f371c624ae3926c829c22f7644f9387d2f16d2c0945d895c21e00019e5"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x3, 0x7, 0x3}}) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x101, 0x14440) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x3130, 0x16, 0x900, 0x70bd28, 0x25dfdbfd, {0x7}, [@nested={0x311c, 0xc, [@generic="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", @generic="0fee390f8a7a7f090f835963a493548ce8e102aa5c3c80c0a3cba1d1324846c9b9dd25941f68aae6c0eea2620033bcab64dac7db885ea4c33747e5c263853d4147504ae786d65b62103b0dc40f06c8fbc0bc25675f7f94c19252c692363e127e38ccc016e1d28b1b9a74983ff3f685e015edaa31b2466162983d38562bc6f1bbf91332387aab3415bf47e792be8ca85b9f0a0ab25470fdaf9e09490b20f794ebacba1c8efb647cb45d0b62159e91d2a11b690077a40bd81e56be3bfff552085fdddbdec4", @typed={0x8, 0x5d, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @generic="2191bd0f62e0ed9d8dca6a6f15899b64912f474b97f8ef6d42efbfc4489dbfd6046c81dfaa43e5bcc08ab7", @typed={0x8, 0x3d, @u32=0x808000}, @generic="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", @generic="b495ca2dc46f85d60c67f19ceb95b0c0ab26c547ba03c9cfe8c903c31552b9c2a3488054d64d8116135062cddfbe7ebe64c65403e43d1cdfdccfc0a8b08e8f36aa8e65a9563c533b93905123e85c5346c2b4f6212e636fedcdbe5efb99158df81f10bc58aca11956613e524cf32b880e3fb8886483347c0511b0f6354b09bb7b148b4385d1f9236a7661d886e3cae8bb55e2c956f1aecea3dfeaae9582263280a0f2db781c3f9c2ec43b3c7c2dd9c3b0ebc39979f1e625f24085aa374ff65cd4212f2a8974bf9281913379916d92ddc1c3c0ee50f53b816f44baba3c9f455961825a8d44175448593dcfe7e0aea506000b8e3fe0b5dd80a435008d608aee126b8caca2f170497c157305733c2421e52f2a29eb6d2b77c213f0965d463ad4c4e5227e24a30f8abab5910a4ae683c6c5e5fb5271bade7e4907a49361ab4680f818104e44cc45d48c85c25b6a42d09a926cfcf8edfb2c8deb86343900d307abbd1d5a67a5b509db844a40beba5e75b4a8863c9c898628cdfe02dd9c447177829f860d209cbf70a2374a5f23d08e5bbe45ee27336d2d15bac2169d0f0a2c4bcd627782b25b7053ba02432267e46e9831a5ea4d7b23253316e1a2e68c149bb989ddff2a2c35e309d3220bf99e06140bfe7bdaaa47d173136508bae7ad6f6a4269a70233ddf04ab7fc277b7b1a5a05a30f74a8ab334dee5d5686fe1435a373ac6056a934408c98fbcf91036640258fa7a6b2a7c7b06078b42eec1e140a779f1b4df84567c8a2092968fec966ec0ebd35ff0091c1ae9f9979995c56fbfda2fe5c6ba340305b5eae9d7b929d856c46195e9284f64ce60687d8a60dcbe11d7532a124274701c625b16ab264f8ed25d5eb68b76b684320ae60b9d3ab6d144482d0b12e764bcfbdf15fd4a9e411523f692430f641034c612381fc8c8214191fcc801deaf5f07c8ddcc36a68f556a6ef32f2889f13242c79d389d4c2a7d00280637e832529c4fb09d4cfc64d6c43e139d907c642981cb7b291b91885d934bbf0d3511ec77a9066eecda36d37cf7e1cbf3352352b24fde5fc33e2f885a006662aafdc2cd68f149a86ab692df9844b3a50b1d04d7010416dceba7e7f21c1d28910777486047ad4d6f13ad43846b07d518e9be431f90ebc0656199844aad742832128ae028f6183eb4ef2b6edc1f29a25e3de50a4626baece6f3b148c1d1fc89e13ccd10771fd10a2efd777d154bc80d154599a5386545170ec3451292dc6548f4a6c10bf2d9c8ee668c3bdeb73883c785e2a05967614729d4077d0de1db188a5b4eab0a5280f5252912d68558811446f84629d1bb057f1e86988095156ef2a90a6c2399d46bc6d8bd22edd65580de78fbcdfd8332bac66608490fc9dc54f4adf26aa518a65c8a53d5471015c4fd038588c7e2f0f63b5a1c3d31be25d304e6d8d26eb7f1f97a2a7af406d879cfbc9c26d4b98470ed1c1dd8fbdacdf800f9c6bd84feb6a5a2a6f3b6da2b1c351a12cbb708f25837302de241ba8654e394000972ac0f9de4ed9fc4199f7a0d0956b26525dde27ccbe76370db6393d4f0d74c007cfc9578bb0fa0c9fef5b0837e41d218508c4a27477ba18c5c103688ba5bd72d08a48f375e74cccbc1a13f55db927f62c419d07a210c0be5e3c86013d5748c9843a1a5d877139b644cdfcef154b70bb37f5ebcd4942291f5b385819060f6354f361e5b703c242f758b80e1bf3bbb64edc5066922bf108aeff8d3a32e7b010c6222c118c9007aa777b2452e464a681d7a289484ada47cc69150661d56e8ede63ea57250c9c190554322ea097854b5387f45dc019741e32bccf2083ca414a44cccb43d0ca1c6d3795bce6648d732ded527da4b156b2adf24727edfe5cca492ad6e8ab44e0444aed924413e84bd38609be1d575e132e0973d6e13ecdd9995635718c7c0cbb53a24e8ad29462a26a4992bffb58809aa4fbc13b796da9d98758a6efaa9680382878f28eefb6fcd8a0d2553ac45e262d256ef509d21233ac3a08906a7a4e6a4c0a317244aaac2e3deefe4ae2ef67186b02eadce885b409117b336a385a4ac1bdd5bb403ac14b10cfea5acbe42547bb7f0a8a16946844ec5f4420810bdd27bd7652588d96956751f81e5b384c3f81571723071b1d15bc9c22c38258097c5674f8f003561fbba734ca2bf7a022d36fb9c2274c71f63d9cb6a9e9db3a7d179b1ffab6bada9f47a14e602f9a582c5b8822a9fd481a9ef64176612b397d3731a44f03e1177597847c5f00b81919622e742a73f0a8008f55182ecaa803d4774c4342dd32c6ac1a8522ac5576951ff8dfd81554c924642b1a8f4042237ae5fd984a44ebf4cf6bfca91c1f6d2a2985615f39bc03ab2a5617aa971b4b12e0d2ec658558047bfe6a37a2c9b30441a52ee3c75875360a80687ffae3ea7d4a62bf51b1b9bfa41cfcf67cd7e0bc41f59854f0411eec35348fd405fbc4b39c74a7cd9c6e6d3b31665756d3ae7c3a4a196c16ae4c7b2f5f871216ecd31c688e4f6625bd875adede895cbd60eb11abb16d343d8ffe6823be3b1a22b25714c03ad98f4b9384b826bd846944c9ae4bb7a9659f2a17ce7d2d4bebbf69da2d82d436113f617a586d15b3b0a8bf96c24826db08ac101fc17aee2a4aad818b9ee551cd8f967d04ba5381c68df5fc32bdf5b0b416fb8ac9d40d5cb7fc65837b3a09eceda0ba61eb3bafa231c201ba20117f1db36f10cc63a149a0f699e71692eaa878e9b655ff6e0da41a004e99bc9b2a92e3eed11b9ff043c398870eefd44c7570a34c5b7717bb60d413c9d9580b3a135d8655c6dc22baa93253639fde3870ea81b943999b88ff86c15615ad271ec3bbf89d536ec9e291fb959b60a05b6028e5e2287452a9d691fdb6c83990f956c1980159578d994814249fc5e0c865454314f52227e5d86d98d9c025f8797b54e4fd68e4aa95a57371db403731479bfdac0e9babfccae6aa073e8bf47fa37956ff417e7af2914a8ca0fbaf8538baccc5d5525e6be95d60b68d753673df2da1cc3c32d2af7dc52fb950737416a813feeb39cf749f99905079a265f4071372d605cb1d89691b88f8e7bd735d599f7adc9fb16288e048ecec48fe07f04c820e0f7e9b0e49a83003d0b82ee338170aa84e2812b4595d8cf2a693ec3386a1cb4eba095a6e21c619e27b6ff6937529ddee3d8425ca549fa9cfacd9ba05ed1e48320adbe28c0aeee46d1ffde73942c50240043ec85bd743af3341b64716539a175f0a9303f298e76a1a818d9ee973edd2b9f97951a4837ea3ba4cebfacde344e2ddbfe21d23d13618bf3ac8aeb6c6f65a884d8150a9b00458526242e2df16729d889d6eac2948e5c468e094f6836dea7b92ba65291baa0dca59b60713fada8e0e95782cb0e6fe10d91d9bf0b4f699f4aef950532451f20d890c10c33e099a319b1257c79a85871e0438ba67481f923ff3d2dcb0334df1bf7b5be9733f2a88110948397362f98963e8f5fd0c0978f61a972f8f9a1c80601737c680d4728264fea4ffa481e608640e73887d7067f9903e9e31d13644635a0f66d44366aba635a7ebdea85e96a4e8080eba9c0f7a04a6e4b82f489dc58a05f4a53a6d8e0a8b5342139cfda0695b3fc615cbd331fa0bafdaa8063356097395e542e1313ced73fd3cc62bc5348cae2bd84580dc07952d2147e3c01630cc9edd15cfb347394f6f0ddca481a6103c484603732234f43d777a7712f9e8c6548f51bd386e3f7192ad4ba77b75e97bfe2a75019b64a2cb2cb3c0bb5774dabb41a50925f5b18a33ca751c916d2a4d34508d359da32f7f819e7e40cb79361004d5363083e8ebe3c2a6d41412e26c29dcf2b1c8e451c5e78a6eeeb0c1cbd50d0fc5c16572c149ab8b813febd54838fcccccef30dedc677fd148e7980d12a2ebdd505aa7fd9ec3021fd55b01a3b075369c53cdcd76985ebb00da09ffd521c87e59c01e8531f5fb029a176b5128f2c7aee3ac0f3235f775f29b7142a35deb61c40f54c2b8cbb9bc5ebf6480ad7b2863108ec42b39aec7bd5127cf639cda2a03b0ebffe14dd4a8f259970c834c6979ed9bf8bcd78dc282efb02f729134101ca9c06f6c148bf637b4d97b0b911291d61c8decb8ec76bcd8b9fbdd5b059a1e6174ee3a2081a918bbe8509d9910f7a2981656f7de12db21e52f7a39ea906b7719baab9dde01918ef005716161b5f1de5416a5bc2d1e1cf5ebc97fd94514bf90a59cd252f89cbf933d08ccfa85487dbf564302bef5c4d23e905d3a60811a349acf988c211dbffdbaeaed2abddae218341f696a8662d779ac36592b4b3f689af5768d2569e9458d48d182d1fa2b621a091d5b3be15349826e26f2070b130e85e9578261ca640c276afc7849651ed641475d8fe3ab18b9d12b54362cc5b9f5be4bacfa9954f21f3aa0820b24fcce050a87b8d361468fe7e95c8e4402d49cb2670499c28b6183c2cb32fcef7dbbbbc5d448ac1a492acbabdba0c10ae5d387bb6bba970a73965f4dd2b89d09f5e9505841604926a97be94b5aef9898efe5caba57da63af462396bc27abd52d69c9a8f76c10f8c0cbe8e5250404b024faaed9db2c03d83dddf94b7fdc55632a3b128791bb3a058e17d17d6d9d5af7dfd3f9ae4603d43330fe4364ffeac8ef1b9104d69daca1c41ccddcae525da0e9696fc83c1bae916a306d3fbc935a6297191cd21f547b7d629f69181bb229df0eb80d40e9dc23e5df2b6a01a3b8bc44b7d27d894bffe4ce21544e2eba95ea04d17c49914cb6e353ea486d3305c0b770ef56560221bb986fc0e396ec22bf95d3ff3d0cfe05cddb2c50372d22641518de5791df193feedb5acc47a63770b6f7c2a8ef8beefd5e23bfaa712a9eed8377945c1fca4a543436941da89838c199fc9a76ef31c54cec326c64f911a85c371f02e1f230fc681724d1c8fea803fa247ea99b855ddb5add0789b9b93038fc711b3cb989a0053feb6d0220662996e6c23bb40e5f08971721af1caff3c9375227855942477c6c09a5e99cea8a28dd564021cff869547b944114c55c6fbaacdd40e04ea65acbd07d2dfa02a80fec9b5ed988462b17f362e6dfe4201934f261b4db4566e7dbb39289669b7a28e1e960c675f74ca1f132ffa47f99b366ae756ceeb74fd5f1fb3a247465ea03bd54cfd00b7f6cedca1ba1966abcb00ffde64d8031b0086755d13838611fd6f8878c18816be7833fd05f9df227c5d732dc2e120b449820f43af155a9c53fa6804e8d1c4258beafcbcb89e5843f137fe28eb6fc8a58fc3a7ea59bebffca5774eb40c640a18f4594ae46e3c7ccafd01cbd94535f2bc5c5577b99184118a12f25b4a303e3fbe3d712dc479e5d28c1aba6050c93fc88e3b87bd9be044858ef5982f943586eb383ad161ef2322d472661804c4b31adbf997debf6fd6133fd7301520d862857a0d1e2459173a009a5aca931d33f8509381b3a2eeb7067297af3a21ae9af31056fce52363c46bbd461d98d3bcfaa27254d60b03ee66732f5089d50215dd0348a24bf4c58393f61c4763f22f655332b948c6466e10407e6eec1eae63912ae66fe69325a8f161f621122148404b523f28ebb3a272b3b114ee8e8f10b94f9872b5dcca02f9cf2708483a160a89391c9bcc122020f2e9f22218b063fd8823fc525a31f4aedcf39bcb299f1cda584c5226de8a4b6a823ec3f25fd07ba8a2ae9043a8ad0e1bd88ff6a24073e77c4eecf25cda1d07e5b6b6efc12e9b15cf740c3ada5ccbd22df53f1c8efca954522c5e6f25400cbeaa2aff811222e955f4a33484bf435a7e317", @typed={0x8, 0x15, @fd=r0}, @typed={0x10, 0x5b, @str='usernodev\x00'}]}]}, 0x3130}, 0x1, 0x0, 0x0, 0xc004}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1041.749953] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:23 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:23 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x20000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000180)="b82283392dc50fddfb635a5849d2f5916ae2fdc24e67b213ee5920ed15732795e12aa8010100003e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000206f00000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1041.796776] binder: 31997:32000 ioctl 40046207 0 returned -16 [ 1041.829607] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:23 executing program 4: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x2000, 0x30002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18004000000000000000000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) perf_event_open(&(0x7f0000d2af88)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000807000), 0x43) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:24 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x700, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:24 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:24 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0)="b801833e48c50ff1fb635a5949d2f5916ae2fdc24e88e12aa8daccf7793e72be9cc66fc07b385056801128b8d1602aef0669e86bc3a0ff79766a40c5ee6411affaa3d4148bd13773dc8005b2c12d578217d6800893130ac9d33241a5497f8382368894cc0c8f54e5c042ab8f1936fc15119091a723e2dfc0abb097db0ef6493205415b1d0e035e8671081c01981f6848f3cdca86bedd6aa6ab521c64e42d89751845482e03b9281857ba1a1d435056200c275180af14114c1a900a5e"}, 0x347) pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$rds(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fff, 0x40) connect$bt_sco(r2, &(0x7f0000000080)={0x1f, {0x31a3, 0x0, 0x5, 0x15a6, 0x763, 0x35}}, 0x8) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1041.902218] binder: 32018:32020 got transaction with invalid offsets ptr [ 1041.929247] binder: 32018:32020 transaction failed 29201/-14, size 24-8 line 2991 [ 1041.971991] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:24 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x806], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:24 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000001c0)={0x240b, 0x2, 0xfff, 0x4, 0x4, 0x3}) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0xfffffffffffffffe, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000b00)='ip6gretap0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="78be2a000003000000000000000085000200490000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) syz_open_dev$dmmidi(&(0x7f0000000ac0)='/dev/dmmidi#\x00', 0x4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @multicast2}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000280)={@local={0xfe, 0x80, [], 0xaa}, r2}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000100700ffff00000000000000ffffffff88010000000000004006000040060000ffffffff4026f8000006000005000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x770) [ 1042.056166] binder: 32018:32025 ioctl 40046207 0 returned -16 2033/05/18 03:46:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000002000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1042.128882] binder: undelivered TRANSACTION_ERROR: 29201 [ 1042.204234] binder: 32051:32052 got transaction with invalid offsets ptr [ 1042.218644] binder: 32051:32052 transaction failed 29201/-14, size 24-8 line 2991 [ 1042.227922] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.233310] binder: 32051:32053 ioctl 40046207 0 returned -16 [ 1042.251585] binder: undelivered TRANSACTION_ERROR: 29201 [ 1042.566797] binder: 31997:32056 unknown command 1941042241 [ 1042.572493] binder: 31997:32056 ioctl c0306201 20000040 returned -22 2033/05/18 03:46:24 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x3) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000001c0)={0x4520981d, r2}) readv(r1, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x10e7}], 0x1) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/101) readv(r1, &(0x7f0000000540)=[{&(0x7f0000001600)=""/94, 0x5e}], 0x1) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) set_mempolicy(0x8000, &(0x7f0000000080)=0x9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2033/05/18 03:46:24 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xf101, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:24 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x60, 0x80800) getpeername(r0, &(0x7f0000000280)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @multicast1}, &(0x7f0000000180)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000e5146a3f0000000000000095000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:24 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = fcntl$getown(0xffffffffffffffff, 0x9) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x9, 0x10001) kcmp(r0, r1, 0x0, r2, r3) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x100000000000, 0x1000000000000004, 0x202}, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="5800000000e2ff00000000000000000071080000000057e436902daeedfa00009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:24 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000800000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:24 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x105000) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:24 executing program 5: r0 = socket(0x1e, 0x2000000000000005, 0x4) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000040)="e93afa2e196546186d97ee2bac0bdb43c35a844a8dbc5a9fa2c61cc6bad8a6c8538819f96bad7531334821a5108226c16cf2d0d684ca4bdc6e61fa1f342a623c596782313374db6c2efea43ef913267b29d5e6b1b8323a4b369de3680da52d459c6c48a494f590360b89a3e6fc6203d04cc2e1363a932acd8ffa18d32d1ca02cde1b996fd4ab1bdae4143d1ffc2169c84ad143164c5451c85d20b0d7f0b1d7eb1e4db13743482f006f0a8f11") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000007e1425dd6205a7ad6c133090ceffa9e9000000c04008cde1faeeb56609ee9a00008e33f5e071d34addb3bd9abe7640bded85217c6a638e909d667099cb4bfdfca8cb2f1c0c7730f783ff77659ef41923681194b14da8414af258fb621cb2eb3fe570f28345ed458c6d871324456d8d776dd879f3118f20ff05000000d47db252a360aedef8d121b591a3a2f0ed107ac880c1f332c08d1870d42245b5658453ba4f483db11861d7b8570211d23e239234884e154e6c3c49e90b3eec1e22d7c1648507238a000bcad74a8e73f6c5117f48cf0797385eaf8796"]}) [ 1042.706854] binder: 31997:32062 unknown command 1941042241 [ 1042.712635] binder: 31997:32062 ioctl c0306201 20000040 returned -22 2033/05/18 03:46:24 executing program 5: socketpair(0x11, 0x2, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) munlockall() faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x1000) r2 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x10) socketpair(0x4, 0x0, 0x81, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) r5 = accept(r1, &(0x7f00000001c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000240)=0x80) r6 = getpgid(0x0) ptrace$getregset(0x4204, r6, 0x202, &(0x7f0000000340)={&(0x7f0000000280)=""/190, 0xbe}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000380)=0x2, 0x4) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r7, 0x300, 0x70bd2d, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}]}, 0x74}, 0x1}, 0x40040) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000640)=@req3={0xebe, 0x10000000000, 0x9, 0x10001, 0x7fffffff, 0x48000000000000, 0x5}, 0x1c) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000680)=""/102) rmdir(&(0x7f0000000700)='./file0\x00') getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000740)=0x10001, &(0x7f0000000780)=0x4) sysfs$3(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000007c0)={0x8, 0x4ff7, 0x1ff00000000}) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2508}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x134, r7, 0x4, 0x70bd28, 0x25dfdbfd, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xca3b}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x32}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xce}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0x134}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000a00)={0x0, @broadcast=0xffffffff, 0x4e20, 0x1, 'nq\x00', 0x8, 0x5, 0x48}, 0x2c) sync_file_range(r4, 0x101, 0x128a8423, 0x0) r8 = getpid() getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000b40)={0x0, 0xc8, &(0x7f0000000a40)=[@in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1b}, 0x1f}, @in6={0xa, 0x4e23, 0x72, @empty, 0xc}, @in6={0xa, 0x4e23, 0x10000, @empty, 0x1f}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e24, 0x3, @empty, 0x8}, @in6={0xa, 0x4e24, 0xae3, @loopback={0x0, 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x3ff, @remote={0xfe, 0x80, [], 0xbb}, 0x101}, @in={0x2, 0x4e24, @multicast1=0xe0000001}]}, &(0x7f0000000b80)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000bc0)={r9, 0x200000000, 0x0, 0x5, 0x9, 0x6}, &(0x7f0000000c00)=0x14) r10 = shmget$private(0x0, 0x3000, 0x54000808, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r10, 0xd, &(0x7f0000000c40)=""/76) ptrace$getregset(0x4204, r8, 0x203, &(0x7f0000000dc0)={&(0x7f0000000cc0)=""/205, 0xcd}) recvfrom(r0, &(0x7f0000000e00)=""/2, 0x2, 0x40, &(0x7f0000000e40)=@ipx={0x4, 0x5, 0x100000001, "95a64d335c55", 0x1f}, 0x80) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000ec0)={r9, 0x3ff, 0x7f4, 0x100, 0xd9}, &(0x7f0000000f00)=0x14) 2033/05/18 03:46:24 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1042.772783] binder: 32071:32073 got transaction with invalid offsets ptr [ 1042.790292] QAT: Invalid ioctl [ 1042.798467] binder: 32071:32073 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:24 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x6400, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:24 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x20400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:24 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000010000000000000000000000000000095ca12b768621f307b519febd5a8e43aa7e200000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) init_module(&(0x7f00000001c0)='GPL\x00', 0x4, &(0x7f0000000200)='/dev/loop#\x00') setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x3aa, 0x7, 0x8, 0x2}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:24 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) syz_emit_ethernet(0x73, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@x25={0x805, {0x3, 0x3, 0xfd, "935a340a8209ec98f60fc299d1ec84d07c47361bb7c93d1446a64fac640150c09bc15a28fad03b2b45a0cd0ba88c8a54e13c3df21f4bcf88f29ca69b172ac6d27792c819403fea3153759b76e5040666f7559290b98c20a146074ee85df7175b5a84"}}}}, &(0x7f0000000000)={0x1, 0x4, [0xd84, 0xc2c, 0xde2, 0x11b]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1042.841132] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.855950] binder: 32071:32088 ioctl 40046207 0 returned -16 2033/05/18 03:46:25 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) fallocate(r0, 0x2, 0x6, 0x7f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x404000, 0x1) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000180)=""/186, &(0x7f0000000080)=0xba) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:25 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1043.024927] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept(r0, 0x0, &(0x7f0000000580)) recvmmsg(r1, &(0x7f0000000340)=[{{&(0x7f0000004b80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0xffffffffffffff29, &(0x7f0000000300)=[{&(0x7f0000000040)=""/111}, {&(0x7f00000000c0)=""/242}, {&(0x7f0000000240)=""/191}, {&(0x7f00000005c0)=""/4096}], 0xd3, &(0x7f0000005e40)=""/247, 0xfffffffffffffe58, 0xfffffffffffffffd}}], 0x1, 0x0, &(0x7f0000006100)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$sndseq(r2, &(0x7f00000015c0)=[{0xffff, 0x3, 0x81, 0xefd7, @time={0x0, 0x1c9c380}, {0x7f, 0xdf7}, {0x6, 0x7ff}, @raw32={[0x7, 0x5, 0x101]}}, {0x7f, 0xfffffffffffffb25, 0x3f, 0xfffffffffffffffb, @time={r3, r4+30000000}, {0x1, 0x5}, {0x6, 0x5}, @addr={0x3f, 0x3f}}, {0x0, 0x4, 0xbb, 0x7fff, @tick=0xc8, {0x80000000, 0x20}, {0x1, 0x7fff}, @quote={{0x1, 0x6}, 0x93, &(0x7f00000003c0)={0x2, 0x4, 0x5ae, 0xad7c, @tick=0x3, {0x0, 0x3}, {0x3ff, 0x3f}, @connect={{0x4}, {0x591c, 0x1}}}}}, {0x3, 0x4b, 0x8, 0x1, @time={0x0, 0x1c9c380}, {0x1f, 0x3f}, {0xffffffffffffffff, 0x101}, @addr={0x8, 0x37}}, {0x100000000, 0x9, 0x0, 0x80000000, @time={0x0, 0x989680}, {0x5, 0x6ddb}, {0x2, 0x40}, @raw8={"292363fe849d35c93fe273ea"}}, {0x0, 0x40, 0x8, 0x3f, @tick=0x4, {0x2, 0xffffffffffffffe1}, {0xbf, 0x35bc}, @control={0x7, 0xe647, 0xfff}}, {0x4d20e15e, 0x1, 0xffffffff, 0x5, @tick=0x2, {0x81, 0x1}, {0x1f, 0x4}, @ext={0x31, &(0x7f0000000400)="ca0519f527a286329c5a4cbbaea37b891804f7b3846a7904c9e12ca5a118dd04b00762f19051ea53e4aab8aaedae6aabfb"}}], 0x150) 2033/05/18 03:46:25 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x25f, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:25 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000580)={@local, @multicast1, 0x0}, &(0x7f00000005c0)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0xc8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000003734c56328649fe2b17eb048b300000000005110000000000000000000000000000095000000000000004d3e18573e068a23e8eb478529707ef7a7a05bb5eda1ea5c951191b24af9dcfc335413dc94d25ac8a653111ab32ef3b6f74653b5a44b6283432eae7fa507f1e7f0677fa32f7e8f00c7e418b789abbe7589cfd5b7b31291d7e77c9b825652681d9569859e8fbaead24811815a219404"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], r2}, 0x18) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000940)="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", 0x102}, {&(0x7f0000000240)="4f1f81873436613c57bc7867bb498bec4a914d703654209816d4d0efb04882e78b322c84666ee6595ff922cc4e6a180a0760733b94e45ec73fa711627b9d0167a8823e46a8709c169fd4b113a53b86a7d244224c43ab558c30ec1c4b6a3773caa182be3b323469519214ae10f44e8708cb9527baa6e32044486711171f0dd54a1546a37edb1cf6170e35f095ba7e76226309f690a0321f8473c085a5659cacbea984b3e5ca9cf3605d43458eb8675d9cf5a68af13263bb11a0d3708df2287b960d2671b768706fc41e60f16f26ade4e7693bc3f907783e1417", 0xfffffffffffffe81}, {&(0x7f0000000a80)="cdc7b33d24579c86b7c54e96586d7f773b9b84107e0f181092b3a6ea4a7fdee58df00fc5dcefe1a20bfaf5e001f2170d9a2b03c3a8d05ee11b5820bb32b99ff3941f8486a033f1e1f9d537a4e133d72ef9e98183ae2c2c00382df2f93b3b9b3714eb9939a0fda3070f52beaa303fd2702aa2bb8733ba1e1db42bac76020ef46741cc315c28eeda920ba93bc2b0e6b55c9fdfecb1f6fd83141896ba5bef97de5d6567d1fe666430a903855b19fe8277a209d00632d552d35a470e6366e508df2f9d022c55a53405bcfac24a834bf50e92e00b3af4fc78a35bca4018d0809c651b927da1caaad0e282e85399407d7665d6197e0fb44c21460dba3d3750a1fb8b", 0xff}, {&(0x7f0000000540)="2b2edaaa8da3bbeaf03b6c4f84abf580e87bfe195fd650", 0x17}], 0x4, 0xd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000007c0)={0x0, 0x79200000000}, &(0x7f0000000800)=0x8) r7 = creat(&(0x7f0000000840)='./file0\x00', 0x0) getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) ioctl$TUNSETGROUP(r7, 0x400454ce, r8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000006c0)=@assoc_value={r6, 0x6}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000740)={0x0, 0x1ff}, &(0x7f0000000780)=0x8) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) r9 = syz_open_dev$vcsn(&(0x7f0000000c80)='/dev/vcs#\x00', 0x6, 0x6082) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r9, &(0x7f0000000600)="967e37de8e"}, 0x10) setsockopt$bt_hci_HCI_DATA_DIR(r9, 0x0, 0x1, &(0x7f0000000cc0)=0xc01, 0x4) r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x8041, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000500)={&(0x7f0000000380)=[0x0, 0x0], 0x2}) 2033/05/18 03:46:25 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x3) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000001c0)={0x4520981d, r2}) readv(r1, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x10e7}], 0x1) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/101) readv(r1, &(0x7f0000000540)=[{&(0x7f0000001600)=""/94, 0x5e}], 0x1) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) set_mempolicy(0x8000, &(0x7f0000000080)=0x9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2033/05/18 03:46:25 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000e9ffffffff9400000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = memfd_create(&(0x7f0000000000)='GPL\x00', 0x3) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080)) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:25 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x28], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:25 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="1163484000000000000000007fffffff000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:25 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1043.624565] QAT: Invalid ioctl [ 1043.682616] QAT: Invalid ioctl [ 1043.691579] binder: 32135:32140 got transaction with invalid offsets ptr [ 1043.713079] binder: 32135:32140 transaction failed 29201/-14, size 24-8 line 2991 [ 1043.729773] QAT: Invalid ioctl 2033/05/18 03:46:25 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8906000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1043.738949] QAT: Invalid ioctl [ 1043.742596] binder: BINDER_SET_CONTEXT_MGR already set [ 1043.769929] binder: 32135:32148 ioctl 40046207 0 returned -16 [ 1043.825926] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:26 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x3) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000001c0)={0x4520981d, r2}) readv(r1, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x10e7}], 0x1) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/101) readv(r1, &(0x7f0000000540)=[{&(0x7f0000001600)=""/94, 0x5e}], 0x1) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) set_mempolicy(0x8000, &(0x7f0000000080)=0x9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2033/05/18 03:46:26 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0xffffffffffffffe7) r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x81, 0x80081) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000200)={0x7, r0, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x4, 0x0, 0x3b6, 0x1000000000000004, 0x202, r2, 0x800}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000800000000000000000000100c071000000000100000000000000bc13000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x2d, &(0x7f00000000c0)}, 0x97) r3 = memfd_create(&(0x7f0000000000)=',\x00', 0x2) ioctl$KDSETLED(r3, 0x4b32, 0x4) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x100000000, 0x9}, 'port0\x00', 0x84, 0x0, 0x8, 0x10001, 0x101, 0x2, 0x0, 0x0, 0x2, 0x2}) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:26 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4305], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:26 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mount(&(0x7f0000000280)='./control\x00', &(0x7f00000002c0)='./control\x00', &(0x7f0000000300)='autofs\x00', 0x9000, &(0x7f0000001440)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000680)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000010000/0x4000)=nil, 0x4000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r2 = getpgid(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f00000005c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'vlan0\x00', r3}) rmdir(&(0x7f000015dff6)='./control\x00') close(r0) 2033/05/18 03:46:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000705000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:26 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x7, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:26 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x208002) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000200)={0xb7}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x81, 0x10) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000180)) [ 1044.591302] binder: 32165:32167 got transaction with invalid offsets ptr [ 1044.616778] binder: 32165:32167 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:26 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x5f02000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:26 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8100], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1044.642776] QAT: Invalid ioctl [ 1044.648253] binder: BINDER_SET_CONTEXT_MGR already set [ 1044.659717] binder: 32165:32181 ioctl 40046207 0 returned -16 [ 1044.721289] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:27 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x7ef, 0x6adc, 0x3}, &(0x7f0000000180)=0x14) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="4c000000fa20b2c92c10a70e90e4b23690f977d7f994400ae9362759a11b5348db89515fd94699faed5c0172c85b3d59213e4aae3c937f8a4112ea46c549b034567b65204367af34ffff000048ccf0f7"], &(0x7f0000000240)=0x54) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000280)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0xfffffffffffffd6f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000380)={0x5, 0x1, 0x3, 0xafc6, 0x80000000, 0x5, 0x0, 0x6, 0x0, 0x8}) 2033/05/18 03:46:27 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:27 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000000080)={r0, r1+30000000}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18f3ffffffffffffff00000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:27 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000680000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:27 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x500000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:27 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x3) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000001c0)={0x4520981d, r2}) readv(r1, &(0x7f00000015c0)=[{&(0x7f00000005c0)=""/4096, 0x10e7}], 0x1) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000100)=""/101) readv(r1, &(0x7f0000000540)=[{&(0x7f0000001600)=""/94, 0x5e}], 0x1) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000040)) set_mempolicy(0x8000, &(0x7f0000000080)=0x9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f000083bff0)='/dev/sequencer2\x00', 0x4002, 0x0) 2033/05/18 03:46:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x79}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="81010010a65905be40528f42c020aefede63051682fc9af50001"]) [ 1045.538179] binder: 32200:32204 got transaction with invalid offsets ptr [ 1045.553897] QAT: Invalid ioctl [ 1045.571673] binder: 32200:32204 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:27 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:27 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x2b02000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:27 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = getpid() move_pages(r0, 0x7, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000080)=[0x9], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000000000d55888160a990e3e359dfabec3bfcbbdcec81edf197e778e34634c438f36fa9fc337ea8f084aa220131386600170d20eadbeca823dd2a0d0852e61fef8789b0127d470fa9dd3ccf1dc7cf73957a31eb477c81da1cfe11985539b9ac2580143811ad48e3a10faf720f9aaa3e21f41702b565e3b"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f0000000240)) 2033/05/18 03:46:27 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x8000000000000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:27 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040)="b82283393b0f73dba59d37cfc0ce6e3ee5014a2dc50ff1fb635a5849d2f5916ada7e830f95e12aa8e222063398045c1a732210e99e303dbbc35b5c7eb3a966a9"}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x4, 0x1000000000000004, 0x1000000202, 0xffffffffffffffff, 0xfffffffffffffffc}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x4, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000004b00000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x494, &(0x7f00001a7f05)=""/251}, 0x48) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=@srh={0x2f, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, [@dev={0xfe, 0x80, [], 0x17}]}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1045.596676] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.614131] binder: 32200:32220 ioctl 40046207 0 returned -16 2033/05/18 03:46:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000080)=0xe8) getgroups(0x1, &(0x7f0000000200)=[0x0]) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x1002, r1, r2, 0x9, 0x7, 0x2140004) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0xfffffffffffffffd, 0x1}) 2033/05/18 03:46:27 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x89060000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000030000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:27 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000000000000900000000009500000000000000e39170fcbc58ab36f532045722c7cd7b38979318e600f7e2c81f1e3cc1701dba11c9cff63344db77c5840291fddc79b5c0670ea3259eea468de2cd28990aaa7e"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x40000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffeffff}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:27 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x2b020000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:27 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x4000, r0, r1, 0x13a7, 0x1000010) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) [ 1045.766704] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:27 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000000095000000000000004506804b4f607acb5715ffeb5453fb071f17738966777b"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:27 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3c], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1045.821340] binder: 32245:32248 got transaction with invalid offsets ptr [ 1045.859646] binder: 32245:32248 transaction failed 29201/-14, size 24-8 line 2991 [ 1045.893877] binder: BINDER_SET_CONTEXT_MGR already set [ 1045.916212] binder: 32245:32259 ioctl 40046207 0 returned -16 [ 1045.992056] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:28 executing program 2: unshare(0x8000400) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='-$\x00') mq_getsetattr(r1, &(0x7f0000738fc0), &(0x7f0000356000)) 2033/05/18 03:46:28 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x5, 0x480400) futimesat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0x7530}, {0x0, 0x2710}}) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x6}, {r1, 0x240}, {r1}, {r1, 0xa000}, {r1, 0x4000}, {r1, 0x1420}, {r1}], 0x7, &(0x7f0000000080)={0x77359400}, &(0x7f0000000180)={0x5}, 0x8) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) lseek(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:28 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000970b0cbb00000000003292ad1b1d03b6c7ecdb9a72e002000000000000007fff0000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:28 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x700000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="741dddcbec0fcbbfbb2506061bdb0b53d34ff02bc4e20c4c85b22afd1d", 0x1d}, {&(0x7f0000000180)="10759b459f34616990ed60733670858dc3b5cb2f6b765d874bfe55dddf279dd1e2618ec8b63cd4449f9c15c237c13e424a751e82e54240b6aadf737f34b4acf3f969e7c3e34b447c367859f7de78073c6058bf47", 0x54}, {&(0x7f0000000080)="42b8684935a7de84af0fc921d7830658b62c46f336fc78eee60765a94b9fa2f414309676956dd7b4d6647ec0bf976e4c01a222a9a0c4568817", 0x39}, {&(0x7f0000000400)="87901644c765d52bf7e99a7cc713208ef54439310b663a6907caf82a66768b402866fbe547b4eaa92751e42fa037924b8c5f9077503040b7d3f9299ba762073a90dc10ccb56556167a1eced5977fb3f9a42042d493d1ca6c1d84619d496caf633f15326dbed732228dd7008460f213efb6bcc46646ea22e51b9f298fcbf42c8c2de3dc7d60c068304d84b7a6134d8fdf8bcab53ccaa518368fe9b3400e40ebb95253b7f3ff40b771681dfcf8dcfa0b5aaf74c1573eca57c143eeb2b4d2ae6ab7b935a591ac692495b5efe72c41c54bcb97535f0bae23d2c1b3ec56bbf20a10113af3e631c422396a18930681a750e5ffdd454cc677650fce6942864a54ab0fbc21de730f376aa37103c22617f122dabcb5cb12311956a0e526ee0993276af63fcf666f8f9046c6788fadee005535665d387f27d35e76ba81645fba386bc295c6e309ebf069dfed912f2778aa51023099a22911c5162f2fcb6f05b2bb60cd94daf4a9f852863f744cb7a257fab07d0ff9607a13f37ec703c8dfc7c959d766e99b35dcf0a61fea9982796ceebdf21198f9d27f0aef20f114d1813a5c193ae7ca1b5f253bd48301fa4d5f18c737a4b65d60d6301ea303cb0073976e2418d4e74edeaa9fa0853a4a16dc736eeccf6526bfdf53fed4d9f315f911f6282658b1ce890096c6bed569366ed01790cb7d58c4ec71a003aa230508c2d580dacbc8bfea9b5a1e602a8f072e10ee41e8773bf647a579a4e5c1bf53b3a01ccbfba19f1f2e82327bfd424b73d2bfe91bcdcd8d4337341717536cc846bd8dbaae8b26dde75d9b0fa8d8221ce78e0d3017d2376f0fd04055857b7738f20b019732f37e01c2b4b6b82ab96ed92bec5b26b409817acf805b8a1e2dda03b8c1a87c17afcdbd713cbe37605c5f5ba869702a19c4f769906ab175fac55440d660a16c7ba2089620f94b28d5e34bc05576078fef500ff498eee06f3ba2f9cfa54e6e18d1c1b511a4531a9c76089edd7a35ee8d4b97f3840ae7d7049a6e05e6705c2f327c9dfeb7c491b3ecc32f7c35995b454696adcf3aa640ad14ca4c02887b816cfdb9cad1dabd447d3fc457f6a964bd7a2bf37cd3a7c3cb454acfe0b869595eef53ddf39d49e961ff5eae49776d287749550cb227e2646afa1986db08f06f469372d57189c09853486e0bfd8431eb7f27a54db50dcd2dcc5d7855f59e9981f75c76739e1c8b1b1e8c6134f98aafa2957c045a590a70239c706b843cea872fcbd18114be9da9e5c5c02bf18ebd6a4a7e39372906b022f3d799f7b7872fbed262ead58ad4fc622b2531957ee6b5bd1fc4f2d194f44d59985192ee52e7a962ef84417694a20c70c12dc8d41934f47f0e199b26ba29bb668fb34d7b1789fc1da47efece5514f0cbebf3830ce18a1525d109dfa99f6b5bf0c85d8b866bce1e9c26ae2cc780f3c60921715c0d390621868a75cfcb16810275901ba45370e3fbfa756430119a1795a78f11a9efea6f65f2b3703b63c2c9c30270a941525d83236a8322893f7d320bd9b1ed6b91e044b17126dd16aa03a1eee18485c4e972b5218a39ad55a880197dccb7c8277bd87f84a5c791e69e5fead913d3c1983046f5b9de6243b247fffcf82a9ea6cfec69c6885e59eeb5ed4fe24be0e019ddd87e5e570427d739e8c34fe397808ee742cfd9a4174cdf9302a7c1440b336c7bb711f61fa7c8205c24c412f60f0e4f0abca7c1c0d44e4aaaf67f161cdbf11db8e702f437ac41b695b2d687e62ca34debaed776e5a48715a917924d7d81369d697dd135cbec8572755b4ca7017cea14856169b78e74132e3d1c1890e75ff801e197af32d5c6d5f88da18dcc93a7c9aab81a5c0fc1762f64f27ba98e9c9f8f6615445eef56d54fe3a3b701c081879424950481d9b9bdc6c9691fec4c6cb1195f0236dee3cd2cf393dbd075d57bac2502c58940695f8548b4d9482554c04097fc12f65c90e8de03b7e5c392fc34c374d220477abd63e255ab98befa27df5d9598c055c871b7f7a4ed618a5ed8a2e4342888e9d6038f42834f7d869dd01d1164dd063c376e73250fa95606a0c44c5f2abfcdafb09ca5c13d4425b77dcf8219ac7fbb8ef99149efa020ccbfb41dbf02a1b248aa76c05e822b7aeebfb886aad9033c45a3360735b70771eb33ec8fb0a9a76733e76486f2eab07743095099019ace7d02d84812197df855a4d2bf2401a88dc1d6facba3b2e4e0701f48ca4832225b1725cfa4592c65f42d324790995987931273f7cf731527df2e8c43225db149e41faa01d3a076df6bf390ea12b3568e22766c3b3dff6a58a2c25ff251774b0bc7ca56356c3c63d5e978c5735fbafc4f5141ecfc66c2839c4f3f1ba88d55ffa46cb6247dcb9e28e704dfea16f10500904b0029a19a7ae3ded5bb97652c4dba2669f912fa9ef78dc8f0d8f7fe9f1b9dd5da8b59dfbcbc143ab7f548b5f179d81f20c3f014a5697a0805ef8c25b376f920c07c6c245582f0a3de550d1ba100fd9f1b7f8ac608cdc486596462b20e9c1e2a67eb7f147cda1f82979a7493f5309be315221e44de832ebb0b0d9c081c46a910e9d83aaa9908e768c7a34b24e8dc00f2c646a9d9ee0350f39b7523f5d0b075d57046c5fd468afdb37b9e45c5950e1b9024fc90442c9a5f9b9a548ad9ea23d99c5e6a8113b961148a0da910a97bfa134f8f030d1c6e13c540513063ecbee41f14b680e5b2442db29339dbf46e01fb598bb667864aecbd98d27ff2f61c690edd94c802bba657845beeb06dffd7635db71af04d37088568a6d672b18b0d3aa7fae0292f825263fe7dd57dca201c52605b34d2ed82b570a59a18f29db9dab2253c4df2410b6bd2094cd0b39dad874c92d38fb980d135950c7a949040e06cf344e431c8a36861c9971047d6d7eb00832cad82076e27b783f0ff2e2ceda114574190c6a3e3d2cfe084456b0030c41ad89e60568fa466343ce3f888899363ff41a7dea2a40ef01f994d857b6e8934db7c7a8a7912b5e9fb047b42052566d2325545b7c2f857e4f4cb1f851013dd5eda72ecbda81a6143c926d3de0ddfb27bcfcd7ca3a01066fed9bf20f7a6b070782e35f1077a2cdb4f8a0c7193a7c16b2384085b83ed9e2a5e55be02e477010c35187a1a58c1b472038e46cd64c6e14158128bbaecda905c897407f0c04999d1a3dd8485b2c2aa7f65ee8ec6d3664e423d80d74eb0ad76beeae877f341e9570d45462fb2c9a90316bed609fbf050b09eb39f8d4d221e8fe3226caf78eb4f4f28a50cb9ae6b4e2ada9e075857600120cdd58b1b2001880d604ee373972ab72374a3928e3061b18a94f877395b8c4a5a8c557790d2bf20d2fcc8bcb62c86d6de96af05ff3f46fa212fd4f8ed5dd3dfe0d13c43789aa5f26492ca66d623fdd9a099f9c762f029cde5169cc278f9da901dafe67a211cfca780540bddd10d3ba6b12bd663accd6e69e6b940ecdd1014921bd36548deaac777c0f1d895140a240f450631b89324eca7e92f6f8bf01e9d7ecc8be6203c53b7b72c3586bcef5b577270f1ead30c9e097bde9e79f787cd301179fdbd61c1a49a68429032a91c41590d4243b13f7c31da6614fc09d6a50fc6c1dc4d2aae550d4692abbebd165b64e9a0beaf7617fd4468126cc7eba7d5564f5d01da35e0b3b38e947dad2d0105d62dddcb41ea27eb7655d3758f16be880daf1d54dc4f56b8cb7d54f295ffca80852c3fe70813a209646179a1a4315ec930c01717be02a34ae4700e9e89909e8ffda5a9b6cbd1bf6f261cad618b494d56d65129c741ae5109f3b7ccb0b7e67d46bd65dac1e2cabe1981728c4be78847c0c995c43a152a180a8b6f1377d6d9d939628b821c50afe1c36923d92caaeddd11570f4a75173986fe4ae6e4ffce243aaa762eb05c2a66580cfafcd1186ffeac90ce693725ebc1b74faf3f1ae2dc7839187f73e181f22bf252c91ec644911b3e1bb0e81a7866c8ba9bff1e79917252c7d98a87c7ce1266a4c9aecffa05ae4d03e3bf2bcbe116c101d1e91ef96ff53cf397959fe92fa4b7ba6666753913e29cbbc8d93c7b1f09c2c1769b24cb915f788db1caf7062a99237f088174816bb06b09c571d6dcde9ba7a0f02c83f15dc310e0d7b480103fbccbbc51b5329be93c91e9f5efffc6778c56eddf71ae290eaf6fbce4818d759e6bd43c816ba44160a82e1fd8d307bf6717595a90d9a2458814a33f7346a0745bea1b2a57518591424ccec6370d426b535894277c695b876cf710c3010e30afe46fde9c772717cbfb9b919c3485074c6043a5877509a17c26234cd0bacb751b62fb4f6e85be1825d422c855492c118fb5e73b0a9d1940deb81d272f4840bf2e21aa1f5bde88a608a800fe42e576095353b432a2f88065fb2f8b6b3d5f3b329bbdcbeacda0da65fc97e9ecc4c0c8a719e6ed06795e01cfb8c9458cb8fd22e67fbfd1493ef3510238c89b361e9d788bd3545447788c4e141f4028c6c76daf11948b54b3a4e5583fefb8486be637271281ea749d7f70df49af48163e97bf22cdca0862b44164354423b9246df8ca949ee151edc18c08ffbf96d66073afa50512efc87bba63bff25243e9ba736c70345db7325e8d650ec860231bd3ea5ec4dcb7f9372517034e9817bc13b54467995338f8f092c1e88f2ef3c882e118d8599960c82f2a01bf08e895ed63af6b0d9a5090b0318c145af9f5d28ffcadfc02b8d5ae2ddf64c9ff73c0f36d89a6fb3887578a35455a301da6c46ca6d6cd3ba8b81427667db90d3f9df4517d6b2e38fb0bc97357877f833a7cdff547d80f22054334a9290c12e059437cc81449e483a768e53c5fe5888be53d11ca93ab1a630fa924405ae6baf810265b4919ce8d2caa86997bf3ab4c55848e0451aee5f43c027cd6104126a22f04e6e6185c92e4d10670fc9eecd3ca242add8801d68331b21fc2c19ac97b756cc90e7c802a46426939207be1f08b701caa8f42e3af07fa9b4a21f0449d74fe1ade1a4064495facbcdf4ec4a32e858d12f774fcc1256c827129e827c8d663c4cf435333705471b101f1ab6059c7e088859298aa2d1e0207eede533ac4eb9a4cb76bab7e8614dbcb74330ffa410285738c4568cf486064996afc47b7066fa424f7a845be90674168696f2ebf6187a9234183483f7078a0b8fef2c780e5d553d6ed09f89504c96aa1646b3154c35e11471c7d73835b81327114cbe828145e0904e4696de41a7394a95d4986b277930e185df1918b5679a539ca8ce6b93538bf961af55ff300e998d2b8fccb23f0f72f2d1c8d05b69ee2a11e9dcf29577b5ebe1d09177be0c0c971b94f4f974e95ee1ec3edf817229bc0520d09d7e932106d453e150103ce329bf872e0d27133722f12127d8abd63f0ac5f9e437c021b8eab903acf762cb9207a4ad97a3bbd87081ac32451d74212c946b4e561a6f6bd5022439aec4484eaee17d875735e13b1f2f74a27b2c5340ca2a2e8c6293910c6f378289d77dadd808c5b15a801034f7fb0f701660c86d7398613495a40c2098e8890b2abe2496bde2cd4270bc59943583016626730e6feca24017766a31c40e082a2c3da46903d67f0e4272daa9b22725d5ab93a228a2ed98bf040cf52165dad18f54d1c58fae5e309c2a7dd35d6555910bcb842d097d5543ad9f8bad7fb30744dfc090f865f0acecae8c625c606b565b661e64902472946736ce3d4c8f874d7a87ba817d41453613b694e7fb890706426bcba9bc2a305557d179034755ca9827599d241166470d6c0839131a5b478a1086276b564acfe2e8fa3acfcf93d", 0x1000}], 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f0000000240)) 2033/05/18 03:46:28 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x3, 0x800, 0x0, 'queue1\x00', 0x9}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x202, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, [], 0x13}, 0x9}, @in6={0xa, 0x4e21, 0xfffffffffffffffc}, @in6={0xa, 0x4e24, 0x4, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x15}}, 0x10001}, @in6={0xa, 0x4e21, 0xffffffffe60e37e6, @mcast1={0xff, 0x1, [], 0x1}, 0x8}], 0x70) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000000)=0x8000) r2 = add_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)='t', 0x1, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='/dev/admmidi#\x00', r2) inotify_init() openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x8080, 0x0) 2033/05/18 03:46:28 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x806000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="116348400000000000000000ffefffffff7f00000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1046.422932] binder: 32273:32274 got transaction with invalid offsets ptr 2033/05/18 03:46:28 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='maps\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x40, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="15ca070000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="f49a588b93e915b97face47a9163ebf71405d97ec63dc7592a29405343c68f87a549a6a30d079df1c216a663ef983a4d7e54322d104448ff18ec281ed8ec1829026495a73d58e5881bf138517f3525085bf7b4878f2736ccdd2d52de63b6c7c4e4e6ab8c8a562e7414f124f31afe53"], @ANYBLOB="d671f30a006e70f42f56e0c5b443afddc9b43f25b316d5632163f1a25e5abc1e7e6b3830add7a81b22a8b1169954e8c9115cb2b1873ddf3de2802fa7694e1cf53532fd464913b8404b39814e44a5c04eee26e49f20c1a0111fc52114ddb288ebd4ef0c5535f2719c99607be2fe6e85b43786406fa9efd4a730cf72f902580f157bb7f0f99b7005c75f91336852fde5f0e6b4ff01e98c6853fb0b7116c44a1748895c9eed0de1d72d0a1427c0580ad7be129e270893df8ed3c1aee60dfdf11435c4b370745780"]) r3 = socket$inet6(0xa, 0x5, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x9) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0xc0, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000100)=0xffffffff80000001, 0xfffffcd9) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0', [{0x20, '/dev/sequencer2\x00'}, {0x20, '/dev/sequencer2\x00'}], 0xa, "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"}, 0x128) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000340)={0x4, 0x848, 0x1, 0x7, 0x2}, 0x14) 2033/05/18 03:46:28 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x12a) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x8000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xfff, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000000000203cf84e08571d"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r0, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e20}, 0x1, 0x0, 0x0, 0x2}}, 0x2e) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 1046.472617] binder: 32273:32274 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x7, 0x20412100) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r2, &(0x7f0000001900)={&(0x7f0000000380)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000018c0)=[{&(0x7f0000000680)={0x1104, 0x17, 0x10, 0x70bd26, 0x25dfdbff, "", [@typed={0x94, 0x77, @binary="a316ea2d3a3286fa48738d3a42a453e7298ed7469b26bef6fa74eb984094765a95f5cb9556882bd9a84046323e3be1505a7817647ef882bdb0c3f0f238e008421cf274a0acd4eca3f58f813227419efdeb1a756d0c09bf41d31ffee06dddddbbdbf91dcf892de3214871adf26f52531c06e613528f49626f5408f90d6fe735f7c3385c22532c320040732cedeb"}, @typed={0x14, 0x8e, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @nested={0x104c, 0x7d, [@typed={0x1004, 0x6c, @binary="f2aa098e1501b0bdf639d4f7fc20f9b9c5b61a275ddaf4c4e150eb5cfd5e739171a5bcc8b62e043200ca6d9a6ddbb056503a540c9d24da192845cb89a689f8f93c189ea74f4c9de3d8803b10586a01320525479ecd66ce5ee6f52d6499926d7216ab260f5ffa8b891af3f5217f0ca16c26092769a12dceedb789bb86bf7fe91c298179105cb467ed1e64645d0aa80688b20b54d18b39efa1767e4606a43aa96ddadfab736d70648e8ec090f67ccadc94c45cd6da7a6dc76f5ee8633f8674b14d14ac7d205bd29d1eaf976e964a98d766d2db853b9c4714e52f72f01bfe200e9bc30b1cb7f9c457621bb81cd2f093ab44064e88cebc7036365fdb4509c12f928dc05b1d047f4bede1351d373f43560556bbd8ef4f285f9da092315156a7ed56947fb181b1e7449dac872b765758ac0e06a9d1a164ddd086534af912ee9d96db8919999f39d0f33f070d1b3dae6f46c6026fa9850ccbadbb22e31ebab611f640e5f469f4b05f5f2de63c9b0719559cc03509ed1faba00c6152f1399e6bef24883672bfa9807cbbc720a262285b7890f33ac4ab264ba24581429b04be9e735bd02e50bb5f499bc93c7d44a45c37a445c52dfa7df596a1a7a2ea89d7341e31bf6e2f7bedebae2016948566595c4fd7c60827a8aaa248b5b25ac8f857d8b5c988d3b8b72c539ca01a4097a3e036e10d370116dee0fd9057a699430511489d0518d44941f168fd3bc87af57832fb43ea2e0d6f499b543ad40879d0037d8ee431b2a95872c1bf03a2b7a8000fe73a4b6416d58c8b43eaddd43b71cfacc79fa24543e04eb85427a5c02530d3bc0954a3b85ac36fc9ce2936e756cfbaae75fef9c24b2ab9ac78379b0e7c6ab15cb815b7d70baf059b0e90528a53240f3627f80478c82d32dac6b6d5daa43e621d5fd40b47a07ad871c7cc47a557d5f0666deccfe471892f5362527597402959c2d6141609748ed554975a2db06a2723737209f6c911b7dbd9218d55912c31bcdd7ff8b32bd22c9538a3568cdbef034c0f21e01ccec0e232a921bafffd1d9f782d5cb5e35dcf1085c40bfddfd590bcb615e9e6db1bb7a4dbf68a546b01bc3527039507c468e1ad99a618cce36b0338d8dedb7281b89c7b211cc7bcb00d712729687114d87c09197b33f7fd5b4bb69dd7730002386b72b29897a7fae4a22b9e8c88c9999035f088e69d4023e316f65c90ae021315d34be783cae6d2a982d43704d8e5b4414fc7a1e6929cc860faac1cfce3ad0ebca42e9f2fb71dc078962700ab3aad7e50b186cfd7037b2a94a661f8885c2f4d72a22329937210019c3ae55ee20ba31b5b15ab73f9d8d96f1e2353630c787d8d260c4959823e4847ba8cdd5063bf7a8b5e928a46c1c9f9cc2d61f27f22f67ceae8d8b3099e55e224d348a20fa5ae377d58adc2fba6ddcf6d5c457f603a7debfb283e2dfd6041235599a8120d005b72218a20e0e49e59eb20f513a4a6befe37b33883d611288691c7edfaff889f323a2a4948c0c423ccbe107162673a1f814027dd6150c1d0a787949d768b4e40b8a9e10f6f6d8990789438528b3b6ea39ed0679ea80a3acad8063e5fac90ecd4c3a945fe43e0ba311f1e20a7b1fba53b8167c9e6f4f82014a8519f6a18a3ac2ce31df973d379ba2a72a1fa95b307f6ad72da50c49491d5872c2b21eab9d734b492b0d306cc6692f2629b47e9f3099f0d570a9cdda640651f7210747e9b8d05bfc48d356531bc4ef591ce9ad20db0ec878bb77e0427bfbc21877fcea7d29f559d82ca873289538c7a652129ca2a1d9276129a0762c936f24f093045059c6ed922119102049ccd0352f79c510503d03680726569ea9cd8bcbebfe740b1224461843df7eadf0ab06c49ccdc1ea2dcfd4c97c11257f90a2af36d4586be0e8f02e0687c362384ac71d686dca5666a2d3342642a9e84fdc613487f1acc00390ec0637139a594cf8055a3e1e3a5e9aa62e569cab0352bfd9bbf02d6f8dcce2d18d9240eac954046f00e73540ba5adea21b57a202ce65564e5851251d26d869dc051947e760c6a86b51d7872c84f0e37e11567e2b7a6c6a751b3ea5dd83544cabd2b0d78f30c4ceca44826f7bc3b706f2ab889e96cd34ad993d0eb0512524631f90e5c273509072f8bf697c09cb2137508ca28b1ccd03c2956b2e6fe8b67bd63af89009e192ef51c0e3c30cb28794f6858ff7a51a09fb70f4df64f429a3e56dde35434f5fafec4fb75e29985b78c15a1a4a267570028e0c392134ec12cf0b06745eca3facf3f6b04bc06d1d03db2e3038def3c5d54775f62b2aad117aa313e0f7c3b349ed64b29a4deabb2a26a3ac213ddb57f62a9edde18a6917e2a73aa93e4aaea849b04db7f73be5fe3ce95094d319553f9a54fd473a196b1de1bdba04324766ff632c90df6c5d26e158be60bc011d82ff5334eddab1391efe7507807aebac7cdea2a8cfda509870ce5097cf9dcf6c563668fdfbdf341e4c45cce495ba58812d7e46d0665461d534dfb5ea70de7fa39f0bbcf0286ce9cc1607dc3ebbe9dcd4d3c7fbb61a0d6088fe9a5499ad250b06d4f9658a9b60b9c5c745ca2db9df7eaf65ebe3fdfd505e9cb9cebe1113510648ecfdcbfac7903ebbb320421058633e741f93fe921885b69161e8eb4e255bada85d862b695d6a1343aae55db0183b77f7166124eef567bfc30b6fcc9b4fb3642dfb3bba7033f36c57c9a6a7189abece4573e3abd5994cce9c812db4a07924c6fe1f68246ae5cd48a9db1cc28555317dd3376bb75dc735920126c38bbc0420a7157b9d420d14d0bbdd81bee3058e644cfd23ca12fd8e3ad2b6835d0cbf662b2119f31979a60b7fb40c98ae3dee64b27f5d0ea7213251f03e34f58196874f746c73e8cf810545cca2ca2669fcdcb2eaaa84cce6f32dc6c0c83b939d24612faf57ee3b41f3662274728bc79467e7edf9d0edb7bc78964f5a2b0e4836c19dd4c0c22a27f472b1329af99b9b7a2fe3357670a72eaf712c9b4a88ee152f3a1d318fc3bb269aa0bb95eb1b11cfd1d191ca0b86a6386777ce48bf3b0716a7a7d5450ec107fecb7b2eea665c9f380f897080ad9199713a9b6a5c73baba8162022fe9f4d9086be963ae53a575ffd17d4073bb7f9925c85f15285196091906f820adb3857a4cc70d40fed3bd50ccae484e2ecff5187ac8b57aa6bfaf2e9688abd596a1af92284519e4a1cb6fc53bce75f447589465cfc24cc9b75e02ab99fac5878e7337cbd49ca8fc1e798c19a952e74f408b71bbd3734bfc11e4a219d9bb8f285d88c3f83d74101be10877f9d73a18a4b4dc1b5bd4bcddfac330731ce34a183c2775ad66371410aa746583687754051b57483d51efa87ed4e91594703e6b4164a0b1a52a0fb2dbaf99897516aef5f15de5f70e6497831250cac9067419ac146b8ec6c5126b9f9de2032f0274f24ce0d561a4c3ae26f3e2b9688f3903166de6109cd196f67e973d3562fa9b2f6deac3725a931878e89c5a7b7c240a36d7d8bccb75cf6927f6abf3b8629274d9b40e54b838d93b8c80adfbec366693805c2c7ad38de2342303a68325aeaa1c06f84d3fc470457ff5061be0ef8dfe9a0c466973267d6c2f928537e6a7bf84a6ac86b6cd5aeccfe11af3304406c3440b8d406cde93536122873760b55910f2907fab889e84a6b1d5b11bf7970daa2bdb3e8d2446c80adffd355eee26840632f48fb581780690e9f50a74de4542fc74a3c86e08ea8c6adbb4a14abf29741aa5c86e9698682e278b5c29e6f6b609666a41b0aa3c1a528d955efc9fe97688734f3b823bbe13fc497897a2ca181834316d4a10bd290e7eaa2266fdd62b66a3ebf378c49e908dd94613423e152e1859c0ad8379449d14d0b3ea56d39f834d1611674f2bf6a9ba4e8571560f505e13b1f111cd7bf06ba63a0d37aa338b4c291ad6acc322b85bb5fb543b73dd944e31ed822264d6886a4f5fae651e7850ef7f9f43236489ddc3a9f6d1ed05455ad44d1ef9458dbfa38ed76b0e623a3dd1f08142da80a4d83b88ab0d6348799d5ffcdb6c08c0112708575e253656440df635ec48d919e1070cf3288e20af35ccf7abb7edd208ee9e8a7b190679d8a5c9971dda53cc888e4d1b45483b17dc97882496bb4b58cccf921a25b0b5b6eb8399ae07029701ee6418eac2e0df3ea8f123a96de439c8f66c1ecc53ea4b71f6eecec6eab28ca9b4d5b164c24465c6d78456a645004fb98073a73feff52e8afb4d41f0f0cdb1d345b4226f35fb0ac7c24efe56b1d417df17db68c80b1539055a83b1aefe3026d10396bfc8d13107eec0e5c1276e05819a0fafe980ae7c52cceb21e274d17394e81d51d2b14bdc99e2c6ee0714bb6afbc35d6a4c628a9f2fb64b04fbf15e8cafa17e2f31bdf837104439fecadbddecc7a96e0100f4b66c38ef977b8d43d3228a1624c71964381bde7aa64b4a19e7156a3763163770801995ea4031baf4de43676278a5654547c605c66ae3a909eb149d97d805cea9f9d89b9c3a63cee8d9efcc3df93c7b1aa8ba67679c9caf814514bcb2dd1ce14d318afbaf3bde4011dfe1ea7cbd7611a0445a8b25670153ad0c3dbef14d7d33ba5f5eaf417b88cf05cfc91af581ef0a3f981e1cb9e7253448a6fa241c24f66e6e8998789016beded7dd3a57570aaa0716ec075eb1acfd5dc9b72261842b1443e8d74fdb3a45cecbfc9e01f18512d44e7a1e77c2760f2937009d3b44426b96966fc61c907449aa7d8a61d18c63027950f61cc924a10c4a655a15008dc16eea1f9d64324447ee7d7a16f4f8b3747c90c96cbaa1c06453751fdb75b0a4bc7afb4f73b397ca43992eac399986689d9bfce3fb2a76fb72ef959c9f31ed4cbce03848f42cb2d4680098c5a99b2dff1e4ca0415755073be415d7b3bbc445f88c5f2034c278dde0bdbbaa92d57d8dfdc6a3e429d465bfab9ae4f8c5ebc9bdc3f35b4bf09cc94ad463db30986177500a478f8a9879028a668bd8f3ad65b10b21d7c524093ff05dd5083d70d34b5b4dfc02704de1214f58c721814a684ccc17034db329766b01278955906bb4488c33cc2669ec89163d4d06b2be9c6510fcedcb81f8ba043e7f3cf2bdb3512a37de4f1e8a068e05dc6ad0e452b338012f6e79b0a43e7b416c0b55de7f24cdf9538a3be191582eb2f0de6c11053dbf94e81c8682c324562167d90d7eab9645f9e15f1aa8c20e4dbc9b504d7a9121904367a49549b5f7e85f6e9a4a2d3687eb86eb2be19ebadc21f6412b3cf70e66cb74939652d76d2f4da4f7b39de6d35fa31b86de5e5c1d5368947cee47488708f5c479fad7b560dcdb54a9fe0ba9fbcc9feda43f31104c98c0914862cf114f57743a738614f7d24d5e2492419e2690ef97ec87457d491b14303eb1ea57b56194dd0218500800d92f619b12bc4b07f2ffd15c383eb693b0c3d4d9bac59c4ce056e408b0864b3519a39d96d864ec8e824b8da234da17d35d7102f9ac4c9bf6d9e2e799c122026b338074fc9f64e3610b11921fde69b5d0cb4e45822d736a077b6c8287a085fbc00ca5ac178a40b99666d409ac32fa0e1ba59772d03fdf9b738dd4dd56872c935d0468a4bd82b7e0c1c43b9f2aa53920f85c2f58de7c37beeb3980ed35abfba9b2fda4fbcf5a836f84e57bd0e2799c49d7440de8ba5fa983f24a587f7e8147831ac718a2ec4804a88ad1b5a53f5df05375515db0d67f20e98e9981693f2f917bee0074e1b4bdfb373711d82d2dd5a1853344729ea589998d824c689353b0cd4e09983b4902b78fcb15610c27b27f965dcea4bd493600d267d5e"}, @typed={0x10, 0x4c, @str='/dev/loop#\x00'}, @typed={0x8, 0x2e, @str=']\x00'}, @generic="b685785e8e3533ffbffa8717a42e9fa2194245ab622e51f2e04db8171a64bf83c04f24579dedbf56d0393f4b"]}]}, 0x1104}, {&(0x7f00000017c0)={0xc8, 0x14, 0x408, 0x70bd26, 0x25dfdbfd, "", [@nested={0xb8, 0x70, [@typed={0x14, 0x86, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x14, 0x1e, @ipv6}, @typed={0x8, 0x1c, @fd=r0}, @generic="d4b1b1c57ec9db69474c29510b8ff001f1cfbaa2f50836d282f98904250ddabe0552914d53e3c958f49ac61f91cd3f34a096d39bd2f60b95e20067518445b112036ba327b32effaf2359ded5cc0b42888e25282179669178060e1ef741a221f196b6cf0dfc5e10ec8521e66d0a1ad574bbe9b7001f3340c7c53a28ce96", @typed={0x4, 0x1c}]}]}, 0xc8}], 0x2, 0x0, 0x0, 0x10}, 0x24000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}, 0x4}}, [0x3a473ff3, 0x10001, 0x4d24, 0xfc8, 0x0, 0x1ff, 0x7, 0xff49, 0xfffffffffffffeff, 0x2995, 0x8, 0x3, 0x2, 0x8000]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001940)={r4, 0x39, "555ba97aa6d0fd573a2e6393a54cc92cda1da57a1d250950f4d35e43258cf9e3654ffc59dbf0ae2ec9c4c066cab36f2c43b90716411d4eabec"}, &(0x7f0000000300)=0x41) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000540)={r5, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, [0x31, 0xffffffffffff0001, 0x20, 0x5, 0x1, 0x10001, 0x1, 0x5, 0x8, 0x985, 0x100000001, 0x101, 0xb42e, 0x81, 0x4743]}, &(0x7f0000000340)=0x100) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:28 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000000000001, 0x1}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000180)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1046.520066] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.531121] binder: 32273:32296 ioctl 40046207 0 returned -16 2033/05/18 03:46:28 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x4000000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:28 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7e, 0x4400) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180), 0x4) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000280)=@bind={0x14, 0x0, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}}, 0xff86) write$rdma_cm(r0, &(0x7f0000000040)=@listen={0x7, 0x8, 0xfa00, {r2}}, 0x10) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r3, r0) 2033/05/18 03:46:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000004f20000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1046.637724] binder: undelivered TRANSACTION_ERROR: 29201 [ 1046.683639] binder: 32323:32325 got transaction with invalid offsets ptr [ 1046.708937] binder: 32323:32325 transaction failed 29201/-14, size 24-8 line 2991 [ 1046.732360] binder: BINDER_SET_CONTEXT_MGR already set [ 1046.745066] binder: 32323:32328 ioctl 40046207 0 returned -16 2033/05/18 03:46:28 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8848000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="116348400000000000000000fffffdfd000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:28 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000df000000000000000000000171069fd6efffffffffff0000000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:28 executing program 0: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) recvfrom$inet6(r0, &(0x7f0000000440)=""/32, 0x20, 0x40000000, &(0x7f0000000180)={0xa, 0x4e23, 0x1000, @mcast1={0xff, 0x1, [], 0x1}}, 0xffffffffffffffd8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000711000000000000000000000000000a97600000000000000bb4b48d731d66ba5cdd3aca80d7a8002"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x400000, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000240)=0x17000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') ioctl$TIOCNXCL(r2, 0x540d) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {0xb}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4a98}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7e78}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x80) socketpair$inet_icmp(0x13, 0x1279, 0x6f2000, &(0x7f0000000480)) 2033/05/18 03:46:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/113, &(0x7f0000000000)=0x71) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:28 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x5000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:28 executing program 5: r0 = add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="c4", 0x1, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x8300000) keyctl$read(0xb, r0, &(0x7f00000046a9)=""/4096, 0x1000) keyctl$setperm(0x5, r0, 0x2000011) keyctl$instantiate(0xc, r0, &(0x7f00000000c0)="33aacf62cc6b24dd389807f232c13fa3f0eae79524b979dbb3502a3da82843e124e9703cb6570889d3a29deb0e6d042f4e37a722ae136ceeba6b5cf0d38f759dab5893eedbddbc6901e1e3fe015ac5c7230afdc4953f", 0x56, r0) 2033/05/18 03:46:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000a31fb9)={0x0, 0x0, 0x0, "7175657565300000000000000000000000000000e5ffffffffffffff000000000000000000000000000000800000fffb00"}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) r4 = gettid() timer_create(0x2, &(0x7f0000af8000)={0x0, 0x12, 0x4, @tid=r4}, &(0x7f0000b86ffc)) prctl$seccomp(0x16, 0x1, &(0x7f00004ebff0)={0x0, &(0x7f0000185ff8)}) poll(&(0x7f0000587ff0), 0x0, 0x0) timer_settime(0x0, 0x20001, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, &(0x7f0000040000)) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) [ 1046.813759] binder: undelivered TRANSACTION_ERROR: 29201 [ 1046.873598] audit: type=1326 audit(2000000788.921:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32334 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0x0 2033/05/18 03:46:28 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x6f000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:28 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x119000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x17, "998b4b68159de5480f2e957c98189261ff3b87629873bc"}, &(0x7f0000000380)=0x1f) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000003c0)={r2, 0x7, 0x30, 0x7, 0x2}, &(0x7f0000000400)=0x18) pipe(&(0x7f00000002c0)) bind$alg(r0, &(0x7f0000d36000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7be", 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000480), 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x94000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x401, @mcast1={0xff, 0x1, [], 0x1}, 0xfff}, @in6={0xa, 0x4e23, 0x28000000000000, @loopback={0x0, 0x1}, 0x401}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={r4}, &(0x7f0000000180)=0x8) r5 = accept$alg(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x9, 0x0, 0x5, 0xd, 0x3a2a, 0x4d9, 0x1f, r4}, &(0x7f0000000280)=0x20) sendmsg$alg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002f80)="6976611adf5998ca9a79b2d9961ec2a7d2b5c6fd8ccbc0897f6a25a111ba2d3ea167c453d87e919f44bbdc737957f69130cc1bde3f1a59f965ac64cad513b58fd5a3ca07bf2f24f1", 0x48}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x8001}, &(0x7f0000000200)=0x8) sendto$ipx(r3, &(0x7f0000001f80)="8c6152d3ce3d40dfd34c08e25ddf672b1f7cc59b0d400f14258581ed85097b67da08a8c979d04a5ea69ea5d064909887d0e4ac74e61dc1460fd009049f8a5f9e8427352a04b9a9a1a485d5a80345800f1c3bf10ab62459a31c4d93f8d6d2df6998211c4503fac25809853da867467f740a94ec62f3366baa8948b9504f89d1022b0a4c4897cc7195d302683f7594f67df3fa4886c61323bf4550dcbd6196e80929e88184033c50951f3cc5d020a6f9547b3adffd86190f051be143ab7ec83aa016de7f9f5fa0cd0a8095435b0bee40d41ec14842eaeb6944ce6d5f377b22cf19d7cd6991a439ebb732e557c564dee169d9d987c2524d7ff4de8aff081acbfe46330b28967ad08749225cce1020e2a89d072eff3ee13b416f2e0bf32a91714c55e68ad8b66f9db5acc07d1870c963c6e569bceca7cbd4961182b19b6966a3b3157d3678941dc3dbb3ac4a7cec429e06655d0afbdaff3d210d6e9b5f2fd7dc939d2ab0962ea0e4b1baa7232437ea017f47c33e09dc086449790fa8cc0db49c0e2af5f41bb86a03b866786b0b705c46207a7c4ae6fa3f1d005af08a0edfd21286264d5db8117dad72ad688b473cb6bfcdc827fb79547445c751a3cc8d0ac528a3bafec1f1837ab8f68879fcd3954fe9d4d7c21c289e670965b4d1d49fb595b27bd463c31cb5ccfa8534c75ad05174cfcd23ae5d75d0e12d9563a162f80b7026d8afbca1b720f6d09450bc13a7cfce58339e7ec9d5a1a5c790f2a91783dea27359ff8df6cc034ef9d5ccbb9720910fd9817aea6223f149d19cf13323168b2c5404076539dc77e71cc13529f6a7aceed1236f13d60920d885c14e117fb4078c56d392c6afdec9173f1df559777ebd0f3f08b219ef4ca46eaff9d6402811a941666959506b0883ac52c3ef17b479309e4c23df0fa16801d62b4ac736816fabfabce4a5a2b274eab4e8bea5dfc63311245221a3623e676f36d7518efafc831d0f962965e944417d4e369ed0d6e174f450449dad4feb23e4b9e6637fd1334d221e21eb00e10e64c06bd89f38b63913154a8c2f6ecfab49e2c9efbaca85a31831e85dd9f70b2fe2780d31c3b4a0663219b16a7b54ea9c9e3e3906d6b03100be259709f8497cfd68354173d21088ed728fcde24778c0d638b6eeb83da33a1acf9cb3dff3584854f4c82a3489cfd68ae87b6a0dbedee1edfb2ec466109fc029fec178ec18577b3b6c84f060cfe4abdf90d5e934f3dac1c6edc00559af4c004da10f2f5b94ef3df2a5bc41245cb9545898da0c084bd2153c13d357436445a0b21ddfd45261a115873685c5b1def612b36eb249012141b09d8c7328d5f62d413ff60aeeb8f04b54f86d0853e791f9b11f336e1f8fdeeca4f3204ae198afad79a2ee28905f6f92a16aa48ee8714cdcebdda4aa683f9b674ac709a4dd6c3390c3c518e627d0b27ccc87bdc6903b9c2355cce0cef1b52600f2858356bed48266802e71f84155257a15dc1f18f62f8e4fac04950e0f6ce0bb66a49ccf3ea627a3e428a3084148b7ab3bdd8c04b174ec04fe0a6b446c8102a1b6be25d5f6c0982a31cf9559a143bd7b7f980df1fe59b6ccb367f8cd19ab8a962050dc124c805379fc2ebe3249423481d08dc93bb9da266ae321deb1e9b0d67f5160e3ee8dde168fdc6be4c52f110fb00bf1b3faef18798d3b485f0cb1f8c175771fa80f0b87fff076c7bafa081c93e8f18e66a4b345ca4fa4bffd0649f76b0a3aa19cdbb84dbed121c2c974d489e82e58ad76cd9ca588c661f3d38d74b43e7e340a6c7ab93239835e5a889e664de43d1abeb2bd8d9c111257f6d73c39487414bb33f6f39de2ca971fd9eaf0641a1a0f443403d28d5ca55847f523c23cdf02746639c1d8ff59af6083fa27b32ffa6cc1c9cb6407a8dedfdeddf83ded9470b7865684c056f46b3e72a8163b53a245780ed198373206b975389164e847c41d97a8171dd747f8d409e8cd728d90d611f5079389851d861f90db676ebe8c1591baf5580944b8f3f67e6084b3bd9290dd091ed446280e2316adec1ac5e64ed3eeeff19d061f7861ffb839b63a09d7f9c9503cb0e3a3986fdb6babcf069da32ffcf754aede4e6cfe6292cb9d46cf2c61dee6a8fce05dde001406132aba9dd67c1f5cfe6a6b80cd1000ea29797fd3a8dfd65654066b90312b98294c36cc0dd29f878f94daa732da9283c952524d01c5f52994c80d283c4ada2fdb7bb753470a7f4306bf03647ee56b3c091efb361db422ac72a4df0ac7a94a4b359a3d27a48ff2cb62b689d36f4274db6ea3a4f6de64be47ed830e134b5092908e933e89e42c08c8456b9455eff507891ff567025c2a9ce998ad843636cd778724b6ec62809dfcb7cc5bac2f59c4c4aec375030a77ffd5cc3cf5d2e50ef52ce0fb7c6af0f72913937fbfddf91c1ecfbb40dfbcb01e889291696e8aabf81ed118cc6ba1af082383835f708d8df6ef19c35567da8e39e6e6647dc8e1781a074725cd76ec7bf8b9dd375d3808e0cfeabc16a4e27e0e80cde88cd067f01e6670e6898e2671d88b84a1a14ccd74ae7a9bb82b889f14f1c715ee33708022414be6205dd36e124f544bbc6033cf69a904f4979901fd3e81c81b9368715e6c7a311b8af3036b11cfc39268602ba7ae4b8480dc83cf94f5c5c60addd7097c753b90fcde85eec5997b3317ac325ba8b70506e9325c28ae6d297a494723d889a097287c51ace167ea8ac4990a9f5dfee7450f352727e7a8b01416b09868799626113701a2a48ca06d40f70b708c53937a923c02616b52a492a643996f8ba25158142c22d744f4d144a5f7e3a52a39808c61f3f1f3db0099dd2f3fdf34788bf3fa13ab7c0eaa9fbcd6981a4e77a059d6d126300efec5865129aa0d8997e656317e31eef2006a03bea8645d54bbd77e6d6e0f97c7709ec245617bb0844df1defdb11747ea7723d658a6b194f711e6871e5f71ad4a49b22870b4e27cb529a30830afc78805099eac2bb8dc57453bef66dccaed48411c751c7ceae478a369bfb532123e7cb01906d00660029766926c6be424a8162380a8d841139a40284140fb68d0f34fe1180ed8df02b434f98c4de3dbee1e7c93b95bcbdd9e083ee6467c433d08aeef59815dc224cf54a4097cfa1f02699653abdd104731964ba5b6525d1061a6c6e3ce93f0ff912e77d34c61b4f736a7470933acf73a5cd4a0d094cc3dd7bdb6c32e6a781791edfc5ecc3b9601d4372353d7702ad21fa2c64d98ef1ab4962cbbe01b5deefa41f04220d4211c17a6332b9a50bdae414ac06ec7ecefe524460819672e68df3c0a64f46a9e3308ad626b8aa70761adcc8bb1e6df987a5b8fae69967a78f56f162815ecad9c59ed87db11107eb1441bad812b3a38a93fd20b5756fb305d2ecbaa9b8e5575691944b58c29e18dda34dba1a6e4f72818869902ed8e256f8e36815316eb9067e6fd88740f6512d5e8e77b1a0b1760cacfc761feac4f561f3a0787bcc6ddad629ba7477123f2888d2fccdc51f1b8ea965e81e08577953efa923231ccd5e1acc96351e9ae06c766adaf162abb9e6cbba8c11a70393e97cecfc45be08d5f25e6983ada332a3cbe03c5f856925fbf4101130f64a40f98fa485a557a14b7728de3be59087c6e4711bff7e27cc9419ed49785b943adbe68fe4857bd2802a3128e6666aa92191ea4d2690c592143dfd6e8933449d2ab93a05c7e3624160b4c886149012d0f1bb565808fc78876baf56851bff936334044b95a42ff71b2af1f6b298f978d65175079c66692f7cdcd8eeffd0905fab60b23b23e4128785158b2fa4c958c1f2a6d20204dffd3bad7e8a9c4cbcd0d1c10a090a5bf2c9adaf1852745c3f3b8100bb7c8da763c9e61567ca438b0c126050466fda33630043d48d2ac5752bb81fcf1ee4c699b3d541e13da090de87cecf1a492e417d7bbb68fc724039aa120efa14e6853152cb64b637db6ab6bfd2d247f80567767456df31f7ab454848f95a51c8b5fc41201909c06338a5ce809d88874ab668ccfedd7a2c6756cc8d2cc4b6ad21bf8a4f50f46518a691f3cffe72f36fb76d0f1dc5b959877d139d4ccd3476070e0d47fcbc3af56a64ee82bef4fafe2f048c3b2e22160ab257770fce6aa72941b524ae678e5f492bd1ff3fae0daf07c8672895d58922e95fbd60ad7f2e367a73802646d8e3de6488a251ee363e02c2d077bb91c8ab7c878c82aed11beb07869670a977ba1b53ededff69f06537ffc9df7e2160f1fd5a69acc2d0117328e262b3f4abaf22684c30b3919ea78914f7ad30895f3dbdb8f0bcb8b9f66f1f49e4f62ea7a19a24a29aca49e0ae22f1afa6cf0b7034c14a36b4cf052eb3a7c88195fc8cbc7f27a69efd29cbffccba50c6e25f427fd11d75951fc23cf37ff603e94d23bda5e5a6c54369b87b9f1310b358d750d854255363cc3df0aac6bf77f61e57f6a102fa10cafe0218eef0931f816cee656c414ef6c7a141e04d0bb055ab8d30d08ea6db60ac4a1194327eeb80fd07e302bd7c811b3e4c03cb2bbbfc3068846419b0fa0912e30c29f87b63fb6e1c08618b07ae49604c90d730a5f9672a745ade25a3d23301f9c197e50ef832056627eaaae9da74f51d5e4b4af908f160b30e31789020f328fd685689e689abbf0153c9320e24a6d6c3167ad3b5c92cbe4c526dc99fe75b61429da62c6a273492bbcc2ab6c728a0abe6276c48796233227f30eb27cfb6ecb278bdf09ae47ce8f732c4a3f65cd31c496b19af410e592a823f7c7f021e5154a7a7296a61b36a9410c49ba81c4e06d4271430fec2a4fddf4cbad557c165bed966a62f20e43886316637c8e0affeb67a608511dd34009a35db688ab7303e224d8026e0bb124375b18ee64915c82b450f986f89b44e0b994b78bdc1ce90247cf6d06c32a12c71cdbfbc2edb87c3c12df916d8ac65a1659ef1483b507e688904e6461c778631a5847c162f6f58fd3a301d51241fdc4a3c8607f0700d412c501e88ec736ca7771cf8489f6e5215f9dfc8c6d8b21041a63747371aed47ce3cc2246b8fcaa17b037617b762ec5f154e314b79141cbf1522bf0908408db352c13770a06ac74a055a37d352a85a7efabaa5e127eeafd317ad6db48e6c20153757fb08724eb1b74a52e29cf0b3a72729bf9b7d8f125097e6231bb9d9b36ab991c6b3ef9108c9af0b38a35310d0ec61946331aa70139d5afe2612ec2df9f7cdc57d5c6dde210f824b9933cd4486a25ad9f9a01f3fb32546b2e805b37bc568236cd37e00ebd4dbc9423fdd1eaa0ec1851296e459c06a9caa335bf32145a5ca86d228d6bb3ec404dac5549208ae82a519b5eab9c80badf76e67d34d55ea27a3504fd79405a0c9ab35b40ec92806f50853100ea8e129c7288737d3230928a123c27bc6f3d8dbb9d4dc18cd1a32b543134ec2d5db1b84a81091d210fcdd422bbdba74c920645d72e5a494242ae10e7e78686e3cabac65cdc902850e53293405b68be79aeb991a1547065cfe2709738fbfe947357ca1df35552c8b002c0f4b4d1604f0c996f6eed1a006c4405a504c957f857068ff649b772035f774aae6758001d799542a2e5ce8c19df5d292fbd350ce9bc4124078b7393abed349f25e5f8403215cf85b04b6e6ec8fa86652a9d44061003fbada4237f015da9bf72dbc5b54d419568845bdc06689bd9e6bd224977d6ebb26c0df412bb3d5e21ed5eec7e4170d5c59f40cf758329ea270ab58fed4c060c9287b2ca39e00436f83bfa81490b4c6c6e3348bafc195f9d9a3b990d2c5478cab963ce4fcefb4664a8", 0x1000, 0x80, &(0x7f0000000440)={0x4, 0x3fb1, 0x100000001, "19b06b7aef93", 0x8}, 0x10) recvmsg(r5, &(0x7f0000001700)={&(0x7f0000001440)=@in={0x0, 0x0, @remote}, 0x80, &(0x7f0000000040), 0xfe, &(0x7f0000001600)=""/193, 0xc1}, 0x0) 2033/05/18 03:46:28 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:29 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x201, 0x0, 0x1000000000000024, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1046.919371] binder: 32351:32352 got transaction with invalid offsets ptr 2033/05/18 03:46:29 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) r1 = dup2(r0, r0) connect$ax25(r1, &(0x7f00000000c0)={0x3, {"3b1fe81e6da646"}, 0x4f}, 0x10) futex(&(0x7f0000000000), 0x9, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)=0x2, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x2}, {r1, 0x100}, {r1, 0x1000}, {r0, 0x9081}, {r0}], 0x5, &(0x7f0000000180)={r2, r3+30000000}, &(0x7f00000001c0)={0x8}, 0x8) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000440)="87a336902550f89ab5ade86ec9324837d64f83b26bdf47fc26ca687f0ed2a9bce7c56592ffffc6ad0ee3034737909c9b03dad6bdd83ce37da716868293ec4edb4bafea764d14311fb48ad2b262e0baf5f0fa934bf3caf7", 0x57) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xe1, "9ad49d3460c00c07a21ec0a39d6c97bb72a624d918afd50072a2baeff592f674456fa4147261e258e699d432adefcf52169e846abb54905754246d237122212cc76745a65876ff25113a09f5724b670a729d31dff5a14247d2ebe3f6f27d898bee38bf967566978ad250a44a1f0c8d04660f35ef1acc2010ec92707a48544977784f1a2a89963c0d45aef6c704a1cb3d151e661058a9e71037aa9b329fc882782fc850219dd78bcdef22884b3a96326a0ba0f5e5b9493ffdb7b587b9e377d980da54fbeb4360dc3a252c1374c45163a44e67019a6035bed3274bcf4ed8eb757a33"}, &(0x7f0000000340)=0xe9) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="070000000000000002004e23e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000600000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2200000000000000000000000000000000000000000000000000000000000000000000000000e3ffffff000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000313b90d6594abd5e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000001ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160bc437fec1241f93d2025b516a410fdbd3a1a8baeb39bc01b6619039721edb5d6f99ca31c4f002faef8aec0c40684c5879c909353bcbdfc6a8cadcc1bf5000981b0da2d14d7c5b6777ba3079ece377bb3e12076e7370"], 0x390) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000380)={r5, @in6={{0xa, 0x4e24, 0x100000001, @mcast1={0xff, 0x1, [], 0x1}, 0xffff}}}, 0x84) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xff, 0x4) 2033/05/18 03:46:29 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101300) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1046.980225] binder: 32351:32352 transaction failed 29201/-14, size 24-8 line 2991 [ 1047.060986] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.094603] binder: 32351:32375 ioctl 40046207 0 returned -16 [ 1047.158467] binder: undelivered TRANSACTION_ERROR: 29201 [ 1047.760660] audit: type=1326 audit(2000000789.808:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32334 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=202 compat=0 ip=0x455259 code=0x0 2033/05/18 03:46:29 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xc4, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:29 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:29 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10002, 0x0, 0x1f000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap(&(0x7f000004c000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x11, r0, 0x0) ioctl$int_out(r0, 0x1, &(0x7f000004bff8)) r1 = getpgid(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000180)='net/udp\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000100)={0x2, 0x4, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x80000000, 0x9, 0x9}) 2033/05/18 03:46:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="1163484000000000000000000000007a000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:29 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ashmem\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000040)={0x7, 0x3f}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x40000000000001, 0x10, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x40087708, 0x910000) accept4$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80800) bind$packet(r2, &(0x7f0000000100)={0x11, 0x1f, r3, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) 2033/05/18 03:46:29 executing program 2: clock_adjtime(0xae815a44639c3952, &(0x7f0000001fda)) userfaultfd(0x80000) alarm(0x6) 2033/05/18 03:46:29 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1f, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:29 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000001c0), &(0x7f0000000280)=0x4) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001380)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001500ef03000000000000000015000000"], 0x14}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0}, &(0x7f00000002c0)=0x10) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="630000000e1adc2e0dd81387e2c0345b59602fc0cb26e14677f147317878b90dbd6fd1640ecf24e4d6af5486365977a6d02681e046174c84663cdc1ca469a269895610149f05dda93d19c071042f98f825e543842977360516584705cc77d6519ce0b27fa0b8784c3c08a54a"], &(0x7f0000000380)=0x6b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x3, r1, 0x1}) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000000c0)={r2, 0x72, 0x1, 0x7, 0x2b7, 0x4, 0x3, 0x8, {r4, @in6={{0xa, 0x4e23, 0x3c9, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xd51}}, 0x0, 0x7, 0x2, 0x40000, 0x2}}, &(0x7f0000000180)=0xb0) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x2, 0xc) write(r7, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r6, &(0x7f0000000200)="1f0000000104fffff13bdbc007110009f30501000b000240000000004f6644", 0x1f) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000028000)={r8, &(0x7f000000af4b), &(0x7f0000570fff)="16"}, 0x20) 2033/05/18 03:46:29 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0xffffffffffffffc3, &(0x7f0000000280)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1047.888525] binder: 32392:32404 got transaction with invalid offsets ptr 2033/05/18 03:46:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000000c0)={0xfffffffffffffffd, 0xff, 0x6b64}) ioctl(r0, 0xc0184908, &(0x7f00000000c0)) 2033/05/18 03:46:30 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x76}}, 0x0, 0x80000001, 0x4ae94e2f, 0x1, 0x6}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x10001}}, [0x1f, 0x73, 0x886, 0x180000000000, 0x7, 0x0, 0xdca7, 0x6a72, 0x0, 0x80000000, 0x4, 0xfffffffffffffffa, 0x4, 0x800, 0xa1]}, &(0x7f0000000100)=0x100) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={"6c6f000000000000000000000000b300", &(0x7f0000000200)=@ethtool_rxnfc={0x3d, 0x0, 0x0, {0x0, @udp_ip4_spec={@rand_addr, @remote={0xac, 0x14, 0x14, 0xbb}}, {'V6'}, @usr_ip6_spec={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}, {"ba83", @link_local={0x1, 0x80, 0xc2}}}}}) 2033/05/18 03:46:30 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:30 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = dup2(r0, r0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x10000, 0x5, 0x9, 0x0, 0xb, 0x1, 0x5, 0x8, 0x2, 0xfffffffffffffffa, 0xb01, 0xffff, 0x0, 0x10000, 0x100, 0x2, 0x7, 0x1, 0x71b}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:30 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xf401000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1047.938198] binder: 32392:32404 transaction failed 29201/-14, size 24-8 line 2991 [ 1047.960840] binder: BINDER_SET_CONTEXT_MGR already set [ 1047.981861] binder: 32392:32414 ioctl 40046207 0 returned -16 [ 1048.027211] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 2033/05/18 03:46:30 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000204f00000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:30 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x10300, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000164ff0)={0x2, &(0x7f0000000000)=[{0x8000000000b1}, {0x6}]}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:46:30 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x40020000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1048.097824] binder: undelivered TRANSACTION_ERROR: 29201 [ 1048.100922] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 2033/05/18 03:46:30 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x608], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x2015}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x80, 0x700, 0x6}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000500)={r2, 0x8, 0x36e, 0x7}, &(0x7f0000000540)=0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000180)={{0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x2, 'lblc\x00', 0x3f, 0x1, 0x12}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e23, 0x2000, 0x9184, 0x3, 0x10001}}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) timer_create(0x1, &(0x7f0000000240)={0x0, 0x2b, 0x6, @tid=0xffffffffffffffff}, &(0x7f0000000280)=0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000400)={r5, 0x8, 0x6, 0x81, 0x7f, 0xffffffffffff5979}, &(0x7f0000000440)=0x14) timer_getoverrun(r4) 2033/05/18 03:46:30 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000180)={0x2, 0x1, 0x2, 0x800, 0x4, [{0x5, 0xf72, 0x7fff, 0x0, 0x0, 0x809}, {0x20, 0x6, 0x4, 0x0, 0x0, 0x1080}, {0x8001, 0xff, 0xcbf3, 0x0, 0x0, 0x2400}, {0xdf9, 0x10001}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000000)={0x0, 0x0, @multicast2}, &(0x7f0000000080)=0x10) [ 1048.202912] binder: 32441:32442 got transaction with invalid offsets ptr [ 1048.240921] binder: 32441:32442 transaction failed 29201/-14, size 24-8 line 2991 [ 1048.283473] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.309783] binder: 32441:32459 ioctl 40046207 0 returned -16 2033/05/18 03:46:30 executing program 2: r0 = socket$inet(0x2, 0x80000, 0xf) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r1 = socket(0x10, 0x2, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) write(r1, &(0x7f0000000140)="1f0000004a001dfe000000013fd400000000000000350000e6ff20fcc41951", 0x1f) 2033/05/18 03:46:30 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r1, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0xffffff1f}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x2) r3 = epoll_create1(0x0) r4 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000000, 0x10000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) dup3(r2, r1, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) 2033/05/18 03:46:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000013c0)=@ioapic={0x1, 0x1000, 0x0, 0x649b9d38}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}}}}, 0x98) connect$nfc_llcp(r2, &(0x7f00000002c0)={0x27, 0x1, 0x1, 0x0, 0x4, 0x8fa9, "57b853dc51230280babf667ef54bbc72e33130d046cc1dcc46a6bd65835f27b479695be25cfbe9f1f5fcca6c68fbea30bc76a769d2b50ed1b0f4678fbe5e69", 0x28}, 0x60) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:46:30 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202, r0, 0xffffffffffffffeb}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @remote}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=@updpolicy={0x184, 0x19, 0x100, 0x70bd26, 0x25dfdbfd, {{@in=@dev={0xac, 0x14, 0x14, 0xa}, @in=@loopback=0x7f000001, 0x4e23, 0xfffffffffffffd00, 0x4e21, 0xa1, 0xa, 0xa0, 0x20, 0x3f, r3, r4}, {0x1, 0x5, 0x51, 0x4, 0x8, 0xfffffffffffff70a, 0x61, 0x5}, {0x6, 0x1, 0x0, 0x40}, 0x5, 0x6e6bb4, 0x1, 0x0, 0x2, 0x3}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e23, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}, @coaddr={0x14, 0xe, @in=@multicast2=0xe0000002}, @algo_auth={0x8c, 0x1, {{'wp512-generic\x00'}, 0x218, "daf6d1e06435ee88f9a1652c6f108c9b47930dfec9793762985d5f6c3f426fb605cc99846754a623b6c5cf09976eca09033821a4ce8a6d0f9accc1b0adcd6a497a652c"}}, @ipv6_hthresh={0x8, 0x4, {0x4e, 0x3c}}, @ipv4_hthresh={0x8, 0x3, {0x1}}]}, 0x184}, 0x1}, 0x4004004) 2033/05/18 03:46:30 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800e], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:30 executing program 1: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfffffffffffffffd, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180020000000000000000000000000007110000000000000000000060000000000000000000000005689fbb7251a177b5e3acabc205a6b9e698f9d4264ac7a8f3c2bb0f8358a83f3dcef05b01fb317a713633391c2e70963b6d70799d7ce5b8ebe01f7f0b155519d9f67738788e2f25c08e72ac7d708265bab95c64741ecb5d027a4dcc093240d0bf4254491a444"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:30 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000740000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:30 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x4000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1048.372456] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:30 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:30 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000040000000000000000055000000000095000000b9000a00"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:30 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xc400, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1048.447663] binder: 32482:32483 got transaction with invalid offsets ptr [ 1048.495021] binder: 32482:32483 transaction failed 29201/-14, size 24-8 line 2991 [ 1048.522469] binder: BINDER_SET_CONTEXT_MGR already set [ 1048.547712] binder: 32482:32495 ioctl 40046207 0 returned -16 [ 1048.615662] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:31 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1000000000000004, 0x202, 0xffffffffffffffff, 0xffffffffffffffff}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x40000, 0x0) r2 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="02300000000000f8d2defe8d6d10d3989d650118bbd7381c00000000638d"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00'}, 0x10) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x81, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x400, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f00000001c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x1b) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000000000588f44a1b7b4ab7e282074e20925854b4cc28ab421131bc3ce7b7fcac182eca300af9d598c233dd832ec563a4ff4f4e7a052ab5d6a64e34ce8f152436886d11b5a4fd961e337d66c178afc91b4ee965ebd63fd6316c6b46eccef0f2f5b7fc2d0369dc91d0f3d4b7974fd4eeef04575eae9335f02b1720b6541e145526ba07389c00a53aaa4aad4b0"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000004000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:31 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x5, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:31 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:31 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x1}, 0x19e) epoll_create1(0x80000) connect$inet6(r0, &(0x7f0000012000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='5', 0x1) r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x3, 0x101) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) recvmsg(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)=@generic, 0x80, &(0x7f00000010c0), 0x1000000000000271, &(0x7f0000000000)=""/115, 0x73}, 0x0) sendmsg(r0, &(0x7f0000001980)={0x0, 0xfffffffffffffdf5, &(0x7f0000000080), 0x111}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000011c0)={{{@in6=@loopback, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000001140)=0xe8) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000003a00)}, 0x0) 2033/05/18 03:46:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0xfffffffffffffffb}, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0xe, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)={0x6, 0x0, [{0x6, 0x0, 0x4}, {0x180000000, 0x0, 0xffffffff}, {0x3, 0x0, 0x1}, {0x140e, 0x0, 0x6}, {0x8, 0x0, 0x3}, {0x563, 0x0, 0x8000}]}) 2033/05/18 03:46:31 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x3ffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20}, {0x6}]}, 0x10) write(r1, &(0x7f0000000100), 0x10174) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8000400) mq_open(&(0x7f000004b000)='/$cgrouplo\x00', 0xfffffffffffffffe, 0x0, &(0x7f000004b000)={0x3, 0x7, 0x3, 0x8000}) unshare(0xc000000) getpgrp(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x2) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffff8) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000080), 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x4000002}) write$sndseq(r6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) tee(r5, r4, 0x1, 0x0) dup2(r0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180)=0x200, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000024e5cea7c1657c0b28d6afd5b7a858cba061f0d541d135f0c4b416752732e26eaad81ad6666abc671c9c8a8f7a7d6c8d31655f0747faeeff0f0000000000fd73960f847370d86a59b2ed2ad9bab27df1b92b950c29f84542a12c9b2066069b9eef4168a4b8c44c506edee6899ed67bc4c23817640866cdf4e879d19b9a0df54dc3a91f1135d3452b3a69670c60279ccdc7f722ac4b5657e07692143a274eeca783885842a3336fc09bc2db134d1f1bc6d4da0a203aba77cad53889d13000000000000000002a5c622c2dd1f1bf9edfef3153ffadbadd0000000000000000"], &(0x7f0000000440)=0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x2) memfd_create(&(0x7f0000000540)='\x00', 0x0) perf_event_open(&(0x7f00000005c0)={0x0, 0x195, 0x8, 0x9, 0x0, 0x8, 0x0, 0xfffffffffffffe01, 0x142, 0x1, 0x0, 0x0, 0x6, 0x9, 0x4, 0x5, 0x100000000, 0x8, 0x6, 0x0, 0x1, 0x8, 0x1, 0x800, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000580), 0x1}, 0x10000, 0xfd, 0xb6, 0x7, 0x0, 0xf21, 0x976}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x3) 2033/05/18 03:46:31 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:31 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xb0b0d, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1049.456963] binder: 32523:32525 got transaction with invalid offsets ptr [ 1049.493198] binder: 32523:32525 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:31 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10001, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2008004c}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xdc, r1, 0x328, 0x70bd2d, 0x25dfdbfd, {0x2}, [{{0x8, 0x1, r2}, {0xc0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x12}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x625, 0x4, 0x89, 0x93a}, {0x4, 0x0, 0x5, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8000}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x20040090) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f0000000000)) [ 1049.529195] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:31 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) ioctl(r0, 0x6, &(0x7f00000001c0)="be3d50801417e2e6765fbdb9b10ea0725bf5a54ce445706625801491c28896021396329c5184e52cd369a15a50af4011ec5b9546491b4a8c40306be24b0082dc09eb90ac098f53d7db55a4abd740ae703851ea46") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x800) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x8) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1049.550819] binder: 32523:32533 ioctl 40046207 0 returned -16 2033/05/18 03:46:31 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f000070ffe3)={0xa, 0x800000000004e22}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa}}, 0x0, 0x5ee}, 0x90) getsockname$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x9, 0x0, 0x4, 0xffff, 0x1, {0x0, @in6={{0xa, 0x4e24, 0x7fff, @ipv4={[], [0xff, 0xff], @rand_addr=0x2ef}, 0x4b8}}, 0x4, 0x5, 0xa, 0x3, 0x5}}, &(0x7f00000007c0)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000800)=@assoc_value={r1, 0x80000001}, &(0x7f0000000840)=0x8) ppoll(&(0x7f0000000280)=[{r0}, {r0, 0x4}, {r0, 0xa0}, {r0, 0x220}, {r0, 0x8000}, {r0, 0x80}, {r0, 0x42}, {r0, 0x5}], 0x8, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x98) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2a, 0x14100) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0xc157}, 0x10) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000500), &(0x7f0000000540)=0xb) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x400}}, [0x4, 0x92, 0x3, 0x5, 0x72, 0x6, 0x6, 0x5, 0x1, 0x7f80000000000000, 0x800, 0xc905, 0x9, 0x415b91a4, 0x7]}, &(0x7f0000000680)=0x100) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000006c0)={r3, 0x1f}, 0x8) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000004c0)={{&(0x7f0000000380)=""/213, 0xd5}, &(0x7f0000000480), 0x48}, 0x20) 2033/05/18 03:46:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_data=&(0x7f0000000080)="38e33310e87044f21e13559eb24861865136eed191f2864d54a9c60dc92c69c2"}) 2033/05/18 03:46:31 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5b01000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000ffffffff0000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:31 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x64000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1049.670460] binder: undelivered TRANSACTION_ERROR: 29201 [ 1049.701648] sctp: [Deprecated]: syz-executor0 (pid 32552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1049.701648] Use struct sctp_sack_info instead 2033/05/18 03:46:31 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000001f0000000000000f33da9dfcb71c11b96fee0dc3912c00008682d94b02542d"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1049.737279] binder: 32559:32561 got transaction with invalid offsets ptr [ 1049.780376] sctp: [Deprecated]: syz-executor0 (pid 32567) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1049.780376] Use struct sctp_sack_info instead [ 1049.785287] binder: 32559:32561 transaction failed 29201/-14, size 24-8 line 2991 [ 1049.832453] binder: BINDER_SET_CONTEXT_MGR already set [ 1049.837904] binder: 32559:32571 ioctl 40046207 0 returned -16 [ 1049.866140] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:32 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0xa00, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="029afdf1007f00e90f0000b62b7ef1f1707e6194eb147da5a115bd40648e0d3063b663a8e6389c556276b014d52cfb6ef9ef97e40138d95e0a01285e6ae6b3254b35b138a3e505bba6e0516949b152b12a50d6461c27ecf7b18638dddf6466ea1326c35ddb20a987a3c736d42247b483f5305d2763197d0fbca159f55e7368e8c98fd6904955c915d38ca16687e3367f2d57ec0a5bb94d9c051b82bdbee81bd074f2b4720548c5e1bf5b35036bbe9c0dea083974366389e5d04b16d89512d018418441a79b5b06a448e1431823412e7232d4c83f1c2528134dfe3fb433a020daf8f0b2c38536d125995d473aae61a960c62690e6180000200000d4c9713f6ee675289e96df18360be87eb27b01bea545f57f15cbff6627ead56886121f9ee5ca2428c3d4ec686bf2716248621f3ef855df6fcfc8bdc08f74d353c4155451cb46180816d1ac466ac7ea34cb6c80715e8cb078a94f709a0e09226354e3c86f186060246dab7227f54d60957e575093"], &(0x7f00000001c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0x7, 0x20}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x8001, 0x7, 0x6, 0x2, 0xffffffffffffffff, 0x1}, 0x2c) 2033/05/18 03:46:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x100000003, 0x3000000000000}) r2 = fcntl$dupfd(r0, 0x406, r0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/22) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2, 0x4b7ccee5, 0xfffffffffffffffe, r2}) listxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=""/186, 0xba) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="ba2000ed66b9800000c00f326635000400000f3066b9200000400f32f0f7950020baf80c66b8740cf28666efbafc0cec66b8050000000f23c00f21f8663500000e000f23f8b81e0b8ec00fc79f0d00f20f7dc966b97e0b000066b84a00000066ba000000000f30", 0x67}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2033/05/18 03:46:32 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x2, 0x3, 0xfffffffffffffffa, 0x3, 0x4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d5a66732e66617400021001000200027000f0", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) syz_mount_image$vfat(&(0x7f0000001540)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x800, 0x6, &(0x7f0000000400)=[{&(0x7f0000000500)="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", 0x1000, 0x3}, {&(0x7f0000001580)="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", 0x245, 0xb}, {&(0x7f00000001c0)="719eba4016a3e215e5b0e3bb69e10ff90089d50a2bfb6fcc15361f08850d56ca200a5fb751693c56b16c7edac4a313f942149beb", 0x34, 0x4}, {&(0x7f0000000200)="93fea4c1681cab0064f057cebf026cd80b88140e4c769dbde08f6c0f6dd331c945bce8ffb446eda98bbca9110743a5b3857b8696e11f7f6cc58619b447f9ce96f79be517a79cadbe4dbe7f2276b8e08c72f26ecc58770eca6ba5913312bd", 0x5e, 0x4d}, {&(0x7f0000000280)="a79cc9187e7842756d8f6bc829e7538e25ea352177f2c32cdc06e842a8d215206f2972b6288371b19b8788f73b8a5330a0649853e5ce56fe104ddc54eda6d6db8d66f8ef3af67403b723fd365f7870b22b37605e07028343942edc35d8e4026831862bd09642c340b2aac933be3a9015115f27a081e5cef8b7a89938c13a4a2f9dc8c2469aa36b4e533ed0bb6db44c493775af391cf97de86b3964c4422060910bb97ad51b12896cc5845ee5b30e7c7b2f8862", 0xb3, 0x1}, {&(0x7f0000000340)="259fb4ca9910466823d4893e95bdcdd3ff94fc3e50d962931027ee829e6efdd05ee715a00f188b91c62db4f837548842dc5a0692ee12a978f5ce1ccc20ce0acd147f1d2a5551feb629b7cf051a130deea78c04b56c459ba755b0b83072416b65fab9b4155144d3f7b70605acf3d0d7eb9fc52ee99def4aa40b1c14cf257a294fe0a9aa52b413e341d96630a4314c60420b1031824e3db51c3c814ec5585dad099ff5a135939950", 0xffffffffffffff7a, 0x6df}], 0x400, &(0x7f0000001500)={[{@allow_utime={'allow_utime', 0x3d, [0x32, 0x33, 0x37, 0x37, 0x31]}, 0x2c}, {@fmask={'fmask', 0x3d, [0x31, 0x32, 0x34, 0x34, 0x35, 0x34, 0x30, 0x30]}, 0x2c}]}) truncate(&(0x7f0000000140)='./file0\x00', 0x7ff) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x121) faccessat(r0, &(0x7f0000000100)='./file0\x00', 0x10, 0x200) 2033/05/18 03:46:32 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="116348400000000000000000006c0000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:32 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0xe00000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000614000)="74086e7500ff000000000000118c00", 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x1, 0x5, 0x7, 0x4}) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x800) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000100)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x800) mq_open(&(0x7f0000000040)="74086e7500ff000000000000118c00", 0x1, 0xe0, &(0x7f0000000080)={0xffffffff, 0x6, 0x81, 0x7, 0x7fff, 0xffffffff, 0x4, 0x400000000}) 2033/05/18 03:46:32 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1050.557643] binder: 32586:32587 got transaction with invalid offsets ptr 2033/05/18 03:46:32 executing program 4: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x8000) r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x1, 0x40) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000240)={0x9, 0x9}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2a0000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:32 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xe8030000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1050.611685] binder: 32586:32587 transaction failed 29201/-14, size 24-8 line 2991 [ 1050.644088] binder: BINDER_SET_CONTEXT_MGR already set [ 1050.650562] binder: 32586:32603 ioctl 40046207 0 returned -16 [ 1050.657305] kvm: pic: non byte read 2033/05/18 03:46:32 executing program 5: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="007c5edabc49fcdaba18f11f8d39c6a8c472b0197f53eb6e30ece613bb34ed711ebef3260a309729e78b7558b25e19269bfd5c8297d620f28142fb2e243c5a3af67b4d6ebaa716d7ff838846956cc842bf0700107d9f1af2b73786e51105f2db851d0b4c145e18382c25e60c612f9a25f95f5c84d74e8da369350f21377cc73d06fabd4bb0fdbafb80e8c6e9ff7cf5b12c09af6bb080035285c68189c2784731e204543cc7051e5ae45c80a3541ef9f3763201e0636988d952"], @ANYBLOB="010000000000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000100000000000001"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00']], 0xb, 0x0, &(0x7f0000000280)="0e41e97e00000000000000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0xc) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000003c0)=0x200, 0x4) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r5, r6, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x1c4, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x23, 0x102000004) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000380)=0x8) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000100)=0x68) 2033/05/18 03:46:32 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000000095000000000000006cf6d987e86903bac16ef59e10130a6b0bc829dd7f2c5dc26c3ca1daa3f40d07b853cd7d56bc55a8c98efff87a94ba6e473d000600b2b4d03db56d2af0555ed482f70c21778fc48f3ae375e33171af167b0dc7d4a1"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x7, [0x9, 0x5240, 0x1000, 0x5, 0xff, 0x9, 0x0]}, &(0x7f0000000180)=0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000005000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1050.743892] binder: undelivered TRANSACTION_ERROR: 29201 [ 1050.789754] binder: 32620:32621 got transaction with fd, -1, but target does not allow fds [ 1050.811080] binder: BINDER_SET_CONTEXT_MGR already set [ 1050.826293] binder: 32622:32624 ioctl 40046207 0 returned -16 [ 1050.851201] binder: 32622:32624 got transaction with invalid offsets ptr [ 1050.864604] binder: 32620:32621 transaction failed 29201/-1, size 64-8 line 3068 [ 1050.865324] binder: 32622:32624 transaction failed 29201/-14, size 24-8 line 2991 [ 1050.906079] binder: BINDER_SET_CONTEXT_MGR already set [ 1050.923775] binder: 32622:32629 ioctl 40046207 0 returned -16 [ 1050.954971] binder: BINDER_SET_CONTEXT_MGR already set [ 1050.960497] binder: undelivered TRANSACTION_ERROR: 29201 [ 1050.966376] binder: 32620:32621 ioctl 40046207 0 returned -16 [ 1050.976492] binder_alloc: 32620: binder_alloc_buf, no vma [ 1050.982362] binder: 32620:32621 transaction failed 29189/-3, size 2199023255581-682899800065 line 2963 [ 1050.997739] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.012809] binder_alloc: 32620: binder_alloc_buf, no vma [ 1051.013597] binder: 32620:32621 ioctl 40046207 0 returned -16 [ 1051.018456] binder: 32620:32634 transaction failed 29189/-3, size 64-8 line 2963 [ 1051.056287] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.061963] binder: 32620:32634 ioctl 40046207 0 returned -16 [ 1051.069779] binder_alloc: 32620: binder_alloc_buf, no vma [ 1051.075460] binder: 32620:32634 transaction failed 29189/-3, size 2199023255581-682899800065 line 2963 2033/05/18 03:46:33 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x12) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x1ff, 0x100, 0x8176}, &(0x7f0000000200)=0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xf4010000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:33 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x14, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f00000001c0)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], r0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000200000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:33 executing program 2: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) keyctl$get_security(0x11, r1, &(0x7f00000001c0)=""/113, 0x71) keyctl$update(0x2, r3, &(0x7f00000004c0)="df02754677212dfc3e2abcb24473e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd979e9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, &(0x7f0000001580)=""/4096, 0x1000, 0x0) 2033/05/18 03:46:33 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/98, 0x62) getsockopt$sock_linger(r0, 0x1, 0x5, &(0x7f0000000200), &(0x7f0000000240)=0xfffffeab) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400002, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000100)=0x81) 2033/05/18 03:46:33 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe80], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="007c5edabc49fcdaba18f11f8d39c6a8c472b0197f53eb6e30ece613bb34ed711ebef3260a309729e78b7558b25e19269bfd5c8297d620f28142fb2e243c5a3af67b4d6ebaa716d7ff838846956cc842bf0700107d9f1af2b73786e51105f2db851d0b4c145e18382c25e60c612f9a25f95f5c84d74e8da369350f21377cc73d06fabd4bb0fdbafb80e8c6e9ff7cf5b12c09af6bb080035285c68189c2784731e204543cc7051e5ae45c80a3541ef9f3763201e0636988d952"], @ANYBLOB="010000000000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000100000000000001"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00']], 0xb, 0x0, &(0x7f0000000280)="0e41e97e00000000000000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0xc) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000003c0)=0x200, 0x4) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r5, r6, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x1c4, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x23, 0x102000004) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000380)=0x8) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000100)=0x68) [ 1051.118427] binder: undelivered TRANSACTION_ERROR: 29189 [ 1051.144703] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:33 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:33 executing program 0: r0 = socket$inet(0x10, 0x80003, 0x5) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="24000000190001000700fd686fa2f8bc0200000000000000271d859408000f0001030000", 0x24}], 0x1}, 0x0) [ 1051.198142] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.205181] binder: 32648:32650 got transaction with invalid offsets ptr [ 1051.221560] binder: 32655:32657 ioctl 40046207 0 returned -16 2033/05/18 03:46:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x40550000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:33 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000), 0x1a7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80, 0xffffffffdfffffff}, "706f7274300000000000000000000000000000000000000000f6ff1500000000000000000012d000000000000000000000000000000200", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000180)={0x1, 0x1}, 0x8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000fbf000)={{0x80, 0xff}, 'port0\x00'}) [ 1051.257550] binder: 32648:32650 transaction failed 29201/-14, size 24-8 line 2991 [ 1051.274569] binder: 32655:32657 got transaction with fd, -1, but target does not allow fds 2033/05/18 03:46:33 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1c000, 0x0) connect(r0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x1, 0x0, 0x3, 0xfffffffffffffffe, 0x7fff, "ec24664c713d0be046a1be8f42d0c0ff965996b8ef14deaa5ed2a02dd74310fced5953e56d57812f266dfd4d2d904db0c279e1e2c05c9f6644a7a3c066530c", 0x2c}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) ioctl$KDDISABIO(r0, 0x4b37) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:33 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000de11b51dba579c2800000000000000000095000000000000004bb6d4cecd8aa25087b445023432c71eef693d8b8d7da7e292b5a992d29a3c7bdca61f73b71b5038e7fadabbbd3d9bcdb2804abccc1c365aa64d28eac5841344ffd6ee6f0653488d6147e35ae73f318e2b31f4779722cc1755e4f468e66ffbc131ae257cc50300ec4ef78369e6e4ee35496e614c983e0a13b48c66d75dc6a8e5077c84be5bfc43b79d1469e0b7806030e389ae7641640ee93f76f63c2b4a2da18fb179d060df69fb"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) [ 1051.317432] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.319274] binder: 32655:32657 transaction failed 29201/-1, size 64-8 line 3068 [ 1051.328953] binder: 32648:32674 ioctl 40046207 0 returned -16 2033/05/18 03:46:33 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:33 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0xbe, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000000c0)=""/190}, &(0x7f0000000200)=0x78) r0 = memfd_create(&(0x7f0000041000)='\x00\x00\x00\x00\x00', 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000048ff3)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000e50)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x30) accept4$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x14, 0x800) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000580)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000900)={0x0, 0x0, {0x1, 0x3, 0x8, 0x0, 0x800}}) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000000)={0x100000000, 0x0, 0x0, 0x9, 0x1c}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000049ff0)={0xffffffffffffffff, &(0x7f000003a000)}, 0x10) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000240)={0x7}) setsockopt$ax25_int(r0, 0x101, 0xf, &(0x7f00000002c0)=0x8, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @rand_addr}}, 0x7f}, &(0x7f0000000480)=0x98) 2033/05/18 03:46:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000068000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1051.420331] binder: undelivered TRANSACTION_ERROR: 29201 [ 1051.490334] binder_alloc: 32655: binder_alloc_buf size 2881923055656 failed, no address space [ 1051.491781] ALSA: seq fatal error: cannot create timer (-19) [ 1051.499090] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 1051.499125] binder: 32655:32657 transaction failed 29201/-28, size 2199023255581-682899800065 line 2963 [ 1051.514328] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.563429] binder: 32700:32703 ioctl 40046207 0 returned -16 [ 1051.588546] binder_alloc: 32655: binder_alloc_buf, no vma [ 1051.594198] binder: 32700:32703 transaction failed 29189/-3, size 24-8 line 2963 2033/05/18 03:46:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x2, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:33 executing program 2: r0 = socket(0x2, 0xa, 0x0) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="1a", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2033/05/18 03:46:33 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000001000000000000000000711000000000000800000000000000009500000000000000a26e3356b79f870fb928b6a19d9473377a5ccf73369c4ef1266e24421c305421490088442cf85a6f0e76387aeed39f"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x100) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400000, 0x0) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00', 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="007c5edabc49fcdaba18f11f8d39c6a8c472b0197f53eb6e30ece613bb34ed711ebef3260a309729e78b7558b25e19269bfd5c8297d620f28142fb2e243c5a3af67b4d6ebaa716d7ff838846956cc842bf0700107d9f1af2b73786e51105f2db851d0b4c145e18382c25e60c612f9a25f95f5c84d74e8da369350f21377cc73d06fabd4bb0fdbafb80e8c6e9ff7cf5b12c09af6bb080035285c68189c2784731e204543cc7051e5ae45c80a3541ef9f3763201e0636988d952"], @ANYBLOB="010000000000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000100000000000001"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00']], 0xb, 0x0, &(0x7f0000000280)="0e41e97e00000000000000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0xc) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000003c0)=0x200, 0x4) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r5, r6, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x1c4, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x23, 0x102000004) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000380)=0x8) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000100)=0x68) 2033/05/18 03:46:33 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800e000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:33 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x101400) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000180)=@pic={0x7, 0x3f9, 0x100, 0x6, 0x3f, 0xc68e, 0xff80000000000000, 0x100000001, 0x0, 0x7fffffff, 0x5, 0x101, 0x5, 0x3}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000e20644930004950000d000f7000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:33 executing program 0: socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'syz_tun\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, {0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'gre0\x00', @ifru_hwaddr}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000065ffa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @remote}, &(0x7f0000000940)=0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5", 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)) r3 = openat$cgroup_subtree(r2, &(0x7f0000000680)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}]}, 0x6) tee(r2, r2, 0x8, 0x8) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x80) bind$bt_hci(r4, &(0x7f0000000300)={0x1f, r5, 0x2}, 0xc) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x6) r6 = fcntl$getown(r4, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x44, 0x5, 0x5, 0x7f, "9f6dbd77c33814520269df606c5380f6c5388d6a29a51687f16a7d4eab8ed3a93425b7a83dfd76c952d98efd"}, 0x0, 0x0, 0x3, r6, 0x7, 0x20, "5aed2a841f9d43a9e50ae4b3f068f0f739a9088977780e52918585eea37484d5177e05e5dd0d5d39a89ae4106543095bc23b20affc45eb654bc3035546cfb4bd", &(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x12, [], [0x6, 0x81, 0x200, 0xfff]}) splice(r0, &(0x7f0000000140)=0x31, r1, &(0x7f0000000180), 0x7, 0x5) connect$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x3, @rand_addr=0x2}}, 0x1e) socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000480)={r0, 0x2}) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000000)=0x80) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6gre0\x00'}}, 0x1e) socket$inet_dccp(0x2, 0x6, 0x0) 2033/05/18 03:46:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000009300000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1051.619060] binder: undelivered TRANSACTION_ERROR: 29201 [ 1051.619711] ALSA: seq fatal error: cannot create timer (-19) [ 1051.632711] binder: undelivered TRANSACTION_ERROR: 29189 [ 1051.704594] binder: BINDER_SET_CONTEXT_MGR already set [ 1051.718839] binder: 32723:32726 got transaction with invalid offsets ptr [ 1051.738623] binder: 32721:32729 ioctl 40046207 0 returned -16 2033/05/18 03:46:33 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88470000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:33 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x0) connect$vsock_dgram(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1051.749612] binder: 32723:32726 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:33 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xbd010000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:33 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x22f, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:33 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/autofs\x00', 0x400000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$inet6(0xa, 0x2, 0x8000040000000088) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10, 0x29}], 0x10}}], 0x2, 0x8000) r2 = dup(r1) r3 = accept(r1, &(0x7f0000001740), &(0x7f0000001d40)=0xffffff22) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001800)={{0x5, @remote={0xac, 0x14, 0x14, 0xbb}, 0x40, 0x4, 'lblcr\x00', 0x21, 0x63, 0x2a}, {@empty, 0x4e23, 0x0, 0x3ff, 0x6f}}, 0x44) syz_mount_image$reiserfs(&(0x7f0000001880)='reiserfs\x00', &(0x7f00000018c0)='./file0\x00', 0x2, 0x4, &(0x7f0000001c40)=[{&(0x7f0000001900)="6d739ced564ae736fc005339a1b75f1d22a0a6ec69feb7566cad3065cb4b636ff7b91c8b994510034b3092311173378fdef1d84e8fff0fcb837ff2267ff78a", 0x3f, 0x1343}, {&(0x7f0000001940)="984bf70ee0ffd13f56ecac1d87dc703ffca8a7c3a809352e96967e7acd5bee8dd62908fd5be3228efac00898410c5d0e6d0869e589650f7d166c7910ecf456e8978d41e63819dc24c28fa1f4fc635341bdf8b656db4ffea9b0118c05f7a5e11125665b71d78425d08f91cc1d23f91a20e0bdad5c85d72fb41723a525cc7b08d7870404f3dc315b167285fece09a7aaea6dcdbb23d43b87da59ced9b34dff52fdfd040ca010f20150b83e32fffd25850bf12d3358604f04d3cb3d0e086b80083a4fbb29c981c8b474e0cd440d4f4f1ac1c3183966617c42f6", 0xd8, 0x2}, {&(0x7f0000001a40)="8688d6cad7c81664bef254f14dfabd15af4a59200b964222e651626f96af0067f23cbaf008de687e32225eaf1c9fc517b84cac2a7fbfc054137043acb477dab81c20f36e6861a21e3c1f63d7b988fd621a85eef1187dd8dfe691aacca5ebc5c25e96118e68443551ed1d681e7e966bbb1149f4b252a5f1c774c3b60ce77396d6b9525514308598d38ce29dae84f1bf28a1765f41a0b4eb079be5697142c04754b7d0bce165ff21a4bb96c0cb3c686dd4132d36e5c8dc855f261b40cbe513feb97e14e22e3538da68780219e781c7793532df53ec0293ca00f4006de9322a198283e77dd7e8beb9ae0f3adc6bb26a2c77fa", 0xf1, 0x100000000}, {&(0x7f0000001b40)="da49b0e0f19c615269632569a2626f4b43987eb12bd76fe6310254ba88248202e55c1fcbcd475799b5261262e73c165c3b2d78534b6f382418b92910d3d5a7eca5be4b056786fc13b8a0e5cc361fdd77b4163016b32e3025c951583ab4c41216f63bee70fe9901ae4b1720028cb468bed769f85ba5fb9046de88370d5fce22805f2104f7362cd694aa94ecc132a4c306cbaf62296e500615b6fafcd8d98fcd0223791c29524daeb6789f683ffb970d9696a6710a84cda46225d826c6ef643122d1033adc285cc3bdabbb77cb01f56284e8abe1bfe27651fa3c0d99841087d8122814a5ec796c5a475745af5ed918f0d1849139075623", 0xf6, 0x400}], 0x10088, &(0x7f0000001cc0)={[{@errors_continue='errors=continue', 0x2c}, {@usrjquota_file='usrjquota=syz', 0x2c}, {@tails_on='tails=on', 0x2c}, {@nolargeio='nolargeio', 0x2c}, {@hash_tea='hash=tea', 0x2c}, {@replayonly='replayonly', 0x2c}]}) sendmsg$alg(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000000080)="af7482914e20e061d104bed571cb613eb9ad054712d261dbbddf4b9e3b25bbe4e8bfd12ac20d382dcbd66ffe0f059fc5d35bc0a9ed743546f9b1e721e64731f81bf794f150c6a906d0d054d4e7ad6760b70d6ad5a33213088c3a046c56a7cbf8d2ccf7c311902ee5349f9afaa7bbac54142e94b9733bb23b389e638f74811e7c8e3c5770b2867b7cab9acdb629", 0x8d}, {&(0x7f0000000140)="f776a376cf36b72913f3b3fced89a12f81733425fb9ac90f0c8f73c0d7bf184396e3682858a8aec7299fcf0efcc72948b1ed13adf17ee0f072961a97b7bf37b106c93bb56371d3f5dcf29dcc6693fcfe0a9c6ec6fea80a4b2f84284e37c451937483c895889c62f2d6093f9f3f8a6e510708a7dc7460016fd1c47ef39c3407f310cb3678d553d21a3acb313bfe35190e3709169378ccf5b2465d6eca5266cf72dd16f58aa13cf6acbf6c6302284b4ebe7e82ae6e452194dbd6", 0xb9}, {&(0x7f0000000200)="490d4f34abc3944ae0c5805659fcb9bec2f5cd0f1d5c0744175e22d4e93c3c529f21b04980df8b8e4161e0d150412a3a74c8af424a6d15c483e138bbe2972db025b1f08db1f1dab0fe18cbad97c4567d7c943a2aed0d288f532db34cb6d233425d958aeff89ac65421521bb8a9d2ca16dbdbbe5978d8535ac3b0e800", 0x7c}, {&(0x7f0000000280)="4dca16277205f8f5fee87080053ac76203405ab9fa6378c6bdede47475ef390526710d0d6ce675c28bd50caffffcebe42b1c5b82831a189cf17c885b063c07da8470a910ab846b9edd8adc1643ea447923296053f6571ac4b9541f443d00bcb5007d4d164d549697a65d2b26c2b079409351aff1b72c4a06e01301eb31badc4e1f56e863f50f6aee7102e4b6ab582e5a11e6a5f508cec25a3716dc2ee560b82a00789433c02e4dd7090d8b293184afa61b87f0da476c2e689f5db9046f18fe1b17993883cd4e081ec8d56d70566d02dc4814d10bf92185cce86fa24fde75b36895aa", 0xe2}, {&(0x7f0000000380)="41a28aa41a9264f75fc655430c38afb43d56e7cb66be1833e3499ddd71651082976bad8d07e81336ec9a3c6d80b15a8ba9908186325658220681b672fcd0f684c2b45aee6933bd1a2c9e032db9225e97af9b68e8f6b1d0a6790f097b58ecf31b9bc6b0", 0x63}, {&(0x7f0000000000)="19d4300acd", 0x5}, {&(0x7f0000000400)="a9926c703af43658b18a7c5af7345dda94bae0208aa85ee3006fb7901833ddaf52cde4e0134b5e32056d5bd3310ee0fe69e28874424aa0cdcf769b9d4e2390e68ebe9673d2461673964d7745b71b29f2d90582d9fcfbdf8d91b0ec3001009b835b3b76ca4ccf6656ed9c85571fe4cb0c14e6da56aab949455e29fef6fa1bd86a7e19c284d28ccc8bcd371a8e043244085892212140a4e41a17c83423a537716d2757a01f735e", 0xa6}], 0x8, &(0x7f00000015c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xb0, 0x117, 0x2, 0x95, "ab5a60febd357259a81ff904338bc718e52dbfc5e2d9c3518aca4cf2cf31691da6634a185a825c37306e24d09e460def786431afafc1837ebd607167e370367016b8e886a8352e3d1704ec5e22e1d39134c8b174139e0456c8cabc303fb0b371c0badf7632e93440220a8294be96601aef74db84026f1bd1e4e32c805139032060db50c7880dea08111c5bcf1df20b1bc4640b8e5b"}, @iv={0x60, 0x117, 0x2, 0x49, "57d2a2d956fe145637cf41f83de4f3fe7364ba30fc954d1c3a58793017c099e1b0f42a30beb59c00a852c41fe3660cb419c3480898245f5dc4d79183f5c02a585f152fb0d76af7c067"}], 0x128}, 0x40000) [ 1051.777731] binder: 32721:32729 got transaction with fd, -1, but target does not allow fds [ 1051.797075] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:33 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000014000)={&(0x7f00000000c0)={0x14, 0x1c, 0x301, 0x0, 0x25dfdbfc, {0x7}}, 0x14}, 0x1}, 0x20000001) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) 2033/05/18 03:46:33 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1051.844017] binder: 32721:32729 transaction failed 29201/-1, size 64-8 line 3068 [ 1051.854597] binder: 32723:32740 ioctl 40046207 0 returned -16 [ 1051.870398] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 1051.870398] 2033/05/18 03:46:33 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x13}, 0x7}}, [0x2, 0x4, 0x240b, 0x3c08f03b, 0x9, 0x3ff, 0x8, 0x8, 0x8, 0x5, 0x3, 0x9, 0x19, 0x80000000, 0x9]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={r2, 0x7fffffff, 0x5c, "db64076a0e743c4a584882bf7cf495e63ba359ce33ca7df9b47686075280a59b6522c505367d0362483e6d6c1f87a7901bbe0912e1fdb72fb6e2c27b82000eef4b16cd23dde0b54f0a167e6ce645f16c2e78304ebc11b8f1167f382a"}, 0x64) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@loopback={0x0, 0x1}, 0x58, r3}) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000010ec4)={0x1c, 0x30, 0xaff, 0xffffffffffffffff, 0xfffffffffffffffe, {0x4}, [@nested={0x8, 0xffffff9e, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00000000c0)={0x6, r0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000080)=0x4) 2033/05/18 03:46:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x64, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000480000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1051.977326] binder: undelivered TRANSACTION_ERROR: 29201 [ 1051.991239] REISERFS warning (device loop2): reiserfs_fill_super: Cannot allocate commit workqueue [ 1052.018215] binder_alloc: 32721: binder_alloc_buf size 2881923055656 failed, no address space [ 1052.026987] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 1052.035744] binder: 32721:32729 transaction failed 29201/-28, size 2199023255581-682899800065 line 2963 [ 1052.082376] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1052.092719] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.098257] binder: 313:314 ioctl 40046207 0 returned -16 [ 1052.108868] binder: 313:314 got transaction with invalid offsets ptr [ 1052.116885] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 1052.139171] binder: 313:314 transaction failed 29201/-14, size 24-8 line 2991 [ 1052.182368] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.196109] binder: 313:319 ioctl 40046207 0 returned -16 2033/05/18 03:46:34 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f0000000180)=""/251, 0x40f00}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:34 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x6f00, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x7, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x404000, 0x0) r2 = getuid() fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000400)="e62da825412d7a10d633eeb433fd36afffccc5862d12ee21edbc3ad559fcef71a8e1a242e30054fcc86d29908624ed93015c5b41458a99d9121e4d3aa57ecfb12a0c7553484793bee1f693213cba059de01f2ce12c8fc5e6d37107c420d8f086b4a5e0b7feff19cec76711d6acfa1408aec36ebd626ef57a8ceaf5625bf4bf7b39b34b4d8f1da502e104e0b70e0a855f49eeaa8d6e4872ed27433126e0816bfb1413eb98392a033c1c5c10f6af93c5aa6ebc2ca27bc66d951b117143bef029f4201f8bfa2de68b9ccc1cf803f7ba681ea1", 0xd1}, {&(0x7f0000000500)="048270e364ce74bebc9efe2bd73a6e9b89cb62f8ac982a9cdc40e5095176693c9841df0c20f14b7a48b99ced987ead0bb78f3e001da2af95fa17d1232e617630d7a07130a7c83a96fe314e196c828a5be9fc1cb3c1b82e1419f650ace63781e788daac36883b544889af515e38bbbe3a96c266a96292f8f81041e7eecff4445e0f8716e10232f927aa2d00adf5bbf11c4342acbc3e0c883b7ba6a20f51567f5f90a3e063706c258c686a88a1dc8b8e26d2e3630a09ce7d0f92a69d573d6dae7ec3b9f2f0824fa5c31393780d73e24a0b6c66dfdfc3d07a7be0beb9ceac514edcf88160", 0xe3}, {&(0x7f0000000600)="8cdc84b4d7e4649cf4c4d32a5aea7111e9bfdd2332792a46e6d8f5ba8a521d31abe2fd2a444607686edb28be1fef680028f70712974b627c49f1c5053067171015eb19ca4ede9a6c1b0e36e3de0e415380af874db5966e96f8f339acac538f4c38eba917346d182bee300790fece55040a360c23ff04c809244d210c8401d0e4cf32e3502b88f7725a0922c20f071be60abb252015a0ae4d20d3457df38f2e5e6ecd4e3d99f7", 0xa6}], 0x3) fchownat(r1, &(0x7f0000000300)='./file0\x00', r2, r3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x40000, 0x8000) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x6, {{0xa, 0x4e24, 0x8000, @mcast2={0xff, 0x2, [], 0x1}, 0x9ab4}}, {{0xa, 0x4e21, 0x100, @remote={0xfe, 0x80, [], 0xbb}, 0xa7b}}}, 0x108) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r5, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)={0x11}) 2033/05/18 03:46:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000001bc0)=""/235) r2 = accept(r0, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000001440)=0x9, 0x2) setns(r0, 0x8000000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) getresgid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0xa000, r3, r4, 0x0, 0x7, 0x2000) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="1c000000170a010027bd7000ffdf25080000000800020000ad03000000750c5311cd475d751dd6a9b0deb1b222ca363ea9ff7a7c1934f1f60a0cac3efca405f69b91f5497a3e6d55295d97d3c3dd4f4c298a3e94752c9a4a68263a09aa17e1a998ae6dcde97f793f6bc9b0d22f0fdff04a5bd516e480db2c6d781d53da8f6b7a1a4ffb393f50a1e8705bcc54324d3257d032f285a201b2e87fd9fe4f1c60914db7de61ed7d05308a584bc15d41ecae979053c4d6377852aad2f3cb5f670a8d30430691603b5547408c7c7095d634f77afc", @ANYRES32=0x0], 0x1c}, 0x1}, 0x0) preadv(r2, &(0x7f0000001a80)=[{&(0x7f0000001480)=""/81, 0x51}, {&(0x7f0000001500)=""/165, 0xa5}, {&(0x7f00000015c0)=""/130, 0x82}, {&(0x7f0000001680)=""/121, 0x79}, {&(0x7f0000001700)=""/243, 0xf3}, {&(0x7f0000001800)=""/75, 0x4b}, {&(0x7f0000001880)=""/238, 0xee}, {&(0x7f0000001980)=""/195, 0xc3}], 0x8, 0x0) setns(r2, 0x0) bind$vsock_dgram(r2, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x125c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000040) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000440)=0xc) waitid(0x2, r5, &(0x7f0000000480), 0x80000000, &(0x7f00000004c0)) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x800, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000001cc0)='/dev/snd/midiC#D#\x00', 0x3, 0x400083) openat$vcs(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/vcs\x00', 0x80, 0x0) flistxattr(r6, &(0x7f0000001e00)=""/128, 0x80) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000001b40)={0x3, r7}) 2033/05/18 03:46:34 executing program 5: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="007c5edabc49fcdaba18f11f8d39c6a8c472b0197f53eb6e30ece613bb34ed711ebef3260a309729e78b7558b25e19269bfd5c8297d620f28142fb2e243c5a3af67b4d6ebaa716d7ff838846956cc842bf0700107d9f1af2b73786e51105f2db851d0b4c145e18382c25e60c612f9a25f95f5c84d74e8da369350f21377cc73d06fabd4bb0fdbafb80e8c6e9ff7cf5b12c09af6bb080035285c68189c2784731e204543cc7051e5ae45c80a3541ef9f3763201e0636988d952"], @ANYBLOB="010000000000000000000000000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000100000000000001"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00']], 0xb, 0x0, &(0x7f0000000280)="0e41e97e00000000000000"}) r1 = syz_open_dev$loop(&(0x7f0000308000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0xc0481273, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3900ea631d00000000020000010000009f00000023f7b7d65f90b0e6330ee739b319d8f6aa6bd58d1443474482e85040fb4947ebb55bd19f335b5bffff0001f3", "cfa430745a540dc1c149b7b81579f6a41c51f7d51933223e82ab867dac761faf"}) r2 = socket(0x0, 0x0, 0xc) write(r2, &(0x7f00000001c0), 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000003c0)=0x200, 0x4) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) getpid() perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000da9000)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x70}, 0x1}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r5, r6, r7) r8 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x1c4, 0x0, &(0x7f0000011f9d)}) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080)=0x23, 0x102000004) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000002c0), &(0x7f0000000380)=0x8) openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r9, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000100)=0x68) 2033/05/18 03:46:34 executing program 0: mkdir(&(0x7f0000796000)='./file0\x00', 0x0) r0 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = gettid() syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x111000) rt_sigprocmask(0x0, &(0x7f000003b000)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setownex(r0, 0xf, &(0x7f0000fa4000)={0x0, r1}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) dup2(r0, r2) r3 = signalfd4(0xffffffffffffffff, &(0x7f000029bff8)={0x5}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000055000)={0xffb}, &(0x7f0000c5bff8), 0x8) r4 = getpid() r5 = gettid() readv(r3, &(0x7f0000939000)=[{&(0x7f0000fc7000)=""/128, 0x80}], 0x1) tgkill(r4, r5, 0x1) 2033/05/18 03:46:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000006000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1052.228735] binder: undelivered TRANSACTION_ERROR: 29201 [ 1052.239360] binder: undelivered TRANSACTION_ERROR: 29201 [ 1052.288795] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.298044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 1052.309772] binder: 327:329 got transaction with invalid offsets ptr [ 1052.316699] binder: 324:334 ioctl 40046207 0 returned -16 2033/05/18 03:46:34 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x543], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x6f00000000000000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:34 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) [ 1052.336859] binder: 327:329 transaction failed 29201/-14, size 24-8 line 2991 [ 1052.348596] binder: 324:334 got transaction with fd, -1, but target does not allow fds [ 1052.356891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. [ 1052.366849] binder: 324:334 transaction failed 29201/-1, size 64-8 line 3068 [ 1052.407586] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x20800) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="9cf6b25127b26fa6abb6") perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00009f5000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x14, 0x0, 0x4, 0x1}, 0x14}, 0x1}, 0x0) [ 1052.432451] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.445715] binder: 324:334 ioctl 40046207 0 returned -16 [ 1052.468897] binder_alloc: 327: binder_alloc_buf, no vma 2033/05/18 03:46:34 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x689], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:34 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000001005a00000000000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x5f020000, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:34 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000f8ffffff00000000000000711000002846896961b6ef7e000000009500000000000000acc3323f4eed2c8c9fc55e84f043dd4319d6277f605e48cc1d33e97c62021f0b183226dee00d48f6"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x140, 0x0) accept$packet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x14) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfff, 0x0) syz_open_pts(r2, 0x82840) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) userfaultfd(0xfffffffffffffffd) [ 1052.474404] binder: 324:334 transaction failed 29189/-3, size 2199023255581-682899800065 line 2963 [ 1052.478336] binder: 327:344 ioctl 40046207 0 returned -16 2033/05/18 03:46:34 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:34 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{&(0x7f0000000640)=@l2, 0x80, &(0x7f0000000940), 0x0, &(0x7f00000009c0)=""/27, 0x1b, 0x1}, 0x40}], 0x1, 0x0, &(0x7f0000004400)) r0 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x8042) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x7, @empty, 0x9}, {0xa, 0x4e24, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x4, [0x2, 0x7f22c3aa, 0x6, 0x100000001, 0x2, 0xf81, 0x5, 0x996]}, 0x5c) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4200, r2, 0x4, 0x2) writev(r0, &(0x7f0000000500), 0x1f3) 2033/05/18 03:46:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="116348400000000000000000004c0000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000d35000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) fadvise64(r0, 0x6, 0x100000000, 0xd) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x4, 0x357) r1 = accept$alg(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x3, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) sendmmsg$alg(r1, &(0x7f0000000040), 0x49249249249270d, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) quotactl(0xffffffbfffffffc0, &(0x7f0000000380)='./file0\x00', r2, &(0x7f0000000240)="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") socket$alg(0x26, 0x5, 0x0) 2033/05/18 03:46:34 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0xf401, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) [ 1052.626216] binder: undelivered TRANSACTION_ERROR: 29201 [ 1052.660496] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:34 executing program 1: syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x9, 0x1fffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000040000000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1052.747189] binder: 383:384 got transaction with invalid offsets ptr [ 1052.768092] binder: 383:384 transaction failed 29201/-14, size 24-8 line 2991 [ 1052.812863] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.824088] binder: 383:395 ioctl 40046207 0 returned -16 [ 1052.852746] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:35 executing program 0: capset(&(0x7f00002d0ff8)={0x19980330}, &(0x7f0000cc0000)={0x0, 0x1, 0x5}) prctl$intptr(0x1f, 0x1004003fe) 2033/05/18 03:46:35 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000000000004, 0x202, r0}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000220000b85a0d0d4c3e3564a9808dbfe315bec5f01443edb011057790eacfda400fcfb709601dfbbd783fb8e397095ae13360dfc838c0b6450060b70be653958481b2f0fad8ec577158bb14f02d78eebce1eed627cb78624489cbf99c53dfd1c05054bfc8c7f11fafab9d3b0a8cadf85f802a92e20cd33d4dc75878d3d873f1dc50f669588f5197c6ab626e572a694ed7c74324a2852aa955e4754411d45160f4a862655949008d5f4ef75d753dd51c12934442a89776f5f256f5f8820355620982b1819d8c71e3d1ec3a4664a598b9c26ad3785913a8c4fc0bf9888843e54f50a10f9d1376a7a72004baee8054f391c22feb"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f0000000080)) 2033/05/18 03:46:35 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:35 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x0, 0x44031, r0, 0x0) pipe2(&(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='\x00', 0x0) syz_emit_ethernet(0x2a, &(0x7f00006ba000)={@empty, @random="e2701bb60589", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000ea3000)={0x0, 0x4, [0x0, 0xe4e]}) getsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000140)=""/224, &(0x7f0000000240)=0xe0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000040), 0x4) keyctl$set_reqkey_keyring(0xe, 0x7) 2033/05/18 03:46:35 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x3]}, &(0x7f0000000580)=0x100) modify_ldt$read_default(0x2, &(0x7f0000000940)=""/75, 0x4b) perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0x37e9, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001d0000000000006b4892d9ac8b472fab84cf7729e76141b68e82e19fecda55cc0649ae3415"], 0x14}, 0x1}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x1707, 0x100) accept$ipx(r1, 0x0, &(0x7f0000000080)) rt_sigreturn() ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f00000001c0)=""/44) 2033/05/18 03:46:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x3400, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:35 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x8, 0xfb43, 0x9, 0x4, r0, 0xfff}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000074000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(wp256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6edd4ef3a8154d413056b2d77463b30a9c65e84a328b7226d841b106353bd1d734bb1a94b70acc9c2a403d557c50a2e2d7696eebc14ff4e7d0b077de90eac6bc06", 0x41) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x101000, 0x0) r2 = fcntl$getown(r1, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000180)={r1, r1, 0x80}) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x60) 2033/05/18 03:46:35 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000800, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x4}) r1 = userfaultfd(0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0x8, 0x9}, 'port1\x00', 0x87a9528632567e45, 0x40, 0x5, 0x400, 0xfffffffffffffff8, 0x4, 0x1ff, 0x0, 0x6, 0x6}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x5}) r2 = memfd_create(&(0x7f0000000040)='/dev/urandom\x00', 0x2) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) fcntl$addseals(r2, 0x409, 0x0) write$eventfd(r2, &(0x7f0000000180), 0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x2181c0, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$fiemap(r3, 0x40086602, &(0x7f00000002c0)=ANY=[]) name_to_handle_at(r3, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="3700000000000000fd428b11fc1020adb8c62d8b0f55443cb2087ec75f802f9f24025a901dd3c33e34f2c01ea3f41dcf05ee2830df62955fc1"], &(0x7f0000000080), 0x400) truncate(&(0x7f0000000200)='./file0\x00', 0x9) lseek(r3, 0x0, 0x4) fadvise64(r2, 0x0, 0x836, 0x7) close(r1) r4 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) kcmp(r4, r5, 0x5, r1, r1) 2033/05/18 03:46:35 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1053.128107] binder: 402:406 got transaction with invalid offsets ptr [ 1053.166668] binder: 402:406 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:35 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000710000000000000000009500000000000000616d8736edeead861a532435fd6a"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1053.213193] binder: BINDER_SET_CONTEXT_MGR already set [ 1053.246322] binder: 402:422 ioctl 40046207 0 returned -16 2033/05/18 03:46:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = geteuid() r2 = getgid() fchown(r0, r1, r2) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, 0x2, 0x7, 0x4007ffffffff, 0x0, 0x0, {}, [@typed={0x4, 0x7}]}, 0x18}, 0x1}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000100)={0x2, 0x7, 0x54d, 0x4, 0x1, 0x1ff}) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @reserved=0x1}, 0x10) 2033/05/18 03:46:35 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x4, 0x1000000000000004, 0x202}, 0xfffa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18002685d82f54ff358c990c00000000000000000000000000007110fe0022070000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000180)='bridge0\x00') io_setup(0x7, &(0x7f00000001c0)=0x0) io_destroy(r2) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x80, 0xfffffffffffffb6d, 0xb16, 0xffffffff, 0x20, 0x0, 0x8, 0x5, 0x0, 0xd77}) 2033/05/18 03:46:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x249f0, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:35 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88caffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000507000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:35 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x200000, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200, 0x0) listen$netrom(r1, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$KDENABIO(r0, 0x4b36) ioctl$sock_ifreq(r2, 0x89f7, &(0x7f0000000040)={'sit0\x00', @ifru_hwaddr=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) 2033/05/18 03:46:35 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200480) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x10000800, 0x40) connect$inet6(r1, &(0x7f0000017000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f0000016000), 0x0, &(0x7f000002a000)}, 0xc100) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000028000), 0xffffffffffffffb3, 0x1}, 0x3) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2c}, &(0x7f0000000080)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@dev, @in=@rand_addr}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000000100)=0xe8) timer_gettime(r2, &(0x7f00000000c0)) 2033/05/18 03:46:35 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000001, 0x2) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1d, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f0000000200)=0x14) r2 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e22, 0xd1, 0x4e22, 0x10001, 0xa, 0x80, 0x20, 0x3c, r1, r2}, {0x800, 0x1f, 0x200, 0x8922, 0x6, 0x9, 0x6, 0x5}, {0x9, 0x4, 0x9622}, 0x1bad0000000, 0x6e6bb3, 0x3, 0x0, 0x3}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4d2, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x16}, 0x3504, 0x0, 0x0, 0x1, 0x8, 0xbc, 0x8}}, 0xe8) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000180)=""/99) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000002c0)) [ 1053.342148] binder: undelivered TRANSACTION_ERROR: 29201 [ 1053.403227] binder: 446:450 got transaction with invalid offsets ptr [ 1053.416652] QAT: Invalid ioctl 2033/05/18 03:46:35 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8035], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:35 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) sendto(r0, &(0x7f0000000140)='u', 0x1, 0x0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast2=0xe0000002}}, 0x80) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7f43, 0x20000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x2) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000880)=""/209, 0xd1}}, {{&(0x7f0000000240)=@hci, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=""/240, 0xf0}}], 0x2, 0x2042, &(0x7f0000000b80)={0x77359400}) 2033/05/18 03:46:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x493e0, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000288fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000282fef)="1e336500ff4ad5e700000022000000ec", 0x10) accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f000000a800)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0xfffffffffffffef5, &(0x7f0000001540), 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) 2033/05/18 03:46:35 executing program 4: syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000001680)='/dev/midi#\x00', 0x401, 0x4000) getsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f00000016c0)=""/255, &(0x7f00000017c0)=0xff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000001800)={'raw\x00'}, &(0x7f0000001880)=0x54) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000180)="94d4fcc25f1ff02ec5e736f4893fd13dbd7742d72c4713c5bf182167ef35cf5d3d88fe125e650919ec", 0x29, 0x401}, {&(0x7f0000000400)="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", 0x1000, 0x3}, {&(0x7f00000001c0)="2d2cf9f89fa0182ee2f83c7a040297a91824763e7134a7a710f2b87c74186c24d6a3f5875ffbce510365952a2365ec5cdeb620e01039c83050d5a5eb7f1785ba3222113bfb9267a8a5c4b0907cbc4ebbc5f7fd9411caee5208a3f1e0c0216f7170547db4051768c0a9d852b1d26626da78dd870b4486ede664399c8d698c703a", 0x80, 0xffffffffffffffff}, {&(0x7f0000000240)="cf26cb574140fa2968bb01d9b85ab26b114a02922bb0fb9ae9", 0x19, 0x8001}, {&(0x7f0000000280)="a3d4c91d8f58662f053a82f6242f2add9960fba0f57203d3eaed10afcdd4aa28f91e9b4c78fc827f7453477fa8788d352f6e9cff0886a4f9c27583a5847f32073da2be3b97093633ef36bed0b40a398990e7e5b5d54b1e2f6b2a219eb4b1d07e03f0b5e9e8d043088d450ad24188755e136ebd17b0df5965078ba78864122c3745575880147a00107abb219a5b02d8243d4b63f3d63332667c53291669f6d12828eedc68d71403d56a07127cc4a6552808ae4e", 0xb3, 0x3d36}, {&(0x7f0000001400)="4c5f9bd293257732c2c7ca7b1ad56adedc4d8f6300745e05235823adbad664559de65bb35c17b708aeb177ee80354c46d0f59f27b1cf1fa69cc08e1edc2a08035df0739cdccac75a5e9e9562042e7df50cfef498fcd5e22753c079aeca394db09d4e5436fdca1b64315ad89eb7195805d0315c5f35d589ecc9de02a7991bac2c40a628d942b251cd0a76", 0x8a, 0x7}, {&(0x7f00000014c0)="9378e8fae329331981a71f2e418196932e70ecc620e592b9b0f042ac9f4b921b93aafaf9d887042221d8f913b1f4a7cdc0afd7964bd4627de8e1fbc1fec7d07b06724db42f9212dca8c11819c0c8e9dd8c6e39f3e188cd48547dd99f3e6d217912e682bd49117f89869530026400b21ddcd5372144285269eb8cce5b49af5c1f31f4708e8a0f9a8f9fe79d6e71a23466ad2e50f4f92a97c4f27f36d9ce9be69d1dce3731584797cf8d69e39a00bc30dead789a63d7414cdcf55785861c703cd2f2aff8178dbc8ae8cad00fe9dfb933945ecca8cdeaada7494e2e395635d57dd49e84b28ed38a34a7d46cbd620f91220d1f9f5827", 0xf4, 0x8314}], 0x2010000, &(0x7f0000000340)={[{@autodefrag='autodefrag', 0x2c}, {@subvolrootid={'subvolrootid', 0x3d, [0x39, 0x3f, 0x0]}, 0x2c}, {@flushoncommit='flushoncommit', 0x2c}]}) [ 1053.448742] QAT: Invalid ioctl [ 1053.452753] binder: 446:450 transaction failed 29201/-14, size 24-8 line 2991 [ 1053.470809] QAT: Invalid ioctl [ 1053.483908] QAT: Invalid ioctl [ 1053.487211] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:35 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r1, &(0x7f0000000000), r0, &(0x7f0000000040), 0x5, 0x5) listen(r0, 0x20) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d76a81014aed182f30a84470080ffe00600000000000000a2bc5603ca0016087f89000000200000000101ff0000000309ff5bffff08c7e5ed5e00000000000000", 0x48}], 0x1) 2033/05/18 03:46:35 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x89b7, &(0x7f0000000080)={'teql0\x00', @ifru_settings={0xe948, 0x5, @cisco=&(0x7f0000000000)={0x5}}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1053.531152] binder: 446:466 ioctl 40046207 0 returned -16 2033/05/18 03:46:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x5400000000000004, 0x84) sendto(r0, &(0x7f0000000100)="77f028e44672f924490229c70a9121c3851b3dfe7fa4015f9b90ea4572f5673d89aac4e4bf77771764eeaaac0ffd629eaf2a06225703c5190738404a7ee6d25a53b2e237a7c7901fa8e68caa2acf09cd3fe67b2336242223e60a69928f7677c8cab270a98e3b4e87a8c639bf82a19a3f0f415b77eed76c4a7043cb", 0x7b, 0x80, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback=0x7f000001}, 0x1, 0x0, 0x0, 0x3}}, 0x80) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() fstat(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000001d80)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc, &(0x7f0000001cc0)=[{&(0x7f0000000340)={0x1158, 0x31, 0x112, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x68, @u32=0x9}, @typed={0x8, 0x67, @u32=0x8}, @typed={0x24, 0x94, @str='*vboxnet0ppp0self@usertrusted\x00'}, @nested={0x1114, 0x3a, [@typed={0xc, 0x84, @u64=0xa46}, @typed={0x14, 0x16, @ipv6=@loopback={0x0, 0x1}}, @generic="993ed99901350bde7beb18e9bd53512dc5e161d5007f10a8222e932963a42c5e85198c67eb8d438a182e95fc34eadb7b2ea1ec0bc986cf3702bada8f298d40af13d6e76b0d0e7372e3cc0394e101f23180d0d6521aea5f8f1fa02fdbc835eb84e1b186392def0a92d4dd2fc33532fcf2eba84b17fde0b209366faed5c8e2a0d07dde8061562765b3e12c168560c6", @typed={0x8, 0x38, @str='\x00'}, @typed={0x4, 0x23}, @generic="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", @generic="dfd3433a6a3419e821bc27d2c9e17f5200796ab67a497300a918ce9634170449c6eb62f2a1a17a6a0e90a610bff696ad5fc986a2f98b20d0b0dd57f8a888ce9772bdf3b4ae77413a2c6d3225a4b9f31279bbe085"]}]}, 0x1158}, {&(0x7f00000014c0)={0xc0, 0x55f, 0x420, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x71, @uid=r1}, @generic="0143afaa1c3d0809e934406c5fb40c293198de0445439b382360040bedd1a0660e69f947c1b91cfc2dd030c54b80d57155fc0b319fbf16c0d16b7e762d81b48d0e3619a53322ef35e574e998db4eaf8b8be49440624d84c6ffaefdaebb2b9513fcbe7f32b06af5f007d47d4a2bda8ba3d9f949358a4b8b145770c149774d140857983a7ce5a3aea6e58a096ab57368e91942d48b1da6c37c", @nested={0x10, 0x70, [@generic="5d77841883cdfa94ba66"]}]}, 0xc0}, {&(0x7f0000001580)={0x574, 0x30, 0x21, 0x70bd28, 0x25dfdbfb, "", [@nested={0x4f8, 0x7e, [@generic="ae704755e801bdfbe237e7be722ffe3a0827fb11729377aedc2e57ce4bb4b2000c6999f2c2e5f9b9f55d86e50269e3a5faa0544032ac92641a5ab9930dd053cfc6bbd761c1aecf911f8034af", @typed={0x4, 0x55}, @typed={0x38, 0x26, @binary="6370b5adfcd6335b27febe83400ddbbac67b34fb95f2d1e6d28c86bd8ec12c570c3fb2d00e283af46ff649f378d0b7a8b0d5e5"}, @generic="0e476116c2a5b375f99e6d38a000d2d995d2b50d3385e3643976a4b20c61311f9a8065b14a01678b7d7b3a2b977157d1f277be4cdf5a75cf13e29160e41b91c8fe579fa44386f66e75357997dd3db088d99542eb3fb211ebd9c42298bb30eb43dd9681b08e7b1799b59c7a0d30662ed454e41241c56caec7f8e447ff01d0542ff93c30845e92f1dba9a26520033a876dd2c5052e153a55fa988a6aa39f3df2627d2c1d58bf5d975371e28f6ca0deb809d44dcc0dc9b1d81fbc2b", @generic="016813d669120408e54edfe4cc34b91218bf3adbf25403b6c049807d5f8888994b8c86a8fac46ff0984fd2ed3648b84ecc9496368090eec98fc677f66cc36bf4bff940c119f8b539e42b9c31bbb49da686b78b24078f23cfdfa2e0462a64b8b9757227d6a10455cc4a46b4cf", @generic="33c0ef3f55b42599d439364c006713167a47fde2b687b721996421747e11914c8c7a2e8e867d8a4f0e3877fd43f280a57168e18a8122cbcd36cac7685c9a0d99e5d03942db171367543c21fc24be07308199504716286f2fe889e879ca7c62d628446149c3ff4d3be2d516095f779dfada6945d10af7f5349397eec95382952bf206ea6e8f4ee75435efde1be55d56cec8aa511cc81599ce05165f496711146a2f67e3a0fa94dc410243ed76daf63ec830c0f4ee92aa3d09b5b7cdb31a70216e825340e90c8efc2d529692f0272e69f44b", @generic="4fc98e60419855824f582d723a85de7a7470a9aa509d3f8afd2d1a927dcdea1e8a6809983e4ecc5c14a99a1966b54ba683fe9fc2d80d57216e963420cdc8b2c0262840ac5762fb62a30ca7c6e7897038d6257d00141235d91d2ee6779d09353dd5e8944df5c1ae719cb02b20a54342765c3730fe53192e01de004d19fa16efd3c341c85d68bcc79f775fea9fa1d86b43bfd5744f8a5d58fc5c5cdd47f2b90d5fa162a491c2d8448b3fd80e7a378bf21f674ce234e7a483c78d751a515cdd49c80511ff75cf4c8894b85f6a8634f67ea501db565e3ab3dd572eaf11153a8397dcdd2b193ad3f41e971940164102b8", @generic="98d852440ab2653d8413c1ac74b6bd1629e6bb8aeae904d3b79a09d303bcba3c1bd757111ab712aeb8ca9a74a399b4e38675b28f9e7c235731e72daa3d08c610de6cc05887ce4abb9c323365f23bf4a0476d905b28e04557b64f82ec615fe840b616093b1edaf2cf67789b85e0c93152cfdab7e540ae6795d2cb8cfd55945a45650b632c98a2f59b0168e495186b1917618cfd4999cefeb9cad281d9ea564587e9da9c979f08c7068b7664e69fba21ca76f60e", @generic="d60eeea869c2204793dd2bb2b2c939d6877ec07d80e218157342321a19feae0ddf619a0f0021952025df187853b2f149ad53c08feb1f843e95ce700a3ee7232da7d49086395a9ccd5adc2a66fb10eafe7d0eb63af1ab478938bea8cc6ce932d305e8d2b006c796e3460cfd7e1bab6906ce62298563b3242085cfd5e9dc6e71631f24c222f90257449449bfc877f57d14571a96f917ee9f2b9b704de82277263be8bbdd0ab587a5dc47829c75c026ee190873c0ab9a35d34fafb2cf1758a191a02a4afddab221645b3ea2fb792a5424caac"]}, @generic="495ae7731ec34ffd4ab2f9f4b69f351bcf99e1beee17b724650aa0ba3d94edeba04a8caa7c6ec79531ff9301acd4ae525ded56d8914748770b21e984ee05f4654672f75e1d7c7178a77478aa7337a9e022c3258e72ab72316d332dafebe0afb30a161169", @typed={0x8, 0x25, @pid=r2}]}, 0x574}, {&(0x7f0000001b80)={0x134, 0x1e, 0x312, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x18, 0x3a, [@generic="5fe8570b734e6833fdbf2dcdafb95932ca"]}, @generic="3424904bc892ce35d75d7d993321bf62fa9c6c13152d9731d7fcd01c66df3348a02c2d2a8c78", @nested={0xcc, 0x15, [@typed={0x4, 0x19}, @typed={0x8, 0x22, @u32=0x9}, @generic="183ec517ae09c9d14822de7cdd0f8763ae83fd2f0f56d28144b053d16980c2d4d55e3685477f8eeae612f4e470d801a975eb3384d1d04fda85d1144c49d83db7882a6022005c4bcf501ac0d181629b0751a38387d5a53f176d4675a08e753a2f3ea5d3376f7a06012c69b6b3308df46d57f0cc41450e801842974d82a147d07eac9274625274406d172e77ac1b99983bfad99a6e338562aadbf4fed39d138a9111a923a0badb621e4c5bfb8a0344a204363f01d05f253fb1e051"]}, @typed={0x8, 0x90, @uid=r3}, @typed={0xc, 0x6a, @u64=0x100000000}, @typed={0x4, 0x3c}]}, 0x134}, {&(0x7f00000002c0)={0x10, 0x18, 0x510, 0x70bd2a, 0x25dfdbff}, 0x10}], 0x5, &(0x7f0000001d40)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}], 0x30, 0x20040004}, 0x20000001) shutdown(r0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='$', 0x1}], 0x1, &(0x7f00000002c0), 0x0, 0x40014}, 0x10) 2033/05/18 03:46:35 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:35 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400d22a2800000000000000", @ANYRES32=r2, @ANYBLOB="080008008402000014000100fe8000000000000000000000000000aa"], 0x34}, 0x1}, 0x0) 2033/05/18 03:46:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0xcf, 0x0, @broadcast=0xffffffff}, 0x10) [ 1053.701684] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000048000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:35 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={r0, r1, 0x2, 0x3}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000180)=""/176, &(0x7f0000000000)=0xb0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000002c0)={r5, 0x1}, 0x8) 2033/05/18 03:46:35 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000}, 0x10) r1 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r1, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000dc0)=@sco={0x1f}, 0x8, &(0x7f0000000e40), 0x0, &(0x7f00000012c0)}}], 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x7f}, 0x1c) getpeername$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x1c) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 2033/05/18 03:46:35 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x543], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:35 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:35 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x110000000010) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', 'selinux\x00'}, &(0x7f0000000140)=""/159, 0x9f) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}) r1 = accept(r0, &(0x7f0000317000)=ANY=[], &(0x7f0000123000)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 2033/05/18 03:46:35 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x9, &(0x7f0000002500)=[{&(0x7f0000000100)="fcb0bbdd5a6f3def5e14d7fb9312296faf629fb958345ec14c33fd8d589ea3b8fb06fbd22a6e445c44bf36b49f6899baec53cabcb35e1048a07fd3cafd2c26ed647bee9e7bad046686c1d755fa6d422b43ba14711c3b3d01efed4d5d263c687c9e15f2a3af41f68ee28a8208ae2142f3f1babef44ff271cb642ca3f23cfc01578099fee01a92271c6afeb15e8aef5dc1ac1d5a7e7fa2", 0x96, 0x800}, {&(0x7f00000001c0)="8e1927609632f739b16a4cdca52756b30f741bc68e6ef7b3a128a079c89e5a5a26c386141a2eade1f2f0e51b6d407e6190d0c83c409e950a766d8aefcda00c268fbced0b64c7cf2c9571d67050bee357035e74cdeafba05c9cce3893608ec692da3cd9b4424f9c07a5a1e35cab907765153303e2f6ac4989e76d3d1b2590eda992629ad937a115af140e83c53f8029714bf7a0e94c16b013259263b1c6", 0x9d, 0x1e6}, {&(0x7f0000000280)="a73f431d3b914611c65cfa78e6878c593cde5c66be186a0ba6d0921e7314b7bd29c2916c0b00b7d7f0b68b3d4d8fde7361ea786d8ad518280b5132612473999691c4", 0x42, 0x4}, {&(0x7f0000000300)="7456d4383623bc721d4ef3c56a868a91f1237051d5fe6af4e37b8e10dcf424f51f9ab18812f2a8a1fb8b38a8fbe3de566263cae69eb63b3ba232033058d5a3c88195ad925024d6b74963ad013ea42992d89d1346268fef7f08e19883cf350a1818dcbdf08b630f", 0x67, 0x5}, {&(0x7f0000000380)="bc0957fac543b9ea2b4b6d1d91af3e292c0a757329c2e3ae990548dd8582b29ae690b4d8c46f", 0x26}, {&(0x7f00000003c0)="602e97a822904a46bb0dfe14c07f4fe13f464d451a79f85bf4f98df47539d7f53a49a29130f74696e5bea5d07affc1e816b8a20f7bf2f629a264e7c97acdba7a9513fe1dd040428113cd0ff28883dd9f098e1075936e8644496209e2a647bc2dc189b791a50b1eb5ef2f4df5a20da207a2", 0x71, 0x5}, {&(0x7f0000000440)="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", 0x1000, 0x1}, {&(0x7f0000001440)="9f1a8ca674af57db37ee9e7df48a3e0a9b8b7eedb600e735d4f4b63bbde7699b2f5ea9515be6fe225321ab5ba7f135bdde1a59eea8863120089d71c7642affd8155cdd8ccd5e27683d25cb4b79efa269cb52f36fa57c6a81ee8ae28dff4a4f446f9635d2f02573d1eb810fc383c177fa9a7a91001bec29ccfbd61f7ad561d235d74c8b0701e1a7f04ff81186f3412d747d", 0x91, 0x8001}, {&(0x7f0000001500)="f63c6825f7d5287b90bee86e904e1c69d4901aadfbc84592c1eba11fa51809a12563faea7640e3eb2f88a7b3a39abfd0b6dda3715d0896afd45539b65e48bd0a9a7726e754cd79a2938ebaf8db739e568229cbfed06409b0e3615f825631bb293f33ecdca0ba61867812f019dba6f7734967d5a9f9e42d66699bfb6c695995cebad9740958e6c4bc06dd7757967c34461bec571ce01595c47f556c15e6717274281061ac3347cc615ee328f444de6879fc0eb18d15832fa4080f437bdd3ef166f548fa09222e3a68f127484384bc6373359e67ca72bf64a12f28a6b60ece0f2406479be1445fa5b0aadbd01cf71419708debd5d15dbd8535e89996093352cce9920fe61b418bfd0c0701e86c8e4ed13e9a504be87c0003be55cd87ea7149ca5501d5f91b6b59dd858d7108a818dc5075b4c0b4e8cb501a7b0d3bbf4d9e7e7e1623ea4124cf0dc377890d8c1e52570d7b74aba5188b4bc09c0f97fd2322c7f087ecf81f2f0d7ca90cc6b16afbb9365dec559cdb2219d0118a263785dff0331a1f4a151f41c5e3f5d9e49a3a1a04eaa67fdd3492b185beb8e7f8f787650b18659459bcfa148152335e6fe255dabe7b4fa0baab78eb823fd22a38f08fc890af4d89ba287e354fa6224931ae83f3d3b875e005733d84482ccac5e7dfdd492aba915729705c4e340deec34a81838cb5302131d062ee8c16013ebf0a9884574e171db7e1554fffd036d2e2137567f5309c8ff2b4dd89d6beaa5650ff77a664d6103d5b2027509537c17099f327bdac5e42344c64c559ba9265f358168e8df4d2e4d727952e9516bb00286707153ca1f48ece7727aadd8252438b35e75226dcf4202e03b7ddd19deeb3c6505af7058e713e31c51806a61af8530e6bf868d11014c3d7824f4f875262fdbc4013ceea297ab004d1fdee877c4a5b92c92e1e519863c2f541f6031be77ffe614c75b3ef62d8a96fe7bd25baca788b0216bfce64ac0b79a48fd4a78819a6e4c54b3c280a6b6e872296f090d278197c0c8ce42d1bec4d688630ba797d956b0de9d0a35e3674c55f00ad43818d3c63cad26e18b79769fd28a54a41310e22d4e3639ca2338cc835b69019c593e3658300dbdbf156f044332203853aaee7ab04f813487748ba2b213a8372fa87f2c2559c629fc299decc7b6d663a9300a69d1a38169d33e7aa8409ec5465126a00f3d3413611019d1e70f3c17760860dc61f0e50509236cfbeb52bc55ec85402c54d9ef1711b1de2e177d73c93339a11221174d6d89bdc0010e9ec64398c43043852a27d78c97bd21b88a8f8c728bc3f12568a0dd31cd7bb3ca3ef713d69ec9b1ca6323f9a70e473d6122ac9305ce0dd55c8462298c9c829c91ee26965f92cb0caa2eab76eec82c208fa9f89a76dac10d1975c0f55f1261f481fd7f4e764644c2a025424f4e2c82ac4418d2bf35a693d950e8e972841516e9155e44dc85ff6ba1d9161a70e9c8c32fb1d7882404b4244c8320ba54a0c89754ac4fda90308f977322fd8cfbdfa275592e5e6b391ade256d627d0445fad21462693fc9c9f379c828dbd9f58f72035b73ef89b26a336ba626ad129a623498668924f0d83b32c3e0fe384c965a05009dc3395c668217ff0a498fd0f0e8b6543db8e3fb90c88f8f8f3cbb477672eef2a6af5e3cdc38ccebad81bf453cae57fdfb8731017766feed299c1659a1542ba6efe9831c41e74f446bd390a5af88ff568ea0148515b8e496287f84e1c548d90319a39dde1baecb549b3022c9fa6f882bb6ceb82aba35aa45b338c1bf3eed9840f78b7abe1cc35dd688033aa00b5716a95b88c9deafd13b18024080e9991ade710b51a9dce89dc9c077ed3c37526f24ac4969d6aa59a1831db15bce2ae18312f3aa461972c83d9bd82770d9e3dc19f60595dca5744e660d52f70933af1a2b27764b8b023bba2e7e068aba461a102f49a53c28073af2c4069c99dc7edd1058115a077acc6711009eedb25bbe87dddad1898c40855cf4ada1b07e367ed9971ae4efe22a709ad20461cf89e90e5ec8d0562d6d4eefed022289f39bbccee3589dce61dfe2967d28fd7f5fc98b9cfb6eaa8788a2db4c4f622e6c9f70c0bd7fccc14add74a61d984e48e285a84996c24f5f06a91428326421a462fba8106a4aa18707455d7f5937a72cb16e46e8a1629c70bb1404b1ba71c1f362279842765e99b2555dd6ccab7661b59f48fd5ec4e30325a7611dad3fd073483084cd120be7be413740ccc913cf34c07c441adac18f20409584e82c4398c14e83e0aad7961c231a3688a1e9f58833841ca12c57e21d119e403e5f60d95718401dd9a853c0508af9f81cc4fdff8f6f07782ad92d0d3921c110a8aea3ba96f741903650e5594b73ad8d46e2ba9ee0860f7bd72dd0a3731f81fcf9424b5a4a64c57e39e855c303de4ae3b1a14cd8a247458e301a38cf69559d2624eb04d36eb86bb1505e01d8235573bb255bdc27a2c17a2d76e8f091be58831578866891be50ddc861c253910d452e41ad4862651e9cfe80108d575596f90984f2cc9e80c0ae9619db0a5d3242c6b817aafd97ce0c591137de0b28f825e79918d3fdfb41b12f464bc7b872408a3bdc28c114bb8b5b7f3e9ccbc4efec0657366cee0f84e3cdf4ef162f8cdc9a007cc8918d0062ea606c1f250bf3d577a16339c392017bb895596eac1ee1ad318b37f01f5b90094dc1e4e20085c6e49b12cfaf963176ab985930e2153976a757eecc44b4bafec82672d49329b7a73ac9255579b31323882eed56935272d0518fbd9e4708488444871468d2dc08e43e7fd33327e02fd9b887db664dd2281c9905efb166e73d9fb76bf47f474963bc1c89a60e26fd3765d1391c40733a9bad57da28d93d630793070373b2c29d525ad0b269ed9b5bbefc385f674126e21bcd5c3aae34b76b54d5630ba9ce1df5d366975890fd4e40ba7639d7302ac5b0b89eb8a8b4e722669d7a1b93800a11dbf4114f448fd942853ce9471facffe23a34dc2f3a8d8d5e7bba5d68cc9afaa64d5d082e4f267137dca64ecad4ac53ce36bd4e7a340153c897aa5ebce21a5af8a7a97db69034a0df613cf8dfd9c10a1566dda7d2cc4963f6f0630a9a6add19ad3630144836883f51d99ce73250e7c15873c49f3d56ec4f9bf254fd1900526163348ecac27e915bee8567a96d9b9f5486bc846cb49efadd2b34b52dd937e6d2ee78bb5519d237a0d21f95d14a4e53460f7daa5905580d538b7defe204c1bf2bcc5a686c40cae9aac636b542fd41684930fc85b82dd490b4d14cfcfbd4da96accf670c549cb5904b5aec5669b8c1c4058f6e53d53ecaae14a873ac96adeca8ba483c99b92076f1380caafcf61bc9e45dd2839e57b25c89be2affddaf4e65bc9b8ff2c78c31b6339712514848de296b21048157ba4a7115ee98d2da3e1cd73dcd8b9c31e636901b9a7c9c9595906e1160a6b0601bbe40dc10d9a075e8742b58ff96d13bbd83d9138fc0e4ffe7fe586fbc3fdcc30cae58a340d0eee9ffc192bd06e65477aa06deba26133df3d0b5be69c11d82263bfc5da6916b3a1560f72f8071651c7368f7c76eaa636cbb50b62278d8f827ff62ad089e7c559d0e6e07cd12f66fc724d5123abd7706ae916810e218528e3f3ac9ebfe6930b30ecaf9da11ba4b1539e0b4280107b8950126a583a040e48ef773955a7c76f732987c0dc5ad310b4ef31a606ed4c8d501efd98ddfba2d2be4e3e9e18349403eab044df3f99f8ca6eb34ee6f0a2c4a2509d9ec05fea5a6e38dabc013c6efeafaf26726ab5487e77926d7e7ff12eb7e642f535914155cf1f37e443afa8efb874df10a16a1292078333c9ad1af604e2a1ea61689cd08211b3b39dbbd5af8116671fb7b4258b4995306099ce4f15bd4d9eb2d773da4c47de68b3d93a2e1de183272bdbd8cb0c2c0095268b70feccc30fe85f29832f54ab83995e832b45635313b659ad66745bb834c161f283c47992547e045e27440ceef8e7b6a2456522c0e8a49796babba7873537b870cf9fd488d4a57b61ab8289569663107a996954322de22ed5a2effed7a833f6d4a4c9d67822d4916c869c64c28e34088f94c2fc86c285442e1d1ee4f8ed5e9765d402abc7cf4067550573b4561d8bda360ed0c339ad11b6206d5b0e09552764a89f05cc9572b45d758c0ef7d188d76e77abd16b9c0f026d7dbe9f6f0be074a3017fd5b61803383f8ee00327b1d7e5ab6cae2840bf9fc450e73b5d822c4cc9b2df167ff113ba878c343c420821fba579751472f6271b362cdf7b55a7bf23b72277f89d971f9a2bf1f43432d1ed420b012d8d2be2d9841d8267880a71093b7d07723f0383f58b0fc4a9ace659e2b4f8bf2d234ea904c7618df2fe245e38bf664dfd1de5d30e6249d777d3c5168d24470fdbd38f64aef2eb591db8bbf5815eadb5d8b128e6ca1dd318f98aae52256537b675cacf995f60e82e6152671836f1f5307adce5e6a75e33ef2e459f2c057e15428a1173c2925adb715305a214cffbcfde78425050d4b43761c98ac69613189e16dce2f4ad9305e5dde5356968cae23dc69f1eb1bfb82960206a159b9b11dd9fc3e1a0970a4a1bede9836e1f9c1f7b4698f9539ecb0461f062efa89b47dc9a84a36fe053edf0c26aaeff9ff18a87988e13f7f406a1ae0d5e2b6171bcaa77df5b9b6526a08d4f947a3b935f47c4d97076d5ae478430c57b6e7eeb03598d83bdef1ac348ee84995dabc779cf372fef1314928d7c390bf6a27a3801cd4a6b3da07240872c3ac657368e24b042e0f217234ad27fd9a05274975115dc4c0c66781abd30e01d147cf98076817f6de66787e7c62a39394362edde654656a65e56101ea89875e0ffa5ce4cf6c9a9eaed26623d3686122ae5fc9737d63c1dd68ef9ab330c4a78e197827db6e30c04b9889d3f460e72bba5b86dd068965264819a2bf7feeacd5a621b38813e6e8f3e89fa948870750497e44c5fda8b8243eef62276baaa567da6ca16d878151810cf4bb6a49d04ff2d4374ade960a520df3b0d96c2135e0606bec960a2b0b07adbea01e0c78aec835d1b3bddb89087d3091b9686f89cbe1ce383d78843d08acb56ba488585d94d70ce314239023e21e9e003bbd8582b948c89a6007360262cce5ab356750a8ff4c3e93825c35a6182288259e314cd3423257760abbc7ad6911ab89ee6be16a2f5222f6fe3a00a080845202d66c7c81b80a6f44d87e3472a4e6c58447a049615766ba6b55bb40e0818246d9d6f017b4aa94d1259a18f94ee8290f3f5d8cb0f5858e8e4fba0c7629f51cfdd97b20cae0276fc833c8a3f18cdb896f8a5cc99d11dec2f65a93f48c297b52d9dd5ddb600129eb300160ba6deb9b5fcd648910bf2728a89cec0f61aeb8daf77e19b95e1cabc3b1bdc0f372241ef46830514a47661a55124a624708819cb11d1e5f1869cf2a529b064fdb34627d47e7156783b33a574e256153622a28ca5c0ecbafe559062205ef1dfaf842f2ac4a9cfe87ff5465ff1b9a7837eada2216d855830cb6f00edeaea902910d8b213eedcbebbe1a0a7ed3eabf8d4bfe4dc82f5451006bcf77442d4910fe5775e683a67b4d0bef06595b6db2f1234718693d9e9a4876d258fe5413787b6f2d2f0220b44963cd5b07d61199e957ccdecfaf4032c40986d40023f432a1689c902101dc0e316d24e4b7d199396c9a036bd7fed2cf733feec9f0422aaefc585a446a9e5160f8d7ed788c204183d4924c52afc083d1690f219acd78ab7267ed401af577998a170bc7c9b24332010cbadd682c7", 0x1000, 0x7}], 0x10, &(0x7f0000002600)={[{@check_int='check_int', 0x2c}, {@device={'device', 0x3d, './file0'}, 0x2c}, {@compress_force='compress-force', 0x2c}, {@degraded='degraded', 0x2c}]}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000cd8ff4)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_wait(r4, &(0x7f0000cd8ff4)=[{}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2033/05/18 03:46:35 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x901, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:35 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1053.901430] binder: 524:526 got transaction with invalid offsets ptr [ 1053.935625] binder: 524:526 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:36 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080), 0x8) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000000)=@buf={0x49, &(0x7f00000000c0)="1220b357c25f4d9ab2ee50ca60fde04dfb1ba2bed1bb05b5fa2d67208b34545c6e90d0e4880af616b85abef8bf654cdf4f52d1e7604331ab378ada6d48ac64ed91439ac1e6da526799"}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040), 0x8) 2033/05/18 03:46:36 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/225) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000140)=""/4096) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000001180)={0x0, 0x2, 0x7, &(0x7f0000001140)}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000011c0)=""/4096) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000021c0)={0x1000, 0xffffffffffffffff, 0x9}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000002200)={{0xe03, 0x2, 0x0, 0x400, "4c1f60dbd575ce464dd9f8dbb3cc17354a3621cb29eec2cd6a8ae09dff5b6ca3bbabf4a3799139e55c64ade1", 0x1ff}, 0x74, [0x5, 0x5, 0x4, 0x0, 0x0, 0x3, 0x4, 0x100, 0x5, 0x8, 0x6f, 0x1, 0xfffffffffffffffa, 0x75, 0x9, 0x8, 0x6, 0x4, 0xfffffffffffffffc, 0x0, 0x9, 0x2, 0x10000, 0x1, 0x5, 0xa3, 0x0, 0x0, 0x141, 0x10001, 0x6, 0x0, 0x8000, 0x5, 0x3f, 0x101, 0x3, 0x7, 0x65, 0x100000001, 0x4, 0x2, 0x1, 0x8, 0x6, 0x4, 0xffffffff, 0x5, 0x4, 0x5, 0x95, 0x1, 0x0, 0x6, 0x8000, 0x8, 0x7, 0xf3a, 0x1, 0x81, 0x2, 0x1, 0x9, 0x8000, 0x100000000, 0x0, 0xf5, 0x8, 0x3f, 0x4bc, 0x5, 0xffffffff80000000, 0x8, 0xfffffffffffffffe, 0x7, 0x89e7, 0x2, 0x6, 0x0, 0x8001, 0xffffffffffffaccf, 0x7, 0x80, 0x7ff, 0x7, 0x100, 0x8, 0x7, 0x5, 0x2, 0x7fff, 0x3, 0x6, 0xffffffff, 0x4, 0x100000000, 0x5, 0xffffffffffff7fff, 0x5, 0x4, 0xfff, 0x8000, 0x32, 0x856, 0x1, 0x0, 0x3, 0x1, 0x2, 0x3, 0x0, 0xffffffffffff9fe7, 0x1, 0x9, 0x3c, 0x7, 0xfffffffffffffffa, 0xff, 0x4, 0x7fff, 0x0, 0x7, 0xa321, 0x3f, 0x200, 0x9, 0x200, 0x5], {0x0, 0x1c9c380}}) ioctl$KDSETLED(r0, 0x4b32, 0x1) sendto$ax25(r0, &(0x7f0000002700)="46043d163b37fac61484597935c362d2abea593e1f7e62e56b29c45c0167bee31eb03b624f3b02", 0x27, 0x8000, 0x0, 0x0) getresuid(&(0x7f00000027c0), &(0x7f0000002800)=0x0, &(0x7f0000002840)) r2 = getegid() r3 = syz_fuseblk_mount(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)='./file0\x00', 0x6000, r1, r2, 0x2, 0x81, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000002880)=0x10001, 0x8) recvfrom$llc(r0, &(0x7f00000028c0)=""/22, 0x16, 0x103, 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000002900)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000002940)={0x7, 0x5, 0x3, 0x4, 0x80000001}) r4 = fcntl$getown(r3, 0x9) ptrace$cont(0x7, r4, 0x5, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000029c0)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x258, 0x118, 0x398, 0x398, 0x398, 0x4, &(0x7f0000002980), {[{{@arp={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffffff, 0xffffffff, @mac, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0x3f4b62ff06700beb]}, 0x800, 0xff, 0x2, 0x3, 0x99ff, 0x5, 'dummy0\x00', 'erspan0\x00', {}, {0xff}, 0x0, 0x80}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@loopback=0x7f000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffff00, 0xffffffff, @empty, {[0xff, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0xff, 0xff]}, 0x8, 0x10000, 0x8, 0x3, 0x2, 0xde, 'bcsh0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x2}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}}}, {{@arp={@empty, @multicast2=0xe0000002, 0x0, 0xffffffff, @empty, {[0xff, 0x0, 0xff]}, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, {[0xff, 0xff]}, 0x9, 0x7, 0x1, 0x6, 0x4, 0xffff, 'ip_vti0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x88}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000002ec0)={0x1, 0x7f, 0x1, 0x9, 0xffff, 0x8, 0x3, 0x3, 0x4, 0x401, 0x9, 0x8000}) ftruncate(r0, 0x1) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000002f40)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x8000d4}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x24, r5, 0x700, 0x70bd25, 0x25dfdbff, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000003040)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000003080)=r4) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000030c0)=0x4, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000003100)='/dev/dsp\x00', 0x498000, 0x0) getpeername$netrom(r0, &(0x7f0000003140), &(0x7f0000003180)=0x10) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f00000031c0)={0x3, 0x5, 0x20}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003200)) [ 1053.956943] binder: BINDER_SET_CONTEXT_MGR already set [ 1053.962995] binder: 524:545 ioctl 40046207 0 returned -16 [ 1054.053741] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:36 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="00000001000000000000000000000000719000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400000, 0x0) accept$ipx(r1, 0x0, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f0000000000)) 2033/05/18 03:46:36 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0xa, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:37 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6488], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:37 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x127400) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000001c0)={0x3, r1}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80200, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="100000000000000000000000000071100000000000000000000000000000950000000000000000000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r3, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000730000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:37 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00006da000)=0x2, 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000000c0)={0xffff, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1, 0x3, [{{0x2, 0x4e24, @multicast2=0xe0000002}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e22, @loopback=0x7f000001}}]}, 0x210) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x6, 0x2, 0x2, 0x1}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00009ef000), 0xd000, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2033/05/18 03:46:37 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, &(0x7f0000000200)="b9ca5f4635bc1353c55166a9da82af503826682c37") truncate(&(0x7f0000000000)='./file0\x00', 0x7fff) 2033/05/18 03:46:37 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000)=0xffffffffffffffff, 0x4) 2033/05/18 03:46:37 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x3e2, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r2, 0x6, 0x10}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1f, 0x180) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x5, {0x3, 0xbedd, 0x3, 0x80000001, 0x4955, 0x6}, 0xff, 0x42d7d1c}, 0xe) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:37 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1054.988516] binder: 568:572 got transaction with invalid offsets ptr [ 1054.989901] tmpfs: No value for mount option '_F5SQfڂP8&h,7' [ 1055.006824] QAT: Invalid ioctl [ 1055.025136] QAT: Invalid ioctl [ 1055.027904] binder: 568:572 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:37 executing program 2: mmap(&(0x7f0000000000/0xfd6000)=nil, 0xfd6000, 0x3, 0x31, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000a9aff2)="6c6f2c70726f635c4750572af493") perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) 2033/05/18 03:46:37 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000d00f110971688a1000000000000000800000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0xfffffffffffffffe, 0x400000000000003}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:37 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) setitimer(0x0, &(0x7f0000000080), &(0x7f00000000c0)) [ 1055.060836] tmpfs: No value for mount option '_F5SQfڂP8&h,7' [ 1055.091401] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:37 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x240, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:37 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1055.124348] binder: 568:591 ioctl 40046207 0 returned -16 [ 1055.254517] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:37 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000300)={0xfffffffffffffff7, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e20, @multicast1=0xe0000001}}}, 0x108) sendto(r0, &(0x7f0000000000)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000040)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001240)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)=@pptp={0x0, 0x0, {0x0, @loopback}}, 0x20, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/27, 0x1b}, 0x0) rt_sigprocmask(0x0, &(0x7f0000057ff8)={0xfffffffffffffffe}, 0x0, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000035e4dc000000000000009a7436fb71ef17954a848e6c1996b8c44a953cc40ddd79a974cb9547f93654ff18e1394d45f8aca21a26c9283700b4124634143cbceebea0c6177b648b4367a39b37205a6b3a00fab7ee2e33fb1b46893d4fc28a5c7e67ba91f6c0a784e7f178e7e30f0f63d0a277", @ANYRES32=0x0], &(0x7f0000000180)=0x8) 2033/05/18 03:46:37 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88640000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:37 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f0000000180)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2033/05/18 03:46:37 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') poll(&(0x7f00000000c0)=[{r1, 0x442}, {r1, 0x600}, {r0}, {r0, 0x608}, {r0, 0x80}, {r1, 0x20}, {r0, 0x4000}], 0x7, 0x1) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x7, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) 2033/05/18 03:46:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000020000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:37 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x5, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x25) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d137e637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0xc3, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x0, 0x0, 'client0\x00', 0x0, "51af03ed6dc32d0e", "eeedbe7ba59b83aa3a397f922c06f47e969e99491e516b5eb9f3200fc766a430"}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f00000001c0)={{0x0, 0x4}, {0x2, 0x801f}, 0x0, 0x0, 0x200}) 2033/05/18 03:46:37 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x301, 0x70bd25, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x10}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200080d0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f0000000000)) 2033/05/18 03:46:37 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1055.363757] binder: 618:631 got transaction with invalid offsets ptr 2033/05/18 03:46:37 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x401, 0x9, 0x6, 0x401, 0x1f, 0xc14}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000740)=0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x70, 0x0, 0x80, 0x0, 0x6, 0x0, 0x2, 0x48, 0x4, 0x401, 0xa02e, 0x3ff, 0x1, 0x4, 0x5, 0xfffffffffffffffe, 0x0, 0x9, 0x8001, 0x4, 0x4476abf2, 0x0, 0x7, 0x9, 0x4000000000000000, 0x8, 0x80000001, 0x4, 0x1ff, 0xfffffffffffffffc, 0x4, 0xffffffffffff1a67, 0xffffffffc844456a, 0x3, 0x8000, 0x8, 0x10000, 0x0, 0x100, 0x1, @perf_config_ext={0x6, 0x5}, 0x2080, 0x234, 0x80000000, 0x7, 0x9, 0x2, 0xffffffffffffff00}, r1, 0xd, r0, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r3 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="8946ba3c7496b7690418bfec253e95a692c8c92aef18aacf3a16d4a404ff47624d8e95f0a68fdf17385276e82d831f2892d87a9f6e5dece5d5dde072443e34c19d74e1f38fd604d35f8179cdcd27dd24a581e1164008a9f4a9127a0491e8167b7c2e772b8d8000d647a12430de45d45a908efc5e253251f940a86cb7e6cc4aeed8538eb0b6011f85a470591cbc7d347b8f539caba8d904fde672bdde7ffdbae71ebb13ba48f5fc76697c05efcea2b57723022a5154e08bfa4c3cf8", 0xbb, 0xfffffffffffffffd) r4 = request_key(&(0x7f00000002c0)='.request_key_auth\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)=':\x00', 0xfffffffffffffffd) r5 = request_key(&(0x7f0000000380)='keyring\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)=',cpuset\x00', 0x0) keyctl$dh_compute(0x17, &(0x7f0000000480)={r3, r4, r5}, &(0x7f00000004c0)=""/117, 0x75, &(0x7f0000000680)={&(0x7f0000000540)={'sha384-avx\x00'}, &(0x7f0000000580)="c84b06ded738e427712e829868c88b18fa0c4a2ae3e1dd5c94d51e0eb420c3fd008dc2cd07b7c70cb154d067def7f3604b2aedd3f8825971ecacb59893204ec69c1c2a31e85614f173d74cd955b256d985602da5c5a9686b9c0e7032f3116e371607011a2a99f09932275473ebd3c7831f204f6933c00b8f65c1147eab912d84fc447c1b2b305458c982cac155f044835b7fc1b1f8b7d443b0d633fd249b0f248decaeb6636cc595b2b724f441cdc420613418054c4f332f8e99830f961208b602fe68ea9ae79b8f249edb442a5d4a50de20bdd04ace96596d59155392017c065b171e75d069ac8ebb0e73cfe7fb", 0xee}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f0000000180)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) [ 1055.408056] binder: 618:631 transaction failed 29201/-14, size 24-8 line 2991 [ 1055.479987] binder: BINDER_SET_CONTEXT_MGR already set [ 1055.497874] binder: 618:645 ioctl 40046207 0 returned -16 [ 1055.529164] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:38 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:38 executing program 0: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x80003, 0xff) sendto$inet6(r0, &(0x7f0000000040), 0x1ce, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}, 0x1c) 2033/05/18 03:46:38 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x124f8, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f0000000180)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2033/05/18 03:46:38 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000070000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) lgetxattr(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00', &(0x7f0000000180)=""/45, 0x2d) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r2, r3/1000+30000}, {0x0, 0x7530}}) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0x178, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x23, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2033/05/18 03:46:38 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000008c100000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0x50, &(0x7f0000000180)}, 0xfffffffffffffe59) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:38 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8847000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:38 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x3e, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f0000000180)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) [ 1056.397197] binder: 667:669 got transaction with invalid offsets ptr [ 1056.416651] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 1056.423187] binder: 667:669 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:38 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) rt_sigreturn() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x20000002, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0xbd73, 0x0, 0x8, &(0x7f0000ffe000/0x2000)=nil, 0x25}) 2033/05/18 03:46:38 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) socket$inet_icmp(0x2, 0x2, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000000000000000000000e3701000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x26, 0xfb, &(0x7f00001a7f05)=""/251, 0xfffffffffffffffc, 0x0, [], r0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1056.473825] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000140), &(0x7f00000000c0)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000380)=""/213, 0xd5}], 0x4, &(0x7f0000000100)=""/27, 0x1b, 0x7}, 0x80}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/170, 0xaa}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f0000000580)=@l2, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/158, 0x9e, 0x80}, 0x435}, {{&(0x7f0000000700)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/80, 0x50}], 0x1, 0x0, 0x0, 0x8}, 0x2}], 0x4, 0x40000000, &(0x7f0000000940)={0x0, 0x1c9c380}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer\x00', 0x40000, 0x0) write$eventfd(r1, &(0x7f0000000980)=0x3, 0x8) 2033/05/18 03:46:38 executing program 2: setrlimit(0x9, &(0x7f00000a3ff0)) mlock(&(0x7f0000910000/0x1000)=nil, 0x1000) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x741, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, {0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x19}}, 0x3}, 0x1f, [0x8000, 0xffff, 0x7, 0x5, 0xfffffffffffffff8, 0x8001, 0x7, 0x5]}, 0x5c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) mremap(&(0x7f0000910000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f000090f000/0x3000)=nil) 2033/05/18 03:46:38 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8ffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:38 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000090000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) [ 1056.546062] binder: 667:685 ioctl 40046207 0 returned -16 2033/05/18 03:46:38 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x7, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2033/05/18 03:46:38 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000009300000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:38 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000080)=0xffffffffffffffcd) sched_setscheduler(r0, 0x6, &(0x7f00000000c0)=0x2) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x10181880, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x100000000010, 0x4, 0x0, 0xfffffffffffffffa}, 0xfffffcef) [ 1056.681249] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:38 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00006d9c17)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000003ff0)={0x1d, r2}, 0x10) setsockopt(r1, 0x65, 0x1, &(0x7f0000000000), 0x0) r3 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000000c0)) [ 1056.762622] binder: 723:724 got transaction with invalid offsets ptr [ 1056.816901] binder: 723:724 transaction failed 29201/-14, size 24-8 line 2991 [ 1056.838206] binder: BINDER_SET_CONTEXT_MGR already set [ 1056.851326] binder: 723:736 ioctl 40046207 0 returned -16 2033/05/18 03:46:38 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x8000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200200, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@host=0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007110000000000000000000000000000095000000000000009efb2ec8df96c1b54b736ff7bf000000000000040103383f4034dc347cad63cfd3725065c86c63e31923b2071050eb117f06ac558316701f6f53"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r0, 0xffffffffffffff12, &(0x7f00000000c0)}, 0xfffffffffffffc83) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:38 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x3, 0x0, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:38 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) epoll_create(0x1) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:38 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x806], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2033/05/18 03:46:38 executing program 0: sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="dda419ec13595eaac09ddfcdbad621421c77d94dbb1181c23713d24280363688ef97300293ae127616a39ca8da4a146abb252aa6abc8c253722f7a38", 0x3c, 0x0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket(0x0, 0x800, 0x800) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0xff23, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'tunl0\x00', 'erspan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x372) 2033/05/18 03:46:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000005000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:38 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="4b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]}) [ 1056.872500] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:39 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff00000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:39 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000ae5f44)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r1}) 2033/05/18 03:46:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x2000000000000, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) [ 1056.964485] binder: 755:759 got transaction with invalid offsets ptr 2033/05/18 03:46:39 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000001000000000000000711000000000001700000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xb0, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x7, @loopback={0x0, 0x1}, 0xfffffffffffffff5}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e20, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, @in6={0xa, 0x4e23, 0x100000000, @empty, 0x7}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x401}, @in={0x2, 0x4e23}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000340)={r3, 0x7ff, 0x30}, &(0x7f0000000380)=0xc) 2033/05/18 03:46:39 executing program 1: recvmsg(0xffffffffffffff9c, &(0x7f0000000080)={&(0x7f0000000200)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000280)=""/119, 0x77}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000300)=""/165, 0xa5}, {&(0x7f0000001400)=""/88, 0x58}, {&(0x7f0000001480)=""/161, 0xa1}, {&(0x7f0000001540)=""/242, 0xf2}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/122, 0x7a}, {&(0x7f0000001740)=""/154, 0x9a}], 0xa, &(0x7f00000018c0)=""/229, 0xe5, 0x5}, 0x10000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000019c0)=[{0x4, 0x2}, {0x7, 0x4a}, {0x3, 0x2}, {0x4, 0x1}, {0xb, 0x10001}, {0x4, 0x5}, {0x8, 0x9}, {0xc, 0x7fffffff}, {0x0, 0x2}], 0x9) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000180)="b82283392dc50ff3fb675a5849d2f5916a62fd9cc60000000000d2fbd92e9aba8b76eaa28c750380b2298e83d5dfddda6c13759516b4cbacb4369364dc06519a4518e096986fa8e05bb356d7c806f7d23a16c8bf99cd007d3d0402f1ec5c03d43ed7c0a586889a0a1528caedc3ed9f5723"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1057.022387] binder: 755:759 transaction failed 29201/-14, size 24-8 line 2991 [ 1057.101097] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.143762] binder: 755:779 ioctl 40046207 0 returned -16 2033/05/18 03:46:39 executing program 0: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in=@local}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000200)={0x3f, @multicast1=0xe0000001, 0x4e20, 0x3, 'rr\x00', 0x6, 0x800, 0x70}, 0x2c) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x2, 0x3f, 0xfffffffffffffffd, "4f64f2a773896e590d43fa46277a62d0a35ee4cfb04416e901372aac709bf8a915d131d28a5a6fb8bc38d36f6d61ef240b15891de0a6135b0b8068ba3e964c6ec11ccd30c765d474a795689d01c070e3"}, 0x1b435f926e8129a2) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x8400) accept$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) r3 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000006d00e1afbb533f7f1fc3061e7ec03287000000306429ec613a18ca0000000000000000000000da20f826be9fd52d7c9f5f2a11b9181327260ab73da177eb8f5cbe87eced3871a7f44c4a2135922baa0669ced2768eb9d021ee0991be00f476e49ca2dfc6c9481f2e0d10d08e7b08f26be914c003eec5edd33383bfcf4f13a53c0070deca6155934f93ebb66e2fa646917a9d46c15254e250b24bdd0c630d84362217d486077556467e"]}) 2033/05/18 03:46:39 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x1400000000000000, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2033/05/18 03:46:39 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x1edea6ff, 0xfffffffffffffffd, 0x1000000000000004, 0x203, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000020000000004000071100000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYPTR, @ANYRES64, @ANYPTR64, @ANYPTR]) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/fi\\e0\x00') 2033/05/18 03:46:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x300000d, 0x30, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000007000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) [ 1057.203396] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:39 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800e0000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2033/05/18 03:46:39 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x7, 0x80, 0x6, {}, {r2, r3/1000+10000}, {0x0, 0x80000000, 0x401, 0x6}, 0x1, @can={{0x0, 0x81, 0xffffffffffffffff, 0xffffffff}, 0x2, 0x1, 0x0, 0x0, "709692dbf4ce2714"}}, 0x48}, 0x1}, 0x4845) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0x50, &(0x7f0000000400)}, 0x378) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) [ 1057.271866] binder: 799:800 got transaction with invalid offsets ptr [ 1057.280907] FAT-fs (loop2): Unrecognized mount option "%GKKAq [ HqJ {Jj#3D3%gfN+m&bGKmDwT'g}Ca [ 1057.280907] |]بU6plEj).S{!ɐ{ '0yyRSß1׈P#?v" or missing value [ 1057.306394] binder: 799:800 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:39 executing program 4: syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x21, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f0000000000)) 2033/05/18 03:46:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x4000000000000000, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x40400, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xbc, r3, 0x100, 0x70bd29, 0x25dfdbfe, {0xe}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0xaa5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x80000, 0x0) connect$nfc_raw(r5, &(0x7f0000000180)={0x27, 0x1, 0x2}, 0x10) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f00000000c0)=""/68) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0000103}]}) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)) [ 1057.366385] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:39 executing program 5: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2033/05/18 03:46:39 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1057.421315] binder: 799:817 ioctl 40046207 0 returned -16 [ 1057.466393] FAT-fs (loop2): Unrecognized mount option "%GKKAq [ HqJ {Jj#3D3%gfN+m&bGKmDwT'g}Ca [ 1057.466393] |]بU6plEj).S{!ɐ{ '0yyRSß1׈P#?v" or missing value 2033/05/18 03:46:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r3 = dup2(r0, r1) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x7, {0x8, 0x8, 0x0, 0x4, 0x0, 0x2}, 0x2, 0xffffffff}, 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) [ 1057.523887] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000010000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x2b020000, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 2033/05/18 03:46:39 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86ddffff], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:39 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x1, 0x101, 0x0, 0xbc1, 0x3, 0x8000, 0x800, 0x8, 0x8, 0x10001, 0x400, 0x9, 0x2, 0x8], 0xf000, 0x124840}) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r3) setpriority(0x0, r2, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x5, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x80000800, 0x0) r6 = shmget(0x3, 0x4000, 0x100, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/56, &(0x7f0000000140)=0x38) readv(r5, &(0x7f00003fd000)=[{&(0x7f0000853000)=""/255, 0xffffff1f}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f00003b9fdc)) r7 = shmget$private(0x0, 0x4000, 0xc, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000040)={{0x7fffffff, r3, r4, r3, r4, 0x40, 0x7f}, 0xfffffffffffffffc, 0xfa, 0x10001, 0x9, r2, r2, 0x4}) syz_open_pts(r5, 0x0) 2033/05/18 03:46:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = dup3(r0, r0, 0x80000) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0x32, @rand_addr=0x800, 0x4e23, 0x2, 'ovf\x00', 0x20, 0x5, 0x76}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="35000000000000b37bde9500000000007100000000e6000000000000950000ea4a9d13a7"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000200)=""/67) dup(r0) 2033/05/18 03:46:39 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x800) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x1003}, 0xe) accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e) 2033/05/18 03:46:39 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000300)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202, 0xffffffffffffffff, 0x5}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000711000000000000000000000000000009500000000000000137930db3f6965d63fa558eb95a38af40c15148af83a4e0fadaaff42e95c5f23e14deb4f4358473fd4e7f282dec9e040e19993f4841bdb000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r3, &(0x7f0000000000)="412e8bf7b224", 0x6, 0x4008081, &(0x7f0000000340)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) connect(r4, &(0x7f0000000180)=@in={0x2}, 0x10) r5 = dup3(r0, r1, 0x80000) ioctl$EVIOCGABS0(r5, 0x80184540, &(0x7f0000000200)=""/196) 2033/05/18 03:46:39 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:39 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) [ 1057.717890] binder: 866:867 got transaction with invalid offsets ptr [ 1057.740751] binder: 866:867 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffff000, 0x806) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000140)={0x54, r2, 0x921, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r3}, {0x38, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0x8}, {0x4, 0x4}}}]}}]}, 0x54}, 0x1}, 0x0) 2033/05/18 03:46:39 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0xe00, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000200)="0f30f3afbaf80c66b8981d068566efbafc0c66b80d00008066ef660f320f01df650f01ca66b9800000c00f326635000100000f3066b9700900000f3266b9800000c00f326635002000000f30f30f07", 0x4f}], 0x1, 0x0, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000800400000000000000000000001f05"]) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r6 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x6, 0x80400) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r7 = syz_open_dev$vcsa(&(0x7f0000000980)='/dev/vcsa#\x00', 0x1, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x7, 0x4, 0x0, 0x10, r7, 0x1}, 0x2c) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @multicast2}, &(0x7f0000000200)=0xc) read(r5, &(0x7f0000000280)=""/75, 0x4b) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="20002abd7000ffdbdf250d0000000800060026c800005800010014000300fe80000000000000000000000000000c0c0006006c626c630000000008000b0073697000080004004e220000080008002000ca0008000500010000000c000700040000e3d91f19d841a9148ceea23e1f82f258000300000008000200a7000000"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x4010) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x7fffffff, 0x2, [0x100000001, 0x10000]}, &(0x7f0000000400)=0xc) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000580)=0xfffffffffffffff8, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000440)={r9, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, [0xfd, 0x6, 0xcca7, 0x5, 0x8, 0x7fffffff, 0x5, 0xe4, 0xffff, 0x7, 0x80, 0x7, 0x6, 0xb3d, 0xce7]}, &(0x7f0000000540)=0x100) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt(r7, 0x7fff, 0xe68, &(0x7f0000000180)="734f00243290c9b9a743a0e335cf900d8ed4e9acd75e4cf23b8556e92e25c4106a05cc96ca66b275c0aed3c9bd436d3f27f1c50245c2326b7bb0c4fb611973e70dfb75e44ccbecafae2bb772b822a13102006c43778dc7c094a3e6a8d9ef5130cb444cd8a6043816282c3c5722aef8531b8e04214d262edc25", 0x79) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r10, 0x50, &(0x7f00000000c0)}, 0x10) connect$l2tp(r7, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x0, 0x4, 0x2, 0x2, {0xa, 0x4e21, 0x800, @empty, 0x3ff}}}, 0x32) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000300)) [ 1057.808491] binder: BINDER_SET_CONTEXT_MGR already set [ 1057.857129] binder: 866:894 ioctl 40046207 0 returned -16 [ 1057.894892] netlink: 'syz-executor2': attribute type 3 has an invalid length. [ 1057.939647] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:41 executing program 0: r0 = memfd_create(&(0x7f000003affa)='posix_acl_access{Y\x00', 0x0) lseek(r0, 0x7ffffffffffffffc, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0x4) open(&(0x7f0000000000)='./file0\x00', 0x1, 0x60) 2033/05/18 03:46:41 executing program 1: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r1 = msgget(0x3, 0x1) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000400)=""/4096) r2 = memfd_create(&(0x7f0000000000)='em1\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xc96}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000180)={r3, 0x9}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) 2033/05/18 03:46:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000040000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:41 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:41 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x25f, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:41 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x3, 0x202, 0xffffffffffffffff, 0x7}, 0xffffffffffffffc3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:41 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, 0x1, 0x7, [@rand_addr=0x4, @remote={0xac, 0x14, 0x14, 0xbb}, @empty, @multicast1=0xe0000001, @rand_addr=0x1e49, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}]}, 0x2c) ioctl(r0, 0x7fff, &(0x7f0000000040)) [ 1059.003845] binder: 917:927 got transaction with invalid offsets ptr [ 1059.033143] binder: 917:927 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:41 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffa888], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) 2033/05/18 03:46:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c03, 0x0) 2033/05/18 03:46:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x200100) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) 2033/05/18 03:46:41 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x10002) semget(0x2, 0x7, 0x14) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x8) fadvise64(r0, 0x0, 0x8, 0x7) r1 = dup(r0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000180)=""/107) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x200, 0x8, 0x1, 0x1, 0xffffffff, 0x1, 0xe7ec}, 0xc) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) [ 1059.057584] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:46:41 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x2, @broadcast=0xffffffff}, 0x10) [ 1059.078086] binder: 917:934 ioctl 40046207 0 returned -16 [ 1059.112489] [ 1059.114131] ================================================ [ 1059.119922] WARNING: lock held when returning to user space! 2033/05/18 03:46:41 executing program 4: syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000009af1ffff007110000000000000000000000000000095000000008c0400000041f600000000f0890959"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r1 = dup3(r0, r0, 0x80000) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:41 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1059.125712] 4.16.0+ #4 Not tainted [ 1059.129239] ------------------------------------------------ [ 1059.135029] syz-executor5/939 is leaving the kernel with locks still held! [ 1059.142040] 1 lock held by syz-executor5/939: [ 1059.146527] #0: 000000007860a41b (&lo->lo_ctl_mutex/1){+.+.}, at: lo_ioctl+0x8d/0x1ec0 2033/05/18 03:46:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x200100) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) 2033/05/18 03:46:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f00001c2ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x3c, 0x0, &(0x7f0000451fb4)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000700000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000787fe0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f00001cd000)}) 2033/05/18 03:46:41 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="a84d37e02541311605dfd2b618dd5a6c4a98e1e462517e6fc76c28a56eb41280956dc030a85cf7f208373b0c88e00df15b93341b7fb6512ec7a27c6a205fb0e1b03eea319fdef8ba7fdfcc911e0bfc195b73ab840218b55a53db87760aa2806817a125a0798b5d9ba204957bda9ed9b1e2800844227d2e8c48f9fced005befd3763ccbe9cfe5c2c42b2c5355270bfd68dfe1b7a7a8c1ecd9074c5b7529dc589f3df77c32638cb75909b5b5987266a25a4707786b70406444f220da3f045ed3eb453f40e9c292491d30430ec8adf8b7ad48b8017af70fff2920a38e5e4edb345f99de13eb24d6d2846df284f7ef5b32cc4dd25d560289942e5f3c9140cc8894d74f470e2ea60fa44f96e6b9e3def85d62a4f133be4e581d96b12d8122a81a7e130ceab6555fa113e7b4d3857a09f4e6420485b2d8af63a9a1bbf0c80dd9360af0397b12dee3459c0c2d9d465f4925406ba6ddef7ec457860276d68e406241d53b28b96bb81763f33d85a7f38fae5e1d831a7ddf90f9c61dded1dfade871891b20c44340dd22c1136ee8349f820c384ebeca8d5ee2c9dc7598ad6f50202764f55788595b5d69e18c5479456e0efb49ef51f425c94b9613c1dfdf7fa518c800b1f0b4fbd1ca99f8f49b8efd175721853ebb34e485e41be77ca07d34560ef671e2854dd6df59701d94ccf4d36b25f28cf25d1b20dff76bb3cdf2af18f817d7fe9de58e01b4c24af03926b4da5e761fd163a078305e3fbb5604d21ece77ed0ec0c650034fcb230cfe3485a48e5c82f06d25ef3d4145a76f8e6562b7f4f7c788aac524dca7d02acee29b7bd2bc6a75a199e9fe10f54f8b0c76bb6dfe8926d8502fd4e8b9ddbe14c0f56e8be1488da71ebdad1fd40a9ece0a96d3baaaad4c6244c1dfb3f1dbae88ecf1b825150deb35c87f7a76b4f95ebf9474f0db11649fbfe2bc19fffcb4bffdc1c196f57779016f2c237d51cb33dd5d751e3ce03001bc78b07bb207f219c543d6f4af64e474fa7fb7a1b29470bd40f347c7853c948bea17b31058b4f800cd55cadeaca7ccd1897e1af4d9c266047d881a5df79b184f4894024b2c305597534284220dd7a764b16b7d7959e5ec066c2503af342c478f1963d4f2bda8e0b91921d1057434152c9724e6c56d0e0804c9c3320c27542933ecaa5d24ccbece512d697e4113d2553cebe722bb7712f739fdd2b36210fab764fc37fe357039451e23f59ab0c65153b76d05d0ad9278daec9c0d6dde8c20b8636b35c19cd0b90a8b5ffd6f1d7d878e302756572a04e438a3b35deb96937416de1ac56cd370b4f2c6d7420530811e7857c4e8e52228bfddeb33835547c40dcc06ba63b0015fa60b37ebf5c1695cc18724916ad7cefecd85d2aabf09f3d28143915c6c08d2c277d7b09a62b55b366e", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0x100000000000000, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:41 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x10002) semget(0x2, 0x7, 0x14) r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x8) fadvise64(r0, 0x0, 0x8, 0x7) r1 = dup(r0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000180)=""/107) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x200, 0x8, 0x1, 0x1, 0xffffffff, 0x1, 0xe7ec}, 0xc) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='-/em0md5sum\x00', 0x0) [ 1059.194537] binder: undelivered TRANSACTION_ERROR: 29201 2033/05/18 03:46:41 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x280, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000180)={0xf1ac, 0x0, 0x101, 0x8, "5d084b811c42ae3b393ec27886a1b771116ad116d217b0c09453df07022309be37adebc447a3c0c6fe6ae295", 0x30a0}) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000a109e2256195cc61a3eddc0000000000000000007110000000000000000000000000000095000000000000000ac2309b6d338266e8499023"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x4c02, 0x6f2000, &(0x7f00000003c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x1a0}, {0xa, 0x4e20, 0x1, @loopback={0x0, 0x1}, 0x9}, 0x6, [0x100000001, 0xf2, 0x4, 0x9e0, 0x4, 0x7, 0x8e2d, 0x7ff]}, 0x5c) 2033/05/18 03:46:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) msgget$private(0x0, 0x411) socket$l2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000020000000000ab6bb137c3000087100000000000000000000000000000950000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) getpeername(r1, &(0x7f0000000180)=@generic, &(0x7f0000000000)=0x80) socketpair$inet_icmp(0x13, 0x125e, 0x6f2000, &(0x7f00000003c0)) 2033/05/18 03:46:41 executing program 3: syz_emit_ethernet(0x169, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x6, 0x0, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0xaa}, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0)) [ 1059.238121] binder: 962:963 got transaction with invalid offsets ptr [ 1059.251740] binder: 962:963 transaction failed 29201/-14, size 24-8 line 2991 2033/05/18 03:46:41 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xd4) sendto$inet(r0, &(0x7f0000002080)="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", 0x3e8, 0x0, &(0x7f0000000000)={0x2, 0xf101000000000000, @broadcast=0xffffffff}, 0x10) 2033/05/18 03:46:41 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x200100) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) [ 1059.299466] binder: BINDER_SET_CONTEXT_MGR already set [ 1059.331147] binder: 962:979 ioctl 40046207 0 returned -16 [ 1059.375227] binder: undelivered TRANSACTION_ERROR: 29201 [ 1060.207835] ================================================================== [ 1060.215231] BUG: KASAN: use-after-free in __mutex_lock+0x175f/0x17f0 [ 1060.221711] Read of size 4 at addr ffff8801a9154320 by task syz-executor1/991 [ 1060.228961] [ 1060.230574] CPU: 0 PID: 991 Comm: syz-executor1 Not tainted 4.16.0+ #4 [ 1060.237209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.246535] Call Trace: [ 1060.249109] dump_stack+0x1b9/0x294 [ 1060.252717] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1060.257888] ? printk+0x9e/0xba [ 1060.261148] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 1060.265878] ? kasan_check_write+0x14/0x20 [ 1060.270088] print_address_description+0x6c/0x20b [ 1060.274909] ? __mutex_lock+0x175f/0x17f0 [ 1060.279043] kasan_report.cold.7+0xac/0x2f5 [ 1060.283345] __asan_report_load4_noabort+0x14/0x20 [ 1060.288251] __mutex_lock+0x175f/0x17f0 [ 1060.292203] ? get_futex_value_locked+0xcb/0xf0 [ 1060.296847] ? lo_ioctl+0x8d/0x1ec0 [ 1060.300449] ? futex_wait_setup+0x279/0x400 [ 1060.304748] ? mutex_trylock+0x2a0/0x2a0 [ 1060.308788] ? futex_wake+0x750/0x750 [ 1060.312569] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1060.317733] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1060.323266] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 1060.328348] ? futex_wait+0x5c1/0x9f0 [ 1060.332130] ? futex_wait_setup+0x400/0x400 [ 1060.336431] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1060.341608] ? debug_check_no_locks_freed+0x310/0x310 [ 1060.346775] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 1060.351857] ? futex_wake+0x2f6/0x750 [ 1060.355639] ? get_futex_key+0x1e90/0x1e90 [ 1060.359856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.365372] ? bpf_prog_kallsyms_find+0xd6/0x4a0 [ 1060.370106] ? lock_downgrade+0x8e0/0x8e0 [ 1060.374231] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1060.379400] ? do_futex+0x249/0x27d0 [ 1060.383093] ? kasan_check_read+0x11/0x20 [ 1060.387222] ? rcu_is_watching+0x85/0x140 [ 1060.391351] mutex_lock_killable_nested+0x16/0x20 [ 1060.396172] ? mutex_lock_killable_nested+0x16/0x20 [ 1060.401168] lo_ioctl+0x8d/0x1ec0 [ 1060.404600] ? exit_robust_list+0x290/0x290 [ 1060.408900] ? kernel_text_address+0x79/0xf0 [ 1060.413289] ? loop_clr_fd+0xb80/0xb80 [ 1060.417157] blkdev_ioctl+0x9b6/0x2020 [ 1060.421026] ? blkpg_ioctl+0xc40/0xc40 [ 1060.424892] ? __fget+0x3e3/0x650 [ 1060.428319] ? lock_downgrade+0x8e0/0x8e0 [ 1060.432442] ? lock_release+0xa10/0xa10 [ 1060.436393] ? save_stack+0xa9/0xd0 [ 1060.439998] ? save_stack+0x43/0xd0 [ 1060.443605] ? __kasan_slab_free+0x11a/0x170 [ 1060.447991] ? kasan_slab_free+0xe/0x10 [ 1060.451943] ? do_sys_open+0x57f/0x770 [ 1060.455808] ? SyS_open+0x2d/0x40 [ 1060.459239] ? do_syscall_64+0x29e/0x9d0 [ 1060.463279] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1060.468618] ? __fget+0x40c/0x650 [ 1060.472054] ? expand_files.part.8+0x9a0/0x9a0 [ 1060.476616] ? trace_hardirqs_off+0xd/0x10 [ 1060.481109] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1060.486193] block_ioctl+0xee/0x130 [ 1060.489795] ? blkdev_fallocate+0x400/0x400 [ 1060.494096] do_vfs_ioctl+0x1cf/0x1650 [ 1060.497962] ? ioctl_preallocate+0x2e0/0x2e0 [ 1060.502348] ? fget_raw+0x20/0x20 [ 1060.505776] ? trace_hardirqs_on+0xd/0x10 [ 1060.509902] ? kmem_cache_free+0x22e/0x2d0 [ 1060.514117] ? SyS_futex+0x3a4/0x56d [ 1060.517810] ? do_futex+0x27d0/0x27d0 [ 1060.521594] ? security_file_ioctl+0x9b/0xd0 [ 1060.525979] ksys_ioctl+0xa9/0xd0 [ 1060.529408] SyS_ioctl+0x24/0x30 [ 1060.532752] ? ksys_ioctl+0xd0/0xd0 [ 1060.536358] do_syscall_64+0x29e/0x9d0 [ 1060.540221] ? vmalloc_sync_all+0x30/0x30 [ 1060.544344] ? kasan_check_write+0x14/0x20 [ 1060.548559] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1060.553465] ? syscall_return_slowpath+0x30f/0x5c0 [ 1060.558370] ? prepare_exit_to_usermode+0x390/0x390 [ 1060.563365] ? prepare_exit_to_usermode+0x285/0x390 [ 1060.568359] ? perf_trace_sys_enter+0xaf0/0xaf0 [ 1060.573006] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1060.577831] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1060.582995] RIP: 0033:0x455259 [ 1060.586164] RSP: 002b:00007f99c6376c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1060.593850] RAX: ffffffffffffffda RBX: 00007f99c63776d4 RCX: 0000000000455259 [ 1060.601095] RDX: 0000000000000000 RSI: 0000000000004b37 RDI: 0000000000000015 [ 1060.608340] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 1060.615587] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1060.622831] R13: 0000000000000203 R14: 00000000006f60e8 R15: 0000000000000001 [ 1060.630081] [ 1060.631689] Allocated by task 938: [ 1060.635206] save_stack+0x43/0xd0 [ 1060.638636] kasan_kmalloc+0xc4/0xe0 [ 1060.642324] kasan_slab_alloc+0x12/0x20 [ 1060.646275] kmem_cache_alloc_node+0x131/0x780 [ 1060.650836] copy_process.part.39+0x16bf/0x6ee0 [ 1060.655481] _do_fork+0x291/0x12a0 [ 1060.659000] SyS_clone+0x37/0x50 [ 1060.662346] do_syscall_64+0x29e/0x9d0 [ 1060.666210] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1060.671368] [ 1060.672970] Freed by task 979: [ 1060.676141] save_stack+0x43/0xd0 [ 1060.679569] __kasan_slab_free+0x11a/0x170 [ 1060.683782] kasan_slab_free+0xe/0x10 [ 1060.687566] kmem_cache_free+0x86/0x2d0 [ 1060.691522] free_task+0x166/0x1d0 [ 1060.695039] __put_task_struct+0x2d2/0x600 [ 1060.699253] delayed_put_task_struct+0x367/0x470 [ 1060.703987] rcu_process_callbacks+0x941/0x15f0 [ 1060.708637] __do_softirq+0x2e0/0xaf5 [ 1060.712406] [ 1060.714020] The buggy address belongs to the object at ffff8801a91542c0 [ 1060.714020] which belongs to the cache task_struct(81:syz5) of size 6016 [ 1060.727528] The buggy address is located 96 bytes inside of [ 1060.727528] 6016-byte region [ffff8801a91542c0, ffff8801a9155a40) [ 1060.739377] The buggy address belongs to the page: [ 1060.744283] page:ffffea0006a45500 count:1 mapcount:0 mapping:ffff8801a91542c0 index:0x0 compound_mapcount: 0 [ 1060.754231] flags: 0x2fffc0000008100(slab|head) [ 1060.758897] raw: 02fffc0000008100 ffff8801a91542c0 0000000000000000 0000000100000001 [ 1060.766764] raw: ffffea0006b63ba0 ffffea00063531a0 ffff8801b6c10840 ffff8801ac6d8940 [ 1060.774619] page dumped because: kasan: bad access detected [ 1060.780301] page->mem_cgroup:ffff8801ac6d8940 [ 1060.784766] [ 1060.786366] Memory state around the buggy address: [ 1060.791270] ffff8801a9154200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1060.798606] ffff8801a9154280: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1060.805940] >ffff8801a9154300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1060.813273] ^ [ 1060.817656] ffff8801a9154380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1060.824990] ffff8801a9154400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1060.832322] ================================================================== [ 1060.839877] Kernel panic - not syncing: panic_on_warn set ... [ 1060.839877] [ 1060.847234] CPU: 0 PID: 991 Comm: syz-executor1 Tainted: G B 4.16.0+ #4 [ 1060.855177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.864510] Call Trace: [ 1060.867081] dump_stack+0x1b9/0x294 [ 1060.870689] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1060.875860] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1060.880598] ? __mutex_lock+0x1720/0x17f0 [ 1060.884728] panic+0x22f/0x4de [ 1060.887900] ? add_taint.cold.5+0x16/0x16 [ 1060.892032] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1060.896421] ? do_raw_spin_unlock+0x9e/0x2e0 [ 1060.900808] ? __mutex_lock+0x175f/0x17f0 [ 1060.904935] kasan_end_report+0x47/0x4f [ 1060.908886] kasan_report.cold.7+0xc9/0x2f5 [ 1060.913185] __asan_report_load4_noabort+0x14/0x20 [ 1060.918091] __mutex_lock+0x175f/0x17f0 [ 1060.922044] ? get_futex_value_locked+0xcb/0xf0 [ 1060.926692] ? lo_ioctl+0x8d/0x1ec0 [ 1060.930294] ? futex_wait_setup+0x279/0x400 [ 1060.934598] ? mutex_trylock+0x2a0/0x2a0 [ 1060.938638] ? futex_wake+0x750/0x750 [ 1060.942417] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1060.947585] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1060.953102] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 1060.958181] ? futex_wait+0x5c1/0x9f0 [ 1060.961960] ? futex_wait_setup+0x400/0x400 [ 1060.966259] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1060.971429] ? debug_check_no_locks_freed+0x310/0x310 [ 1060.976597] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 1060.981682] ? futex_wake+0x2f6/0x750 [ 1060.985460] ? get_futex_key+0x1e90/0x1e90 [ 1060.989675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.995190] ? bpf_prog_kallsyms_find+0xd6/0x4a0 [ 1060.999928] ? lock_downgrade+0x8e0/0x8e0 [ 1061.004054] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 1061.009221] ? do_futex+0x249/0x27d0 [ 1061.012911] ? kasan_check_read+0x11/0x20 [ 1061.017037] ? rcu_is_watching+0x85/0x140 [ 1061.021164] mutex_lock_killable_nested+0x16/0x20 [ 1061.025985] ? mutex_lock_killable_nested+0x16/0x20 [ 1061.030980] lo_ioctl+0x8d/0x1ec0 [ 1061.034413] ? exit_robust_list+0x290/0x290 [ 1061.038712] ? kernel_text_address+0x79/0xf0 [ 1061.043100] ? loop_clr_fd+0xb80/0xb80 [ 1061.046966] blkdev_ioctl+0x9b6/0x2020 [ 1061.050832] ? blkpg_ioctl+0xc40/0xc40 [ 1061.054695] ? __fget+0x3e3/0x650 [ 1061.058126] ? lock_downgrade+0x8e0/0x8e0 [ 1061.062254] ? lock_release+0xa10/0xa10 [ 1061.066204] ? save_stack+0xa9/0xd0 [ 1061.069809] ? save_stack+0x43/0xd0 [ 1061.073414] ? __kasan_slab_free+0x11a/0x170 [ 1061.077799] ? kasan_slab_free+0xe/0x10 [ 1061.081753] ? do_sys_open+0x57f/0x770 [ 1061.085621] ? SyS_open+0x2d/0x40 [ 1061.089053] ? do_syscall_64+0x29e/0x9d0 [ 1061.093094] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1061.098434] ? __fget+0x40c/0x650 [ 1061.101869] ? expand_files.part.8+0x9a0/0x9a0 [ 1061.106428] ? trace_hardirqs_off+0xd/0x10 [ 1061.110639] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 1061.115718] block_ioctl+0xee/0x130 [ 1061.119324] ? blkdev_fallocate+0x400/0x400 [ 1061.123623] do_vfs_ioctl+0x1cf/0x1650 [ 1061.127495] ? ioctl_preallocate+0x2e0/0x2e0 [ 1061.131879] ? fget_raw+0x20/0x20 [ 1061.135310] ? trace_hardirqs_on+0xd/0x10 [ 1061.139435] ? kmem_cache_free+0x22e/0x2d0 [ 1061.143652] ? SyS_futex+0x3a4/0x56d [ 1061.147342] ? do_futex+0x27d0/0x27d0 [ 1061.151125] ? security_file_ioctl+0x9b/0xd0 [ 1061.155511] ksys_ioctl+0xa9/0xd0 [ 1061.158945] SyS_ioctl+0x24/0x30 [ 1061.162288] ? ksys_ioctl+0xd0/0xd0 [ 1061.165893] do_syscall_64+0x29e/0x9d0 [ 1061.169757] ? vmalloc_sync_all+0x30/0x30 [ 1061.173884] ? kasan_check_write+0x14/0x20 [ 1061.178101] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1061.183012] ? syscall_return_slowpath+0x30f/0x5c0 [ 1061.187922] ? prepare_exit_to_usermode+0x390/0x390 [ 1061.192919] ? prepare_exit_to_usermode+0x285/0x390 [ 1061.197911] ? perf_trace_sys_enter+0xaf0/0xaf0 [ 1061.202558] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1061.207382] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1061.212546] RIP: 0033:0x455259 [ 1061.215711] RSP: 002b:00007f99c6376c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.223394] RAX: ffffffffffffffda RBX: 00007f99c63776d4 RCX: 0000000000455259 [ 1061.230641] RDX: 0000000000000000 RSI: 0000000000004b37 RDI: 0000000000000015 [ 1061.237887] RBP: 000000000072bf58 R08: 0000000000000000 R09: 0000000000000000 [ 1061.245133] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1061.252377] R13: 0000000000000203 R14: 00000000006f60e8 R15: 0000000000000001 [ 1061.260056] Dumping ftrace buffer: [ 1061.263569] (ftrace buffer empty) [ 1061.267250] Kernel Offset: disabled [ 1061.270869] Rebooting in 86400 seconds..