9b497480245df6754ecb1e4932da4ceb507471315cbeb3b09e6785e2549e0f001d87c81d954c2118812d8df2f2eba7bc7d106db9f4b154af4cb4e106a95e310bb794ad66166964a4aa47d178d6507f730e2725707dc80f1c2bd69a72881181675e7f4dd82892a6f62462db42cc93e35773ad777e59b4e5abd1f6f26f91818f9e542d", 0xa9, 0xffffffffffffffff}, {&(0x7f0000000180)="cdf6ec0062ba76e02efe0b16064cdaca5d64aafc6a31b92d24c9a488c58a04676d3a985bff031df900241699d66355c9f32ff1a40928c8ff513cdbb7e5f07da72c2992c68ff503a64b5e6d067ca9e1ca3f06d1007da5bc2dd425ff57a5f4eaa2e89a1881526ae345a373c12d8648d5370fddec842560cf6204a65436cae5892b4c7fa6f6a1fcdc575687bfd52d03f8edad56e30c4e4fb2915ef958387dd4b8e3f355b67f4e42523b9e9cc2101dd113908fe7d000eb6402e3974e4948b9e4c529d6acd05ed4c23d72895a1f", 0xcb, 0x7}, {&(0x7f0000000280)="63a44d627834297d9a54ff06c6e433adfdb7762da5dc17b90dfee985e9c4e26d1a661b821ae988a34ba972a044decde0f37f822e283dd76441127cbe22a317", 0x3f, 0xfffffffffffffff9}], 0x0, &(0x7f0000000380)={[{@quota='quota', 0x2c}, {@integrity='integrity', 0x2c}, {@discard='discard', 0x2c}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:41 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x2000000, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 571.844117] binder: 12458:12459 ioctl c0306201 20000380 returned -22 [ 571.849111] netlink: 57 bytes leftover after parsing attributes in process `syz-executor5'. 15:25:41 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1f, 0x1) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00000001c0)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x1000, {0x2, 0x4e21}, {0x2, 0x4e23, @broadcast=0xffffffff}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8, 0x80, 0x9f8b, 0xc71, 0xcc7, &(0x7f0000000280)='vlan0\x00', 0x7, 0x7fffffff, 0xbca}) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r1 = syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0x5, 0x20000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e20, @rand_addr=0x34}, @in={0x2, 0x4e20}, @in={0x2, 0x4e23}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e20, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, @in6={0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0xfff}], 0x78) ioctl$LOOP_CLR_FD(r1, 0x4c01) 15:25:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 571.905986] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 571.912960] netlink: 57 bytes leftover after parsing attributes in process `syz-executor5'. [ 571.931786] binder: 12469:12470 transaction failed 29201/-22, size 0-1811939328 line 2967 15:25:41 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/164, &(0x7f00000000c0)=0xa4) [ 571.973438] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 572.003419] binder: BINDER_SET_CONTEXT_MGR already set [ 572.012279] binder: 12493:12495 unknown command 0 15:25:41 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003905090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:41 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x8001, 0x2, 0xb, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, [0x18]}, 0xffffffffffffff88) 15:25:41 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0xdc05, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 572.037482] binder: 12469:12491 ioctl 40046207 0 returned -16 [ 572.054544] binder: 12493:12495 ioctl c0306201 20000380 returned -22 [ 572.074853] IPVS: length: 164 != 8 [ 572.078901] binder_alloc: 12469: binder_alloc_buf, no vma 15:25:41 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:41 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x7fffffe, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40486311, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 572.085480] binder: 12469:12503 transaction failed 29189/-3, size 0-1811939328 line 2967 [ 572.116819] netlink: 57 bytes leftover after parsing attributes in process `syz-executor5'. 15:25:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:42 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20a0400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001500010027bd7000fc9bdf250a599846", @ANYRES32=r1, @ANYBLOB="0800080089000000140006007f000000050000007f00000006000000140001000000000000000000000000000000000014000200fe8000000000000000000000000000aa14000200ff020000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4) [ 572.177250] IPVS: length: 164 != 8 [ 572.185449] netlink: 57 bytes leftover after parsing attributes in process `syz-executor5'. [ 572.201374] binder: undelivered TRANSACTION_ERROR: 29201 [ 572.206935] binder: undelivered TRANSACTION_ERROR: 29189 15:25:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0xff00, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:42 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x80) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x70, r1, 0x0, 0x70bd26, 0x25dfdbfd, {0x9}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x800) r2 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:42 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003948090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 572.224918] IPVS: length: 164 != 8 [ 572.236666] binder: 12530:12531 unknown command 0 [ 572.244204] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 572.268274] binder: 12530:12531 ioctl c0306201 20000380 returned -22 15:25:42 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000340)={0x0, 0x0, 0x400000000, 0x0, 0x3, 0x9}, 0x400000000000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) [ 572.307577] binder: 12538:12540 transaction failed 29201/-22, size 0-6 line 2967 [ 572.339720] IPVS: length: 164 != 8 [ 572.343662] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:25:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:42 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900060035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0xb80b, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:42 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x100000001}, {0xa, 0x4e22, 0x10000, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xb}}, 0x3ff}, 0x2, [0xcb00, 0x0, 0x3, 0x80, 0x101, 0x2, 0x6, 0x3]}, 0x5c) 15:25:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrngt', 0x0, 0x0) [ 572.371416] IPVS: length: 164 != 8 [ 572.389252] binder: BINDER_SET_CONTEXT_MGR already set 15:25:42 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x1f, {0x2, 0x4e23, @broadcast=0xffffffff}, {0x2, 0x4e20}, {0x2, 0x4e22, @multicast2=0xe0000002}, 0x24, 0x5, 0x3f, 0xffff, 0x9, &(0x7f0000000000)='lo\x00', 0xff, 0x24a2, 0xe899}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:42 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x9000000000000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 572.426813] binder: 12538:12556 ioctl 40046207 0 returned -16 [ 572.439374] binder: 12559:12561 unknown command 0 [ 572.470630] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 572.478317] binder_alloc: 12538: binder_alloc_buf, no vma [ 572.483948] binder: 12538:12558 transaction failed 29189/-3, size 0-6 line 2967 [ 572.496971] binder: 12559:12561 ioctl c0306201 20000380 returned -22 [ 572.511840] IPv6: NLM_F_REPLACE set, but no existing node found! 15:25:42 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0xb80b000000000000, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:42 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0xffffffff00000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:42 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x6) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000000c0)="a6bd9d425b02b4f9ff12c1c8661dca9e200edd185d3bb4c55a2b7ea5b528f7f52aaf467bfbc0e23f1dfe9213fee0685ce8cf0ae2b40ea7dfab805167bb08c996e5ce4bdf27a3f3e674e86a9a59a16f0ea097") ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 572.525235] IPVS: length: 164 != 8 [ 572.532609] binder: undelivered TRANSACTION_ERROR: 29201 [ 572.538196] binder: undelivered TRANSACTION_ERROR: 29189 [ 572.553658] IPVS: length: 164 != 8 [ 572.562973] netlink: 'syz-executor5': attribute type 6 has an invalid length. 15:25:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10630840, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 572.609142] IPv6: NLM_F_REPLACE set, but no existing node found! 15:25:42 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x501002) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x3, r1, 0x9, r2}, 0x10) r3 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:42 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003908090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:42 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 572.650444] binder: 12596:12597 unknown command 0 [ 572.650767] binder: 12594:12600 transaction failed 29201/-22, size 0-16777216 line 2967 [ 572.682844] binder: 12596:12597 ioctl c0306201 20000380 returned -22 15:25:42 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:42 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x4000000000000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 572.741660] IPVS: length: 164 != 8 15:25:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x100000000000000, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 572.772803] binder: BINDER_SET_CONTEXT_MGR already set 15:25:42 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039fc090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:42 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)=0x19f8) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f0000000100)=0xa4) [ 572.803913] binder: 12594:12623 ioctl 40046207 0 returned -16 [ 572.842823] binder_alloc: 12594: binder_alloc_buf, no vma 15:25:42 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x2) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf69, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) write$P9_RLERRORu(r0, &(0x7f00000000c0)={0x1b, 0x7, 0x1, {{0xe, '/dev/snapshot\x00'}}}, 0x1b) [ 572.848516] binder: 12594:12634 transaction failed 29189/-3, size 0-16777216 line 2967 15:25:42 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0xff00000000000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 572.875226] binder: 12639:12640 unknown command 0 [ 572.885279] IPVS: length: 164 != 8 [ 572.904544] binder: 12639:12640 ioctl c0306201 20000380 returned -22 [ 572.918352] IPVS: length: 164 != 8 15:25:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0xb80b0000, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 572.924617] binder: undelivered TRANSACTION_ERROR: 29201 [ 572.930213] binder: undelivered TRANSACTION_ERROR: 29189 15:25:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:42 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900030035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:42 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x401, 0x0) recvfrom$unix(r0, &(0x7f0000000140)=""/9, 0x9, 0x62, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4204, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000000)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x28, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:42 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc) r1 = socket$inet6(0xa, 0x804, 0x1) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000140)=""/164, &(0x7f0000000300)=0xa4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000002c0)=0xc) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x3, 0x1953, 0x2, 0x1, 0x0, 0x0, 0x801, 0x8, 0x3, 0x4a82, 0x8001, 0xc944, 0x3f, 0x800, 0x8, 0x3, 0x639e, 0x646c8736, 0xfffffffffffffffe, 0x1, 0x6, 0x100000000, 0x0, 0x492, 0x6e, 0x5, 0x6, 0x3, 0x7, 0x0, 0x1000, 0x3, 0x7, 0xcf5, 0x100000000, 0x1, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x6100, 0x401, 0x7fffffff, 0x4, 0x9d0c, 0x346, 0x8}, r2, 0xb, r0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x20000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000380)=0x5, 0x8) connect$rds(r3, &(0x7f0000000340)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) 15:25:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1163484000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:42 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0xff000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:42 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfec0, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:42 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x1, 0xfff, 0x1, 0x5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 573.015947] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 573.087962] binder: 12672:12673 transaction failed 29201/-22, size 0-1946157056 line 2967 [ 573.098477] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 573.115218] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:25:42 executing program 6: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x300000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:43 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003910090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 573.142123] binder: 12678:12683 unknown command 0 [ 573.152339] binder: BINDER_SET_CONTEXT_MGR already set [ 573.160440] binder: 12678:12683 ioctl c0306201 20000380 returned -22 [ 573.160548] binder: 12672:12694 ioctl 40046207 0 returned -16 [ 573.173387] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:25:43 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) r1 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@multicast2=0xe0000002, @in, 0x4e21, 0x9, 0x4e21, 0x0, 0x0, 0x80, 0x80, 0x8, 0x0, r1}, {0xd35, 0xf02, 0x4, 0x8, 0x42c, 0x3, 0x10001, 0x4}, {0x7, 0x1ff, 0x5, 0xfffffffffffffffe}, 0x1f, 0x6e6bb2, 0x0, 0x1, 0x3, 0x1}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d5, 0x33}, 0xa, @in=@loopback=0x7f000001, 0x34ff, 0x1, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x5, 0x3f}}, 0xe8) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:43 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x9000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 573.211281] binder_alloc: 12672: binder_alloc_buf, no vma [ 573.217046] binder: 12672:12690 transaction failed 29189/-3, size 0-1946157056 line 2967 15:25:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x763044000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 573.273426] binder: undelivered TRANSACTION_ERROR: 29201 [ 573.279044] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.301730] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 573.316525] binder: 12721:12722 unknown command 0 15:25:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26770, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:43 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setattr(r0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_pts(0xffffffffffffff9c, 0xa0100) ioctl$TIOCNXCL(r1, 0x540d) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:43 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = dup2(r0, r1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x2}) [ 573.330191] binder: 12721:12722 ioctl c0306201 20000380 returned -22 15:25:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfec0000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:43 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003968090035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf630c4000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:43 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 573.394863] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:25:43 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) r0 = msgget(0x3, 0x82) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000000)=""/73) [ 573.459149] binder: 12736:12737 transaction failed 29201/-22, size 0-157552 line 2967 [ 573.484333] binder: 12749:12750 unknown command 0 15:25:43 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x1000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:43 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x4000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 573.513633] binder: BINDER_SET_CONTEXT_MGR already set [ 573.526905] binder: 12749:12750 ioctl c0306201 20000380 returned -22 [ 573.545809] binder: 12736:12758 ioctl 40046207 0 returned -16 15:25:43 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000400)=""/165, &(0x7f00000004c0)=0xa5) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) fcntl$setpipe(r0, 0x407, 0x3) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r2 = accept4(r1, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x18) getsockname(r1, &(0x7f0000000340)=@nfc, &(0x7f00000003c0)=0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r3, 0x81}, &(0x7f0000000300)=0x8) r4 = open(&(0x7f0000000500)='./file0\x00', 0x80, 0x24) write$P9_RATTACH(r4, &(0x7f0000000540)={0x14, 0x69, 0x1, {0x2, 0x1, 0x7}}, 0x14) 15:25:43 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 573.575308] binder_alloc: 12736: binder_alloc_buf, no vma [ 573.580956] binder: 12736:12765 transaction failed 29189/-3, size 0-157552 line 2967 15:25:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:43 executing program 6: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x8}, 0xfffffffffffffffe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 573.616639] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 573.637772] IPVS: length: 164 != 8 [ 573.687346] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 573.695961] binder: 12783:12784 unknown command 0 [ 573.702309] IPVS: length: 164 != 8 [ 573.719325] binder: undelivered TRANSACTION_ERROR: 29201 [ 573.724945] binder: undelivered TRANSACTION_ERROR: 29189 [ 573.727208] binder: 12783:12784 ioctl c0306201 20000380 returned -22 15:25:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:43 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900140035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xff000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:43 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:43 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x1, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:43 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x90, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 573.790929] netlink: 'syz-executor5': attribute type 20 has an invalid length. [ 573.822904] IPVS: length: 164 != 8 15:25:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x300, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:43 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xc, 0x2, 0x1ff, 0x5, 0x11, 0xffffffffffffffff, 0x3}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) tkill(r3, 0x17) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x5, 0x2, 0xe0}}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) [ 573.833072] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 573.857677] binder: 12805:12806 transaction failed 29201/-22, size 0-104 line 2967 [ 573.873161] netlink: 'syz-executor5': attribute type 20 has an invalid length. [ 573.882901] IPVS: length: 164 != 8 15:25:43 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:43 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900200035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 573.890730] binder: 12814:12815 unknown command 0 [ 573.900874] binder: 12814:12815 ioctl c0306201 20000380 returned -22 [ 573.907707] binder: BINDER_SET_CONTEXT_MGR already set [ 573.910286] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 573.930158] binder: 12805:12817 ioctl 40046207 0 returned -16 15:25:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c630e, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:43 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget(0x0, 0x410) msgrcv(r0, &(0x7f0000000280)={0x0, ""/4096}, 0x1008, 0x3, 0x1000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x400800, 0x20) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000140)={0x1, 0x5, 0xe5, 0x10000}) connect$bt_sco(r1, &(0x7f0000000180)={0x1f, {0x7ff, 0x8, 0x1f, 0x0, 0x12edff98, 0x2}}, 0x8) r2 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$KDMKTONE(r1, 0x4b30, 0xddb) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xa, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 573.994792] binder_alloc: 12805: binder_alloc_buf, no vma [ 574.000535] binder: 12805:12825 transaction failed 29189/-3, size 0-104 line 2967 [ 574.002534] binder: 12830:12832 unknown command 0 15:25:43 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x2, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 574.041046] binder: 12830:12832 ioctl c0306201 20000380 returned -22 [ 574.058617] binder: undelivered TRANSACTION_ERROR: 29201 [ 574.064222] binder: undelivered TRANSACTION_ERROR: 29189 15:25:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:43 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xaa, "3e9dea91cd7b34afa029f890ba972a7551eee0df7423e8dc8c51901d8c630de69ac65422e833fcdbc1ce3db509ac36c8633abddaf052a5156d0b90fafe30f329c5a17a568224a8d9f99cf33f24d09ce6fe6fb1b0cc25481af24d3e2c0fedddde547aaf73ebc7bd8763f6a935f04ff0c47660c1a3ade8334f436c88082e4aa58e1de14931ab88cbd1c010a3326ffea9cf13bc2c943c8779d125c8be9084f04e81ece9620dd045cdc30cd9"}, &(0x7f0000000000)=0xb2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e23, 0x20, @loopback={0x0, 0x1}, 0x673b}}, 0x5, 0xffffffffffffff01}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:43 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:43 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900030035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:43 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x2, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4630440, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 574.101317] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 574.136576] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 574.159742] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 574.202816] binder: 12866:12867 unknown command 0 [ 574.209209] kauditd_printk_skb: 3555 callbacks suppressed [ 574.209219] audit: type=1326 audit(574.207:23406): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.211508] netlink: 'syz-executor5': attribute type 3 has an invalid length. 15:25:44 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x6, 0x3, 0x6, 0x1000b, 0x0, 0xffffffffffffffff, 0x7ff, [0x18]}, 0x2c) 15:25:44 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x2000000000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 574.214858] audit: type=1326 audit(574.207:23407): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.239562] binder: 12866:12867 ioctl c0306201 20000380 returned -22 [ 574.241683] audit: type=1326 audit(574.207:23408): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.266504] binder: 12868:12869 transaction failed 29201/-22, size 0-288230376151711744 line 2967 15:25:44 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000c0035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 574.267590] audit: type=1326 audit(574.207:23409): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.306570] binder: BINDER_SET_CONTEXT_MGR already set [ 574.315695] audit: type=1326 audit(574.207:23410): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.322241] binder: 12868:12871 ioctl 40046207 0 returned -16 [ 574.340385] audit: type=1326 audit(574.207:23411): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.340406] audit: type=1326 audit(574.207:23412): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.340424] audit: type=1326 audit(574.207:23413): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.394998] binder_alloc: 12868: binder_alloc_buf, no vma [ 574.409696] audit: type=1326 audit(574.207:23414): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:25:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x400000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:44 executing program 6: openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x800, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xfff, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4410000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@delneigh={0x88, 0x1d, 0x20, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, r1, 0xa, 0xa4, 0x5}, [@NDA_LLADDR={0xc, 0x2, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, @NDA_LINK_NETNSID={0x8, 0xa, 0x10000}, @NDA_CACHEINFO={0x14, 0x3, {0xba8b, 0xfff, 0x73f4, 0x81}}, @NDA_LLADDR={0xc, 0x2, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}}, @NDA_VLAN={0x8, 0x5, 0x3}, @NDA_PORT={0x8, 0x6, 0x4e24}, @NDA_DST_IPV6={0x14, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, @NDA_MASTER={0x8, 0x9, 0x100000000}, @NDA_DST_MAC={0xc, 0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x4040040) r2 = getpid() sched_setattr(r2, &(0x7f00000000c0)={0x30, 0x0, 0x1, 0x9, 0x1f, 0xa99, 0x6, 0x9}, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_misc(r4, &(0x7f0000000100)={'syz1', "44653243230c3d2ef8ef90eb0deb372dbba540e60558a879e01f7983e52199edfedd89a9344ff95792629ca939053765b71c63ac0f929d925537dbb33c088410ae4a309c89dd5d3cee336c009531b3b99e01c5d33647c54a1a7182f5d5467faff19b95aae37415494b2fcba232025d777651e3b1557cb93e575868ee0c4924cbd5408716e407dbdc1ae0e082563ae01991ebf189f2416df06d87856c8aff0cb01c0a9c8fe55a723988871dd795850c426e"}, 0xb5) 15:25:44 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900120035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 574.409716] audit: type=1326 audit(574.207:23415): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12857 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 574.415727] binder: 12868:12871 transaction failed 29189/-3, size 0-288230376151711744 line 2967 [ 574.559941] binder: 12894:12896 unknown command 0 [ 574.592191] binder: 12894:12896 ioctl c0306201 20000380 returned -22 [ 574.603477] binder: undelivered TRANSACTION_ERROR: 29201 [ 574.609049] binder: undelivered TRANSACTION_ERROR: 29189 [ 574.858241] IPVS: length: 164 != 8 15:25:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x809, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:44 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x100000000000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:44 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000140)=0xc) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:44 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900110035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xb80b000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 575.006957] IPVS: length: 164 != 8 15:25:44 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xbe5e}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x1}, &(0x7f0000000100)=0x8) 15:25:44 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039005f0035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:44 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x80fe, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 575.047850] binder: 12917:12918 unknown command 0 [ 575.055323] binder: 12914:12924 transaction failed 29201/-22, size 0-24576 line 2967 [ 575.068923] binder: 12917:12918 ioctl c0306201 20000380 returned -22 [ 575.125894] binder: BINDER_SET_CONTEXT_MGR already set 15:25:44 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x600, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:45 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e24, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x9}, {0xa, 0x4e24, 0x7fffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0x2, [0xfff, 0x6, 0x40000000000000, 0xff, 0x0, 0x7, 0x4, 0x7]}, 0x5c) 15:25:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:45 executing program 1: r0 = socket$inet6(0xa, 0x805, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x200, 0x0) getsockopt$inet_int(r1, 0x0, 0x37, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000400)={@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, {&(0x7f00000002c0)=""/253, 0xfd}, &(0x7f00000003c0), 0x19}, 0xa0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000100)=""/176, &(0x7f00000001c0)=0xb0) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)="2f6465762f6877726e6703", 0x0, 0x0) [ 575.150848] binder: 12914:12938 ioctl 40046207 0 returned -16 [ 575.166644] binder_alloc: 12914: binder_alloc_buf, no vma [ 575.172315] binder: 12914:12946 transaction failed 29189/-3, size 0-24576 line 2967 [ 575.241585] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 575.243845] binder: 12952:12956 unknown command 0 [ 575.271084] binder: 12952:12956 ioctl c0306201 20000380 returned -22 15:25:45 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900140035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x3, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:45 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x7, 0x6, 0x10000000000009, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 575.284341] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 575.284412] IPVS: length: 164 != 8 [ 575.295628] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.304423] binder: undelivered TRANSACTION_ERROR: 29189 15:25:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:45 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x6, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 575.332495] netlink: 'syz-executor5': attribute type 20 has an invalid length. [ 575.365548] IPVS: length: 164 != 8 15:25:45 executing program 6: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x50080) ioctl$RTC_PIE_OFF(r0, 0x7006) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:45 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) socketpair(0x7, 0x0, 0x1f, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000001cc0)=0x81, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000001280)={{0x9, 0x0, 0x8, 0x1, 'syz1\x00', 0x401}, 0x0, [0x8000, 0x19, 0x80, 0x3, 0x2, 0x969f, 0x8, 0x7, 0x3ff, 0x101, 0x5, 0x5, 0x3, 0x3, 0x0, 0xffffffffffffff80, 0x2, 0x7ff, 0xfffffffffffffff7, 0x7, 0x20, 0x73, 0x800, 0x80, 0x4, 0x7f, 0x1, 0x0, 0x0, 0x1ff, 0x1000, 0x0, 0x1ff, 0x8c, 0xaab6, 0x26, 0x2, 0x5, 0x9, 0x2, 0x8, 0x101, 0x40, 0x1000, 0xffffffffffffea2e, 0x8001, 0x7fffffff, 0x6, 0x7, 0x10001, 0x0, 0x1, 0xbc3, 0xffff, 0x1, 0x3, 0x0, 0x80000000, 0x5, 0x8000000000006, 0x7ff, 0x8, 0xffffffffffffffff, 0x7, 0x1, 0x4, 0x106a, 0x4, 0x3f, 0x9, 0x9, 0x6, 0x7, 0x9, 0xe03, 0x8, 0x4f68, 0x1b, 0x10001, 0x800, 0x100000001, 0x2, 0x2000000000000000, 0x5, 0x3, 0x80, 0x8, 0x8000, 0x8000, 0x5e9, 0x0, 0x5, 0x2, 0x3ff, 0x8000, 0x6, 0x2, 0x100000000, 0xffffffff, 0x22a, 0x100000000, 0xffffffffffff7eda, 0x80000000, 0x4, 0x9, 0x6, 0xfffffffffffffff7, 0x1, 0x1, 0x4, 0x80000001, 0x101, 0xc019, 0x7, 0x1, 0x7, 0x4, 0x6, 0x3, 0x1000009, 0x4, 0x6, 0x1a4a, 0x6, 0x7, 0x5, 0x7, 0x1fe], {0x77359400}}) r4 = add_key$keyring(&(0x7f0000001780)='keyring\x00', &(0x7f00000017c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$read(0xb, r4, &(0x7f0000001800)=""/6, 0x6) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000001840)={0x7, {{0xa, 0x4e22, 0xffffffffffffff2b, @mcast2={0xff, 0x2, [], 0x1}, 0x100000001}}, {{0xa, 0x4e20, 0x401, @loopback={0x0, 0x1}, 0x80000000}}}, 0x108) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000019c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001ac0)=0xe8) lstat(&(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x4e24, 0x4, 0x4e20, 0xfffffffffffffffb, 0xa, 0xa0, 0xa0, 0x0, r5, r6}, {0x0, 0x4, 0x3, 0x5, 0x1, 0x8, 0x8, 0x236}, {0x5, 0x1000, 0x1000, 0x3}, 0x80, 0x6e6bb2, 0x2, 0x1, 0x3, 0x3}, {{@in6=@local={0xfe, 0x80, [], 0xaa}, 0x4d2, 0x3f}, 0xa, @in=@loopback=0x7f000001, 0x3504, 0x7, 0x2, 0x1ff, 0x400, 0x9, 0x7}}, 0xe8) write$P9_RREADDIR(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="a600000029010009000000a8020000000100000000000000f8ffffffffffffff0407002e2f66696c6530080100000005000000000000001b6f6730000000000107002e2f66696c6530000100000001000000000000000400000000000000ff07002e2f66696c65302700000000060000000000000001000000000000000407002e2f66696c653000030000000500000000000000ff01000000000000ff07002e2f68696c6530"], 0xa6) setsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000280)="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", 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8631040, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrngz', 0x0, 0x0) [ 575.409513] netlink: 'syz-executor5': attribute type 20 has an invalid length. [ 575.430179] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:25:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xa00000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 575.459068] binder: 12981:12984 transaction failed 29201/-22, size 0-1536 line 2967 [ 575.494136] binder: 12990:12996 unknown command 0 15:25:45 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900390035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 575.503076] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 575.516725] binder: BINDER_SET_CONTEXT_MGR already set [ 575.522231] binder: 12981:12999 ioctl 40046207 0 returned -16 [ 575.534162] binder: 12990:12996 ioctl c0306201 20000380 returned -22 [ 575.551936] binder_alloc: 12981: binder_alloc_buf, no vma 15:25:45 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) readahead(r0, 0x7, 0x7ff) [ 575.557627] binder: 12981:12999 transaction failed 29189/-3, size 0-1536 line 2967 [ 575.573720] IPVS: length: 164 != 8 [ 575.595113] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.600704] binder: undelivered TRANSACTION_ERROR: 29189 15:25:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfe800000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:45 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000d0035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 575.625572] IPVS: length: 164 != 8 15:25:45 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x3, 0x5cbe5acf, 0x6, 0x200, 0x7}) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:45 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x7ff, 0x1000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x4010, r1, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 15:25:45 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x200000000000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 575.689784] binder: 13023:13025 unknown command 0 [ 575.703558] binder: 13026:13032 transaction failed 29201/-22, size 0-117440512 line 2967 15:25:45 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900060035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x5dc, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 575.749830] binder: 13023:13025 ioctl c0306201 20000380 returned -22 [ 575.779082] binder: BINDER_SET_CONTEXT_MGR already set 15:25:45 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x100) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:45 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x800) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7, 0x6, 0x4}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0xd4, "a5eca838e504061efe00d8cd641c095cf4351d24341d496dff05d2a907d4a39afbb232e0d4f61fd3f26ab66650ee938ed4eba8dc9c6d19b3678c605a8d5ae5c71cc630c9d3567033f0ecd9015afbc54cc7f5467fb0d11736a1d56ad6a12f4bcc257c850ea7230349d6b303cc11df156110d82d7ca6343ad157c0c0b23f7109e12a7d95589853f8e1c5c04ee87444dda3a1cc82d8366001fd8aa1f1ea35aa137b083a8177fac8540297fa3b9bc52cdd27c064717dae1c475471bb0d4a3977c6f8ab21f28a0b65845907bc47a50e98c8066d54ae34"}, &(0x7f0000000200)=0xdc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb63000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 575.800644] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 575.820701] binder: 13026:13048 ioctl 40046207 0 returned -16 15:25:45 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0xfeffff07, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:45 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x400000008006, 0xb, 0x0, 0x1, 0x4, [0x18]}, 0x2c) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) [ 575.846400] IPv6: NLM_F_REPLACE set, but no existing node found! 15:25:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x6000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 575.885402] binder_alloc: 13026: binder_alloc_buf, no vma [ 575.891085] binder: 13026:13065 transaction failed 29189/-3, size 0-117440512 line 2967 [ 575.893578] netlink: 'syz-executor5': attribute type 6 has an invalid length. [ 575.920109] IPv6: NLM_F_REPLACE set, but no existing node found! [ 575.928504] binder: 13067:13068 unknown command 0 15:25:45 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xffff, 0x480) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000180)) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) dup3(r1, r0, 0x80000) getpid() [ 575.942109] binder: 13067:13068 ioctl c0306201 20000380 returned -22 [ 575.965141] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.970692] binder: undelivered TRANSACTION_ERROR: 29189 [ 575.979783] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:25:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)="2f6465762f6877726e67ff", 0x0, 0x0) 15:25:45 executing program 6: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200802, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x29) [ 575.994943] IPVS: length: 164 != 8 15:25:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x263044000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:45 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfe80000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 576.033309] IPVS: length: 164 != 8 15:25:45 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900050035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:45 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xd, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:45 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 576.079739] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 576.096513] binder: 13094:13096 unknown command 0 [ 576.112169] binder: 13094:13096 ioctl c0306201 20000380 returned -22 [ 576.116651] binder: 13095:13097 transaction failed 29201/-22, size 0-1280 line 2967 15:25:46 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000a0035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xa000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:46 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x6000000, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 576.186135] IPVS: length: 164 != 8 [ 576.195847] binder: BINDER_SET_CONTEXT_MGR already set [ 576.206618] binder: 13095:13114 ioctl 40046207 0 returned -16 [ 576.217261] IPVS: length: 164 != 8 15:25:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:46 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0xd46, 0x0, 0x3, 0x0, r0}, 0x2c) [ 576.235364] binder_alloc: 13095: binder_alloc_buf, no vma [ 576.241053] binder: 13095:13114 transaction failed 29189/-3, size 0-1280 line 2967 [ 576.272664] binder: 13130:13131 unknown command 0 15:25:46 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x3ff, 0x1942, 0x7, 0x9, 0x0, 0x7, 0x100, 0x8, 0x4, 0x9d6, 0x8f}, 0xb) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:46 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900040035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 576.284955] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 576.313390] binder: 13130:13131 ioctl c0306201 20000380 returned -22 [ 576.318982] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.325710] binder: undelivered TRANSACTION_ERROR: 29189 15:25:46 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x200001f, 0x440242) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000100)="5c2d546703bef53446bea595948ca1af2a0923e541a0290b6b227d5f55feecfa2c937db4fc63d1b138df907e15fc3a1b46725b8163d6592b52091664d43bb1c815f1ef5bde7ba9cb63f4631a3dcc7d47fee5da68e543f0dcb60b9214583960405bf50ad00b2d70d91274", &(0x7f0000000180)=""/211}, 0x18) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)={{0x5, 0x2}, 0x1, 0x1, 0x1, {0x2, 0x100000001}, 0x7fff, 0xfff}) ioctl$FICLONE(r2, 0x40049409, r1) 15:25:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 576.349426] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 15:25:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfc000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 576.391642] IPVS: length: 164 != 8 15:25:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40046307, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrngH', 0x0, 0x0) 15:25:46 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:46 executing program 6: sched_setattr(0x0, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x800) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x10000, 0x20100) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x7, 0x7, 0x8, 0x80000000, 'syz0\x00', 0x3}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='ip6tnl0\x00') r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) lseek(r2, 0x0, 0x3) sigaltstack(&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040)) 15:25:46 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$inet(r0, &(0x7f00000002c0)={0x0, 0x0, @multicast2}, &(0x7f0000000300)=0x10) r1 = socket$inet6(0xa, 0x805, 0xfffffffffffffffe) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000003c0)={'filter\x00', 0x11, "39da1e093325570274253cc57acf67b94d"}, &(0x7f0000000380)=0x35) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x800, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000400)) getsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000100)=""/252, &(0x7f0000000280)=0xfc) [ 576.420637] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 576.428196] IPVS: length: 164 != 8 [ 576.441783] binder: 13150:13151 transaction failed 29201/-22, size 0-8192 line 2967 15:25:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xdc05, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 576.505255] binder: BINDER_SET_CONTEXT_MGR already set [ 576.519114] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 576.528261] binder: 13160:13163 unknown command 0 [ 576.546342] binder: 13150:13162 ioctl 40046207 0 returned -16 15:25:46 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039001d0035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:46 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x5000fd22) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) [ 576.562219] binder: 13160:13163 ioctl c0306201 20000380 returned -22 15:25:46 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/164, &(0x7f00000003c0)=0x28) 15:25:46 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 576.603518] binder_alloc: 13150: binder_alloc_buf, no vma [ 576.609176] binder: 13150:13162 transaction failed 29189/-3, size 0-8192 line 2967 [ 576.629638] binder: undelivered TRANSACTION_ERROR: 29201 [ 576.635185] binder: undelivered TRANSACTION_ERROR: 29189 15:25:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x963104000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 576.658911] netlink: 'syz-executor5': attribute type 29 has an invalid length. [ 576.664632] IPVS: length: 40 != 8 15:25:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfc00, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7067020000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:46 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:46 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x7e0e, 0x59, 0x5}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 576.718392] IPVS: length: 40 != 8 [ 576.725288] binder: 13196:13197 unknown command 0 [ 576.736457] netlink: 'syz-executor5': attribute type 29 has an invalid length. [ 576.753511] binder: 13196:13197 ioctl c0306201 20000380 returned -22 15:25:46 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) process_vm_readv(r0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000000140)=""/116, 0x74}, {&(0x7f00000001c0)=""/19, 0x13}, {&(0x7f0000001280)=""/189, 0xbd}, {&(0x7f0000001340)=""/89, 0x59}, {&(0x7f00000013c0)=""/24, 0x18}, {&(0x7f0000001400)=""/22, 0x16}, {&(0x7f0000001440)=""/174, 0xae}], 0x8, &(0x7f0000002a80)=[{&(0x7f0000001580)=""/4, 0x4}, {&(0x7f00000015c0)=""/198, 0xc6}, {&(0x7f00000016c0)=""/84, 0x54}, {&(0x7f0000001740)=""/52, 0x34}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/115, 0x73}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/251, 0xfb}, {&(0x7f0000002980)=""/253, 0xfd}], 0x9, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 576.774622] binder: 13196:13197 unknown command 0 [ 576.794237] binder: 13196:13197 ioctl c0306201 20000380 returned -22 15:25:46 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfec00000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 576.820952] binder: 13211:13216 transaction failed 29201/-22, size 0-8099444653872381952 line 2967 [ 576.831547] IPVS: length: 164 != 8 [ 576.849808] IPVS: length: 164 != 8 15:25:46 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000000c0)) [ 576.879233] binder: BINDER_SET_CONTEXT_MGR already set 15:25:46 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:46 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000180)='net/dev_mcast\x00') getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={r3, 0x400}, &(0x7f0000000380)=0x8) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@dev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000280)={@remote={0xfe, 0x80, [], 0xbb}, 0x64, r4}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 576.913164] binder: 13211:13224 ioctl 40046207 0 returned -16 [ 576.920984] binder: 13230:13231 unknown command 0 [ 576.934154] binder: 13230:13231 ioctl c0306201 20000380 returned -22 [ 576.956667] binder_alloc: 13211: binder_alloc_buf, no vma 15:25:46 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900020035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 576.962363] binder: 13211:13224 transaction failed 29189/-3, size 0-8099444653872381952 line 2967 15:25:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:46 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:46 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="0300fb000b4feb48e22d000000000000000000000000be5d701d08745a1e9b94b9d52c4ef6a94f723a91e9bad2f2f9f35073a7be"]) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:46 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x600, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 577.028380] IPVS: length: 164 != 8 [ 577.058237] IPVS: length: 164 != 8 [ 577.062181] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.067690] binder: undelivered TRANSACTION_ERROR: 29189 15:25:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:46 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fdatasync(r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:46 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900100035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:46 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000280)=0xc) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0xe8, 0x4, 0x10000000000, 0x5ca6, 0x0, 0x8, 0x208, 0x0, 0x3, 0x3, 0x9, 0x457c, 0x1, 0x10000, 0x4502, 0x1000, 0x7a, 0x4, 0x9, 0x2, 0x7e3, 0xbf54, 0x3, 0x0, 0x1, 0x5, 0x8000, 0x7f, 0x4, 0x775, 0x80000001, 0x8001, 0x0, 0x0, 0x101, 0x4, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000100), 0xe}, 0x0, 0x288a2540, 0xffffffffffffffff, 0x6, 0x8, 0x4, 0x9}, r0, 0xa, r1, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x5, 0x5) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 577.141137] binder: 13266:13267 unknown command 0 15:25:47 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:47 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffd, 0x8800) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x5}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xc0fe, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 577.183509] netlink: 'syz-executor5': attribute type 16 has an invalid length. [ 577.197642] binder: 13266:13267 ioctl c0306201 20000380 returned -22 15:25:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 577.226582] binder: 13280:13282 transaction failed 29201/-22, size 0-4261281791 line 2967 [ 577.230327] netlink: 'syz-executor5': attribute type 16 has an invalid length. 15:25:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:47 executing program 6: r0 = inotify_init() signalfd4(r0, &(0x7f0000000100)={0x2}, 0x8, 0x80000) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2, 0x4}, &(0x7f0000000200)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:47 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x6, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:47 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0x2, 0x81}, &(0x7f00000001c0)=0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote, @dev}, &(0x7f0000000380)=0xc) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000003c0)={@mcast2={0xff, 0x2, [], 0x1}, r2}, 0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x8000, 0x13, 0x6}, 0x98) 15:25:47 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900080035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 577.316623] binder: BINDER_SET_CONTEXT_MGR already set [ 577.326995] binder: 13280:13302 ioctl 40046207 0 returned -16 [ 577.342908] binder: 13306:13307 unknown command 0 [ 577.374746] binder_alloc: 13280: binder_alloc_buf, no vma [ 577.380568] binder: 13280:13302 transaction failed 29189/-3, size 0-4261281791 line 2967 [ 577.391740] binder: 13306:13307 ioctl c0306201 20000380 returned -22 15:25:47 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:47 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x181000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="20a18a7719c6690ec65850445641dafa4f3d5df7ba31ae8495cbe56a42f2cbdd6b0c35b077bc47f0c73d919588daa3c0a9df38e8d691ee40011dc3d70073084c327986be27ff1fa7a80eeae816a5aa861a1599cfb010f79296d97a8aad876fbab33a9c62b43fb710fe8075e09dcd", 0x6e}, {&(0x7f0000000140)="41240aa9c5053d4affa4288688ab69efd47fbfca9a55ba8a6cad4c2e347467e246d045cd7188bf9fef51510d896799944271d1104a24ae7e532b8050f4516040f217379375938497669f83583bfff7f84fa3e48b21abfe728c9646e1154d9d88fe94f261cd4b3fd4da91d6f24399f6149c3a222182ee624dd26c1f25c6d4be4b98dacd9c51498beea0038b1dfc2194e076bf60e94db41b4762ff4bc767377dfaf49e6e37aebe1cffc3c642d613dba9c5a1c78a176a1b382762e70897abf0e9116d1f8c2267f2505a", 0xc8}, {&(0x7f0000000240)="42cb6687143816eb80af6cbc7f14e352f411932df380ca3e70cfc9e0c68bfdc0d1ae0e14911632daef3aff20a9895cbaa811d4271c22c411a74245d1cb44d97e1760297ffaca35c60637", 0x4a}], 0x3, &(0x7f0000000540)=[{0xb0, 0x10f, 0x7fff, "dc9c2cd5e9c46834f8cfe708af610ca1030d97f108d97dfd606f5981e4853529fb46fd5e40c5fef08ebc690ac7445934428ade525bbd71139e741e0f0847ce87505b3b99fb612be9487267a9330b4bfb53c560979426079a22a97ea290572e69f80e9c70f9a7d50426cb28aa08bdb6a6eadc7df66c4354ceaf852dccc09277c269d00933fefa2ee74f5647cff364eb798449d6eddc15041a46"}, {0xb0, 0x13f, 0x7, "f5a371cf79190feae9a3476afb35db9f6766ff403d297559a08a0dc2a174e1cc8637f9dc37ced483349b142155b58a9632ef8de44d0528f0e90ee1538fd2aa6baea53f554224eb049f04872ffac11fff8dc293816a13a03bcc40a3a96eaeddc96b093cfa8ab0c1342f3bcd6c1f9bc32bf5906c771ee1e58cb3367c213ad3bda8e99a6f5678ea1ce0f19f396fc55dfb3c1551c37e656e59379e8f867e3eec"}, {0x108, 0x117, 0xffffffffffffffc1, "1b4e471af5905486cdd93677a6dc1115511c402037e957341559eb2f32e63c24999f3a0958c01f77fa008476c07a0a48afcedd7e52107a04aaf35208c12cc4b8e21aa6f5f1b5317186c52d316c946d7c627f6be617222cb0ef96f038416920c8711008148854004276ddee9edfe3a8343c21389787242a560602cb5a2596ed8001cc238ac195e7cd9af928fe350c002e90b38f8c6448b331b3532624190399aeb0a8dea73cc5a4d608265dd9d0dbeeb071a6bb1c29114fe8a4ddc4357a285005568f2a1d1a994880ed8eee9b43ef28b0060cddee64a4f2808d2d49cdf0fa1dca69561174d3de5172f729ff89be43fd13634a1708a3cc0859"}], 0x268, 0x80}, 0x44000) 15:25:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2090000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:47 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000b0035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 577.425704] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.431286] binder: undelivered TRANSACTION_ERROR: 29189 [ 577.437912] IPVS: length: 164 != 8 [ 577.454696] IPVS: length: 164 != 8 15:25:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrngl', 0x0, 0x0) 15:25:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x100000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:47 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x7, 0x20, 0x1}) 15:25:47 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "9000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 577.541416] binder: 13337:13339 unknown command 0 [ 577.559431] binder: 13345:13346 transaction failed 29201/-22, size 0-3792240640 line 2967 [ 577.570386] binder: 13337:13339 ioctl c0306201 20000380 returned -22 15:25:47 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000e0035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:47 executing program 6: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 577.599239] IPVS: length: 164 != 8 15:25:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x200000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 577.629179] IPVS: length: 164 != 8 [ 577.630314] binder: BINDER_SET_CONTEXT_MGR already set [ 577.649087] binder: 13345:13360 ioctl 40046207 0 returned -16 15:25:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x634040, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:47 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "feffff0700", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:47 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000000), 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:47 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090735000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 577.686945] binder_alloc: 13345: binder_alloc_buf, no vma [ 577.692614] binder: 13345:13360 transaction failed 29189/-3, size 0-3792240640 line 2967 15:25:47 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x690402) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:47 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 577.778674] binder: 13382:13386 unknown command 0 [ 577.819079] binder: 13382:13386 ioctl c0306201 20000380 returned -22 [ 577.828443] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.833980] binder: undelivered TRANSACTION_ERROR: 29189 15:25:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\a', 0x0, 0x0) 15:25:47 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x600000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:47 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090235000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:47 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x1, 0x10}, 0xc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000540)={"7df259bbd0adceec1849687117ca7393403276e18eed165d5bcf3795daa0a0b877b545cc7dab48344b113f6fdbd1c04f326a1ea48481fbd5479da91749e7a05fda26feb58df4677f24b588f827e62964436a9c2dbec09015b5e9506fce2970eca714fc667a405db84bfa51f54ecdd76f94a3ae4345326915a5813f6cc4ba7f361b6cdc97bb90784e29e1063a8e1ab25dc8f8030beaa1d1415d245dc21f778b3dd15bc1678597937f64db3271bdd909fe1ef928bbe0818390c7394eea8e5d4885425d0b3707318f9bdb955536016519d51232fa623fd4225a67f74598317c2732d9b093ae9fe56fc034d9a78eaa338dba3ff228e780fbd9332baa60e526a2b6a4e113f3e1747dea489bcdf817251f1645e2bbdea99f60548b02536e663b91c28ee2884d6b72e273e4379146de72ebb6f1d4b7d67db6d5e05e8d3641725517f65aee6d737665a3f8f6d6cb1469925330502eb8a450c608f8127377bd4a25ec9e0b7fe95f8ee2f03116dbe21abc043ca5d36c13fa1489a6f14c4e3c32935f6e95487f9cb736984574e0f393201f506ceebb58530363bbe6e67e51f43c2cd17b9bb32aec82c5a0d16f6b3b852393ce1fa61bf061e826b039c947d38b004c745788b9a7fca0648184588bb725131fc67c0eb92cfe7a344957193379a0cacf5e516a70653c5015fb88550fe9559389875a2c2e3eb79ff8529166fded7da79888c8fdf6105067fbc5d16ed15c2b341e2823b619eff91c96ae7cd7158a329390f15688db92673147c2bdcec121d850bb529ffe5386ccfb3e4bc69f2eaadfafc634b0096d47fe8fe8bc79aa12d4557cf289c18944efd5a5da0febc1607f94b995f151b8ad42877374fe95f4105bdbe8d514987fde3ef6cbed7bf94e8ce61278f55da4f51d89b2e078c0d2da3c5e8eab0e641fbdc8b29d413bb7931bbb7d9dab6907f1ccc9e15609915723650b33daed6412fae0de1dc619418530e724548bf5f1bc3f0c4e2fedc862660ef1154125814e194cc61d5d5540e596ea9afd0df691d7d945b32a26089635c5c1a6421480da58ea11ae336868473ab7cdcab2334618b2011297fe89ff1f2490e611cbd920ef647292c61cef380b477d4962350aab16c27c70a8f977fa3024c83d18b3aadf6894f50a2c9a0e8cc9711ce51835b8667182377ad2d8031a7b9b23bb87d408526e59fac16a486070e50fe496acd6bc343aa2943f666b58e2b61958f9345d2d78abdeb508979a69203112d55221f764ca412366d62761678c623dd0eedd851d2cf1eae01396c9d45f2f964da03067739f0001255b79ac352513a7dfb08af18791073dbd3741fb8285a7d09a5035d882f1241350b10660c87c55fc31b647c2076f48f92e6213786129015109585b3f5174b8e0bdaf9545b9148bd82a0bca8d912d16e244c8000b7d2a6c511cab3ff83751acabd485c5d8"}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 577.867202] IPVS: length: 164 != 8 [ 577.886385] IPVS: length: 164 != 8 15:25:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc63, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:47 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/164, &(0x7f00000000c0)=0xa4) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x20000) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) 15:25:47 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090435000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:47 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 577.940097] binder: 13414:13416 transaction failed 29201/-22, size 0-65279 line 2967 [ 577.976258] binder: BINDER_SET_CONTEXT_MGR already set 15:25:47 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x3000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 577.986115] binder: 13414:13419 ioctl 40046207 0 returned -16 [ 578.003790] binder_alloc: 13414: binder_alloc_buf, no vma [ 578.004742] binder: 13422:13423 unknown command 0 [ 578.009461] binder: 13414:13419 transaction failed 29189/-3, size 0-65279 line 2967 [ 578.036460] IPVS: length: 164 != 8 [ 578.056987] IPVS: length: 164 != 8 15:25:47 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090b35000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:47 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:47 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80800) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000240)={0xa, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}]}) 15:25:47 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xa00, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 578.087654] binder: undelivered TRANSACTION_ERROR: 29201 [ 578.093262] binder: undelivered TRANSACTION_ERROR: 29189 [ 578.103368] binder: 13422:13423 ioctl c0306201 20000380 returned -22 15:25:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:47 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = dup(r0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000140)={0x7ff, 0xfff, 0x8, &(0x7f0000000100)="0c0880d5129bddbd"}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:47 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd63, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:48 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900096835000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:48 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x600000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x2e, 0x33, 0x2, 0x2, 0x9, 0x83c, 0x5, 0x13, 0x1}) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 578.208169] binder: 13460:13465 transaction failed 29201/-22, size 0-720575940379279360 line 2967 [ 578.220040] IPVS: length: 164 != 8 15:25:48 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) fcntl$notify(r1, 0x402, 0x2) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfe80, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:48 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 578.267113] binder: BINDER_SET_CONTEXT_MGR already set [ 578.272893] binder: 13471:13472 unknown command 0 [ 578.302851] binder: 13460:13473 ioctl 40046207 0 returned -16 15:25:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 578.312873] binder: 13471:13472 ioctl c0306201 20000380 returned -22 [ 578.335545] IPVS: length: 164 != 8 [ 578.349269] binder_alloc: 13460: binder_alloc_buf, no vma 15:25:48 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900096c35000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:48 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) ioctl$VT_RELDISP(r0, 0x5605) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x42}, 0x8) 15:25:48 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "07fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 578.365176] binder: 13460:13479 transaction failed 29189/-3, size 0-720575940379279360 line 2967 [ 578.399844] IPVS: length: 164 != 8 15:25:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x4, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40086303, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 578.424682] binder: undelivered TRANSACTION_ERROR: 29201 [ 578.430240] binder: undelivered TRANSACTION_ERROR: 29189 15:25:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:48 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090039000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:48 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:48 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 578.538319] binder: 13519:13520 unknown command 0 [ 578.546078] IPVS: length: 164 != 8 [ 578.558577] binder: 13519:13520 ioctl c0306201 20000380 returned -22 [ 578.566725] binder: 13521:13524 transaction failed 29201/-22, size 0-67108864 line 2967 [ 578.584340] IPVS: length: 164 != 8 15:25:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xbb8, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e20, 0x2, @loopback={0x0, 0x1}, 0x100000000}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x80000000, @local={0xfe, 0x80, [], 0xaa}, 0x4}, @in={0x2, 0x4e21, @multicast2=0xe0000002}], 0x78) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000340)=""/164, &(0x7f0000000000)=0xffffffffffffffc8) socket$inet6(0xa, 0x1, 0x0) 15:25:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:48 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 15:25:48 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 578.664656] binder: BINDER_SET_CONTEXT_MGR already set 15:25:48 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090335000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f34, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x84) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) [ 578.690199] binder: 13549:13550 unknown command 0 [ 578.700594] binder: 13521:13540 ioctl 40046207 0 returned -16 [ 578.726469] binder: 13549:13550 ioctl c0306201 20000380 returned -22 15:25:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:48 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xdc05000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 578.752313] binder_alloc: 13521: binder_alloc_buf, no vma [ 578.758052] binder: 13521:13553 transaction failed 29189/-3, size 0-67108864 line 2967 15:25:48 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090063000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 578.847964] binder: undelivered TRANSACTION_ERROR: 29201 [ 578.853579] binder: undelivered TRANSACTION_ERROR: 29189 15:25:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:48 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x863104000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x20100, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000001c0)=0x3) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) open(&(0x7f0000000140)='./file0\x00', 0x10d00, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) userfaultfd(0x80000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) 15:25:48 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x1, 0x40000) mkdirat(r0, &(0x7f0000000280)='./file1\x00', 0x100) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x220400, 0x101) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) r3 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 578.922461] binder: 13587:13589 unknown command 0 [ 578.932692] IPVS: length: 164 != 8 [ 578.945147] binder: 13587:13589 ioctl c0306201 20000380 returned -22 15:25:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfc00000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:48 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009fc35000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:48 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 578.969924] binder: 13594:13597 transaction failed 29201/-22, size 0-2046820352 line 2967 [ 578.988618] binder: 13587:13589 unknown command 0 [ 578.995864] IPVS: length: 164 != 8 15:25:48 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090535000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:48 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:48 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x4000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:48 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00000016c0)='/dev/input/mice\x00', 0x0, 0x8000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001700)={{{@in=@rand_addr, @in=@broadcast}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@loopback}}, &(0x7f0000001800)=0xe8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24}, @in={0x2, 0x4e20, @rand_addr=0xffffffff80000000}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}], 0x40) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000140)=""/164, &(0x7f0000000100)=0xfffffffffffffecd) [ 579.043174] binder: BINDER_SET_CONTEXT_MGR already set [ 579.053473] binder: 13587:13589 ioctl c0306201 20000380 returned -22 [ 579.068071] binder: 13594:13605 ioctl 40046207 0 returned -16 [ 579.076475] binder_alloc: 13594: binder_alloc_buf, no vma [ 579.082132] binder: 13594:13617 transaction failed 29189/-3, size 0-2046820352 line 2967 15:25:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc630000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:48 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x7, 0xffff, 0x1000, 0x6}, 0x10) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:49 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900094835000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 579.164441] binder: undelivered TRANSACTION_ERROR: 29201 [ 579.170058] binder: undelivered TRANSACTION_ERROR: 29189 [ 579.178665] binder: 13636:13637 unknown command 0 15:25:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:49 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xff00, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:49 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:49 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x7f}, 0x1) 15:25:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 579.210421] binder: 13636:13637 ioctl c0306201 20000380 returned -22 15:25:49 executing program 1: r0 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'teql0\x00', r1}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/164, &(0x7f00000000c0)=0xa4) [ 579.280016] binder: 13649:13651 transaction failed 29201/-22, size 0-536870912 line 2967 15:25:49 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090835000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb63, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 579.322492] kauditd_printk_skb: 3729 callbacks suppressed [ 579.322504] audit: type=1326 audit(579.321:27145): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 579.358555] IPVS: length: 164 != 8 [ 579.374952] binder: BINDER_SET_CONTEXT_MGR already set [ 579.378768] IPVS: length: 164 != 8 [ 579.389047] audit: type=1326 audit(579.349:27146): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:25:49 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xb80b, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:49 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400400, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x7f) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 579.408516] audit: type=1326 audit(579.349:27147): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 579.412438] binder: 13649:13670 ioctl 40046207 0 returned -16 [ 579.428094] audit: type=1326 audit(579.349:27148): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 579.453334] audit: type=1326 audit(579.349:27149): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:25:49 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009002d000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 579.472728] audit: type=1326 audit(579.349:27150): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 579.492122] audit: type=1326 audit(579.349:27151): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:25:49 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 579.511523] audit: type=1326 audit(579.349:27152): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 579.530918] audit: type=1326 audit(579.349:27153): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 579.550305] audit: type=1326 audit(579.349:27154): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13659 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:25:49 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090023000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:49 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x807, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xffffffffffffffbb) [ 579.571893] binder: 13674:13677 unknown command 0 [ 579.577262] binder_alloc: 13649: binder_alloc_buf, no vma [ 579.582896] binder: 13649:13689 transaction failed 29189/-3, size 0-536870912 line 2967 [ 579.590941] binder: 13674:13677 ioctl c0306201 20000380 returned -22 15:25:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:49 executing program 6: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@nfc, &(0x7f00000000c0)=0xfffffee5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x100, 0x7e, 0x1f, 0x3, 0x6}) splice(r0, &(0x7f0000000140), r0, &(0x7f0000000180), 0x1ff, 0xb) sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x600001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xb, 0x70a9, 0x7f, 0x6, 0x2, r1, 0x81}, 0x2c) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, r2, 0x0, [0x18]}, 0x2c) 15:25:49 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 579.634330] binder: undelivered TRANSACTION_ERROR: 29201 [ 579.639949] binder: undelivered TRANSACTION_ERROR: 29189 15:25:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:49 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009000a000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:49 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xfc, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 579.700510] binder: 13707:13708 transaction failed 29201/-22, size 0-100663296 line 2967 15:25:49 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:49 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) splice(r1, &(0x7f0000000040), r0, &(0x7f0000000180), 0xca30, 0x8) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x8e, "012b0ac93a998e0963afbde7753b0ea52c30e4d500f16cbfcac52addac8e8cd3627ec59978d6829929399dc27af25cbe66dfb960ad8dabcc0e919de6068a1fa2a644a14bfd045fba380d54c557eeed828c7d805683800cebfcdb1e9acd58598ac6bab2b08e9573e979c35b736b522b84968955526e7f1985ae85a94293ac6fce862216e5104f20caeb734a384998"}, &(0x7f0000000000)=0xb2) [ 579.769371] binder: BINDER_SET_CONTEXT_MGR already set [ 579.788634] binder: 13720:13721 unknown command 0 15:25:49 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8000, 0x1) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x45, 0x3, [0x70, 0x8, 0x1f]}, &(0x7f00000001c0)=0xe) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r2, 0xd7, "ce078b81a55103dd8d1df74d7ca3a406225938c45316e7919d7430eda29c3a67b940da53d18260d75a8257f6d4057acabdcc6af282e53b3b52d7b34cb5ad2d9c8031d077c0212e638cddebbba50b5cc729c1a50140a946ce0e73879ef5dfef7893d735be29f6c7b52a6a36c9422015176a1f6799f3582f1e44b94a159a6ac82e066aa0de325de4df8b72dfc19360c639c6c8c6f811ac58eae6b41a615aecf1b6c99032bb6afc55cbde2e0473c8602faf58c3078a21ee53faab28fed2a4aa797781735757470542555f8079c0be4f0924b0a1c1febf53e1"}, &(0x7f0000000380)=0xdf) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 579.817427] binder: 13720:13721 ioctl c0306201 20000380 returned -22 [ 579.841077] binder: 13707:13722 ioctl 40046207 0 returned -16 15:25:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)="2f6465762f6877726e6705", 0x0, 0x0) 15:25:49 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090020000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:49 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={r1, r2/1000+10000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:49 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000ffffffff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:49 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xff00000000000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 579.884418] binder_alloc: 13707: binder_alloc_buf, no vma [ 579.890106] binder: 13707:13744 transaction failed 29189/-3, size 0-100663296 line 2967 [ 579.903370] IPVS: length: 164 != 8 [ 579.917635] binder: undelivered TRANSACTION_ERROR: 29201 [ 579.923267] binder: undelivered TRANSACTION_ERROR: 29189 15:25:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 579.932705] IPVS: length: 164 != 8 15:25:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:49 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) socketpair(0x11, 0x807, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 580.010886] binder: 13766:13767 unknown command 0 15:25:49 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090f35000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:49 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x321002, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:49 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 580.050098] IPVS: length: 164 != 8 [ 580.051077] binder: 13766:13767 ioctl c0306201 20000380 returned -22 [ 580.063746] binder: 13773:13774 transaction failed 29201/-22, size 0-1207959552 line 2967 15:25:49 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xdc050000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 580.093525] IPVS: length: 164 != 8 15:25:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)="2f6465762f6877726e67fe", 0x0, 0x0) 15:25:49 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, &(0x7f0000000000)=0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r1, 0xbf36}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x7, 0x4, [0xe8, 0x4962, 0x7, 0x8]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 580.127952] binder: BINDER_SET_CONTEXT_MGR already set 15:25:49 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f00000001c0)='./file0\x00', 0x7, 0x8, &(0x7f0000001640)=[{&(0x7f0000000280), 0x0, 0x6}, {&(0x7f00000002c0)="e88ea9c5b2898f8f79172606dd315daf95cd90d68204f94cf8e09f3decbcd86ac8f7cb5f1e7e13859deb4d27c60914f95c5569c1ab699a88df064e466a", 0x3d, 0x7ff}, {&(0x7f0000000300)="1c1b341e706445c85ed3be5bc8e7cc6018b79ef67d04d8a9ec6fe12ee4fab8369e6d8a542b026fa09644d99b02e3180e8dc81b3f264eb8f5186ada90bd284ff0bdc481c5ad9b7575af5b93a4538c6006056704dfdefe1f550f2be1374b51a06ee8a4d270caff0995b146e951bf3ac18ea831ac", 0x73, 0x3f}, {&(0x7f0000000380)="37a1aecd251e984c173f3bedab10515eda22a566e4802e5abf8a2ca2a541ecbef89c66f0c662ef8a3b6abb4f244d75d046655b3d4378cf82fa7edd2cb516f04ea77ba8109ff41e68fecab19ffb3227571d8c7cd9965274bcd70e1f0f30eb164ee6a75368a48a8f7bf14ae37ccb0ab325e66c9bd18277b6d7d9b3d3dec53b3a029cf98fd17aec44ed5a626626a0ed6177eded4fc0e540860eb704aca0979f111f7408f5844c91e82e5e17ac686587d82b863940c1e2f7446ecafe71d17d141de3cf7af15babe5c2864435ed04e2604e341cb0d240ba0f255d741ddcb9ba2ffa702e0e1cbb6670a545363dc3de", 0xec, 0x5}, {&(0x7f0000000480)="118a6736af9de31c23eaef4acba8433eb1f18b1edaed16837f38235f7d4ab598d15e26e925236d06923699d40f2302859c1de858d886a2c4cd810126baac7c48a68ba06823ed4a8e4cb787a4eb2436e0f6b46ae249fd8a7e60f60505325796c824057c7d8ddb656c5923f1f3544e2d7162166a33522085239c60782ceb715c221d1a3c812e9b7c4f5563ccbeee0ef2a6755c79488640b8f9", 0x98, 0x1}, {&(0x7f0000000540)="0fe0340e1595e03b73b2d05eab122b4a0596b3014a74cf0025de0a89d2f54fa7ec05de788846dee10ffd5598243df1a02252995f3ff57de15a182638db920e7a38393b9dc4456da28d937b580e6279360912d8465cd54443ced963a5188dee553916db7cd31d0e9bc23b156cca1aa91dd16f514829d5c003c9e68bc380342466aa2657bf", 0x84, 0x8}, {&(0x7f0000000600)="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", 0x1000, 0x7f}, {&(0x7f0000001600)="6bfa3969c3d3beee", 0x8, 0x1f}], 0x2000000, &(0x7f0000001840)=ANY=[@ANYBLOB="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"]) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x900, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x81, 0x1) r3 = request_key(&(0x7f0000001700)='trusted\x00', &(0x7f0000001740)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000001780)='tls\x00', 0xfffffffffffffff8) keyctl$revoke(0x3, r3) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x2) 15:25:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008630a, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:50 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009005f000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:50 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 580.190971] binder: 13773:13788 ioctl 40046207 0 returned -16 [ 580.214876] binder: 13802:13803 unknown command 0 [ 580.225275] binder_alloc: 13773: binder_alloc_buf, no vma [ 580.231375] binder: 13773:13807 transaction failed 29189/-3, size 0-1207959552 line 2967 15:25:50 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x2000000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:50 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x300, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x10000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x1e, 0xffffffffffffffff, 0xffff, [0x18]}, 0xffffffffffffff55) [ 580.244603] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0xd74b9ded) [ 580.252524] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 580.260222] binder: 13802:13803 ioctl c0306201 20000380 returned -22 15:25:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x163404000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 580.289824] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.295411] binder: undelivered TRANSACTION_ERROR: 29189 [ 580.301283] F2FS-fs (loop1): Unable to read 2th superblock [ 580.322924] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0xd74b9ded) [ 580.330725] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 15:25:50 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090009000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:50 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x4}}, 0x18) 15:25:50 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0xb80b0000, @ipv4={[], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 580.399789] binder: 13828:13829 unknown command 0 15:25:50 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 580.427287] binder: 13828:13829 ioctl c0306201 20000380 returned -22 [ 580.433726] F2FS-fs (loop1): Unable to read 2th superblock [ 580.443958] binder: 13834:13835 transaction failed 29201/-22, size 0-167772160 line 2967 [ 580.463414] IPVS: length: 164 != 8 15:25:50 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900097a35000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:50 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) fsync(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:50 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 580.509599] binder: BINDER_SET_CONTEXT_MGR already set [ 580.517092] binder: 13828:13829 unknown command 0 [ 580.522195] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0xd74b9ded) [ 580.529996] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 580.564448] binder: 13834:13853 ioctl 40046207 0 returned -16 [ 580.573869] binder: 13828:13829 ioctl c0306201 20000380 returned -22 [ 580.610753] binder_alloc: 13834: binder_alloc_buf, no vma [ 580.616434] binder: 13834:13871 transaction failed 29189/-3, size 0-167772160 line 2967 [ 580.625746] F2FS-fs (loop1): Unable to read 2th superblock [ 580.635472] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0xd74b9ded) [ 580.646762] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.652317] binder: undelivered TRANSACTION_ERROR: 29189 [ 580.667450] IPVS: length: 164 != 8 15:25:50 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@loopback}, &(0x7f0000000140)=0xfffffffffffffd70) 15:25:50 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfc000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:50 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900096035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:50 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00feffff0700", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:50 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x50040) socketpair$inet6(0xa, 0x80f, 0x1, &(0x7f00000000c0)) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x7fff}}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)="2f6465762f6877726e6704", 0x0, 0x0) 15:25:50 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090635000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:50 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setattr(r1, &(0x7f00000000c0)={0x30, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x11b, 0x140}, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="85000000ffffff7f28c4d34fe51ad018d077973a2e367f15a066ef1ed870abc74b39f10ddef3b8b176d72cc389804624001922865fea9ccdf7dc6c29c60d4cf95534ca76569c63db3e0b8b3d43ff0477def46bb34129fb8ebff48ab74790d5f1f12c0148edff3b11469ab213f92f08af552fe562b6fdb725d30be6a8a1ad2f0a48d6f8c168"], &(0x7f0000000200), 0x1400) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 580.769922] binder: 13885:13888 transaction failed 29201/-22, size 0-19456 line 2967 [ 580.777401] binder: 13884:13886 unknown command 0 [ 580.790761] binder: 13884:13886 ioctl c0306201 20000380 returned -22 [ 580.809885] binder: BINDER_SET_CONTEXT_MGR already set 15:25:50 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xff000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:50 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 580.842147] IPVS: length: 164 != 8 [ 580.860619] binder: 13885:13900 ioctl 40046207 0 returned -16 [ 580.870888] IPVS: length: 164 != 8 15:25:50 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000140)='nfs4\x00', &(0x7f0000000180)='./file0\x00', 0x4, 0x4, &(0x7f00000003c0)=[{&(0x7f00000001c0)="1cfdf632305fe86f5ef99665f25fc0f128a5d18ba7ab242a64c624677c8b7dea511fdba8b95e74f5639daaac129499fe14fc0626e58c7cec603a9849b13036707d229e20b178c433a1", 0x49, 0x401}, {&(0x7f0000000240)="1199a43b34e46f2626e609657dce340df27dfe5534ab2ace0d499564d3d633a81a59de44b05c14977c7aab41a84a845a15", 0x31, 0x5}, {&(0x7f0000000280)="d58aca3113851bbd7547c596de79918354453e443911231b14e0fbe048fd33b9b227f5892ba0250ebb5a5d1328237dcd5e8f14ee396663be5ba8808b2f2dd679fe5a11a4f12ce7492b2d3c87912a9689d6624f865834789b693b1af976e7caeed7cafc388d637f50213c0b2688923fbcdd88cfd91517ac7522aa8949c2f1c5cc91d4393e886864afa169372e727236587a997eae87", 0x95, 0x2}, {&(0x7f0000000380)="080f2811934093a78e21219a057f2c034226e122484448b87bc5e20b31394332", 0x20, 0x3}], 0x10, &(0x7f0000000440)='/dev/snapshot\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1f}, &(0x7f0000000040)=0x8) connect$l2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x2, 0x4, 0x4, {0xa, 0x4e23, 0x3, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}, 0xe6d}}}, 0x32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r2, 0x7fff}, 0x8) [ 580.904514] binder_alloc: 13885: binder_alloc_buf, no vma [ 580.910231] binder: 13885:13916 transaction failed 29189/-3, size 0-19456 line 2967 [ 580.943983] binder: undelivered TRANSACTION_ERROR: 29201 15:25:50 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd894, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x10000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="2b00f300030000000000000000000000010000000000000012000000000000002f6465762f637573650000d749f9ebdbdd6d9a6d7982a52248ae0181c90bb2ae00002938410d2a2e1d6c45e44b5beb3c9175b51bb4fcee0a0ed0688ca7da21fe87c326e0b9598dc1a9fb2f0b338cccd7a4d06bf62187a605ea208f41695d99db5e401e7b598d6709240d4e2e8d8871eece319fe3594926e8cdcddc31ad6e08ae20aeafff47f3838b6b4579c56c"], 0x2b) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x200, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000140)=""/135) fcntl$getflags(r0, 0x40a) r3 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:50 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000ffffffff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:50 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009002b000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)="2f6465762f6877726e6702", 0x0, 0x0) [ 580.949581] binder: undelivered TRANSACTION_ERROR: 29189 [ 580.959816] binder: 13923:13924 unknown command 0 15:25:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:50 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfec0], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 580.995178] binder: 13923:13924 ioctl c0306201 20000380 returned -22 15:25:50 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 581.056709] IPVS: length: 164 != 8 [ 581.072475] binder: 13942:13947 transaction failed 29201/-22, size 0-360287970189639680 line 2967 [ 581.090960] IPVS: length: 164 != 8 15:25:50 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = getpgid(0x0) kcmp(r2, r3, 0x6, r0, r1) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/164, &(0x7f00000000c0)=0xa4) 15:25:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:50 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090007000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:50 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:51 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xa], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:51 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x8}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) [ 581.187691] binder: BINDER_SET_CONTEXT_MGR already set 15:25:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 581.208658] binder: 13973:13975 unknown command 0 15:25:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 581.252957] binder_alloc: 13942: binder_alloc_buf, no vma [ 581.253418] IPVS: length: 164 != 8 [ 581.258820] binder: 13942:13972 transaction failed 29189/-3, size 0-360287970189639680 line 2967 [ 581.266850] binder: 13973:13975 ioctl c0306201 20000380 returned -22 [ 581.277547] binder: 13942:13963 ioctl 40046207 0 returned -16 [ 581.290672] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.296313] binder: undelivered TRANSACTION_ERROR: 29189 15:25:51 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:51 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090a35000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:51 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x63, 0x4) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000000)={0x4, 0x55fe, 0x1ff}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 15:25:51 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x5dc], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 581.362703] binder: 13990:13991 transaction failed 29201/-22, size 0-5188146770730811392 line 2967 [ 581.379471] IPVS: length: 164 != 8 15:25:51 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x100000001}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x9, 0x3, 0x16, 0xb, 0x0, r0, 0x0, [0x18]}, 0x4) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000140)=0xa44, 0xfffffffffffffffb) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x4) 15:25:51 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 15:25:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:51 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090030000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:51 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xff00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 581.438533] binder: BINDER_SET_CONTEXT_MGR already set 15:25:51 executing program 6: sched_setattr(0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x3}, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x3, 0x6, 0xb, 0x0, r0, 0x0, [0x18]}, 0xfffffffffffffca9) ftruncate(r1, 0xfff) 15:25:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:51 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 581.518660] binder: 13990:14009 ioctl 40046207 0 returned -16 [ 581.524907] IPVS: length: 164 != 8 [ 581.530111] binder_alloc: 13990: binder_alloc_buf, no vma [ 581.535756] binder: 13990:14014 transaction failed 29189/-3, size 0-5188146770730811392 line 2967 [ 581.546151] IPVS: length: 164 != 8 [ 581.547968] binder: 14020:14027 unknown command 0 15:25:51 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900097435000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000c86f88)={0x2, 0x126, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, 0x0) 15:25:51 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x2000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 581.573336] binder: 14020:14027 ioctl c0306201 20000380 returned -22 [ 581.609292] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.614826] binder: undelivered TRANSACTION_ERROR: 29189 15:25:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:51 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:51 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) socketpair(0x0, 0x800, 0xc400000000000000, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140), 0x4) 15:25:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:51 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900094c35000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:51 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) sysfs$1(0x1, &(0x7f00000001c0)='./cgroup.cpu\x00') fchown(r1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x1, 0x8}}, 0x30) pipe2$9p(&(0x7f0000000300), 0x0) write$evdev(r1, &(0x7f0000000200)=[{{0x0, 0x2710}}, {{0x0, 0x2710}}, {}], 0xfffffffffffffee1) [ 581.725869] IPVS: length: 164 != 8 15:25:51 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x600000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 581.746309] binder: 14064:14065 transaction failed 29201/-22, size 0-8358680908399640576 line 2967 [ 581.766079] binder: 14072:14073 unknown command 0 [ 581.785467] binder: 14072:14073 ioctl c0306201 20000380 returned -22 15:25:51 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) [ 581.794596] IPVS: length: 164 != 8 15:25:51 executing program 6: sendmsg$unix(0xffffffffffffffff, &(0x7f0000833000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x538}) ioctl(r0, 0x2285, &(0x7f0000007000)='S') ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000040)=""/162) 15:25:51 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900091035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12634840, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:51 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000380)={'mangle\x00', 0x5c, "5b1c37a024d9c407435c2f83280cbfccbfe84f9168695275c1c1ba6f9e148a1a0fb1275aba19d14be253a72f04470b7ef2867b70655c590e17e5cdef2d4cb64bf34cac100b1dcf471182cc050c3f4a59515a341f62a8cd7c2badf728"}, &(0x7f0000000440)=0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x73, "4805317e79ec4a4223259274fffef3d549430c353fb35c4d89fbe05f12d8028842437bbc1718e1545fc0abd88618aa0cc0263550d5206db8181eac04ea9b1afd983e09a16193695c0185accc869a233e70616bed8ee63b2684408f62bad724a26412b7071365ff4dd3cf36779b9791e467884b"}, &(0x7f00000001c0)=0x7b) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000005c0)={r2, @in6={{0xa, 0x4e22, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}}, &(0x7f0000000340)=0x84) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000780)={0x0, 0x0, @ioapic}) [ 581.818157] binder: BINDER_SET_CONTEXT_MGR already set [ 581.833650] binder: 14064:14080 ioctl 40046207 0 returned -16 [ 581.879501] binder_alloc: 14064: binder_alloc_buf, no vma [ 581.885171] binder: 14064:14090 transaction failed 29189/-3, size 0-8358680908399640576 line 2967 [ 581.904596] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.910199] binder: undelivered TRANSACTION_ERROR: 29189 [ 581.924514] IPVS: length: 164 != 8 [ 581.928873] sd 0:0:1:0: [sg0] tag#4534 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 581.937635] sd 0:0:1:0: [sg0] tag#4534 CDB: Test Unit Ready [ 581.938155] binder: 14101:14105 unknown command 0 [ 581.943419] sd 0:0:1:0: [sg0] tag#4534 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.957198] sd 0:0:1:0: [sg0] tag#4534 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 581.966213] sd 0:0:1:0: [sg0] tag#4534 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15:25:51 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x1000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:51 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:51 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000903d3000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 581.975130] sd 0:0:1:0: [sg0] tag#4534 CDB[30]: 00 00 00 00 00 00 00 00 [ 581.978624] IPVS: length: 164 != 8 [ 582.009932] binder: 14101:14105 ioctl c0306201 20000380 returned -22 15:25:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:51 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x805, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xd90, 0x2000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100), 0x4) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000140)) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 15:25:51 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfc], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:51 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) 15:25:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 582.047249] sd 0:0:1:0: [sg0] tag#4534 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 582.056049] sd 0:0:1:0: [sg0] tag#4534 CDB: Test Unit Ready [ 582.061873] sd 0:0:1:0: [sg0] tag#4534 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.070767] sd 0:0:1:0: [sg0] tag#4534 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.079715] sd 0:0:1:0: [sg0] tag#4534 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 582.089484] sd 0:0:1:0: [sg0] tag#4534 CDB[30]: 00 00 00 00 00 00 00 00 15:25:51 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 582.132846] binder: 14129:14131 transaction failed 29201/-22, size 0-1744830464 line 2967 [ 582.176762] binder: 14137:14138 unknown command 0 15:25:52 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x141200) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x3, 0xfffffffffffffcad, [], 0x1, &(0x7f0000000180)=[{}], &(0x7f0000000280)=""/184}, &(0x7f00000003c0)=0x78) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = socket(0x0, 0x5, 0x4) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:52 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090935000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 582.198113] binder: BINDER_SET_CONTEXT_MGR already set 15:25:52 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) shutdown(r0, 0x0) 15:25:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x200000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xfffffffe, 0x0) [ 582.228499] binder_alloc: 14129: binder_alloc_buf, no vma [ 582.234182] binder: 14129:14147 transaction failed 29189/-3, size 0-1744830464 line 2967 [ 582.239989] binder: 14137:14138 ioctl c0306201 20000380 returned -22 [ 582.264490] binder: 14129:14141 ioctl 40046207 0 returned -16 15:25:52 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009000a000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 582.313281] IPVS: length: 164 != 8 15:25:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:52 executing program 6: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 15:25:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r1, 0x3, 0x1, 0xff, &(0x7f0000000140)=[0x0], 0x1}, 0x20) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000280)={0x0, 0x0, @ioapic}) [ 582.345582] binder: undelivered TRANSACTION_ERROR: 29201 [ 582.351162] binder: undelivered TRANSACTION_ERROR: 29189 15:25:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70670200, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:52 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x100000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:52 executing program 6: openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000001c0)=0x40) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000640)=0x14) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={"6c6f00000000000000000000000200"}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="042f73e36052f3159af702ca0d0f6b29a2b3c48c8641ee3e7539b7d1c31f03477cac3575072b5e7f0fb9c00ad1a5a08cb910ac0603e7fdaec72ddb89904f8bc8e92ca73b5b16316d6c34964d5cba568a070e57081262e171da6b18913382fedd18ccce6396ea8ef86be45d25d878bb64f393f9a34438bab5edc77316b8cf89a33fbc7dd4aacb5e9809cacd77ad8cc6276ae7ba786d08e2ab6ba7772ca41b31f112502782bdac5eb7e0bd45042983ffde8627d6240172d14e9eaf18fc9a0aa8870209503fe3cacf2081ec6afde46f9f652d6a"], 0x1}, 0x1}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f0000b94000)=""/246) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x19d, 0x0) [ 582.423563] IPVS: length: 164 != 8 [ 582.439552] binder: 14181:14184 transaction failed 29201/-22, size 0-1885798912 line 2967 [ 582.453153] IPVS: length: 164 != 8 [ 582.455188] binder: 14176:14182 unknown command 0 15:25:52 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009005f000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 582.481804] binder: 14176:14182 ioctl c0306201 20000380 returned -22 [ 582.510780] binder: BINDER_SET_CONTEXT_MGR already set 15:25:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x48000000, 0x0) 15:25:52 executing program 1: r0 = socket$inet(0x2, 0x7, 0x8000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x4, 0xe6, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f00000008c0)=""/230}, &(0x7f00000000c0)=0x78) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) syz_mount_image$nfs4(&(0x7f00000001c0)='nfs4\x00', &(0x7f0000000280)='./file0\x00', 0x3ff, 0x6, &(0x7f00000006c0)=[{&(0x7f00000002c0)="4bd659ad73c788473667d0d114da83b5be166e1c46a3ecb62c213e5103a0635d197caac5c8bbda30d7cf66f3d4cc5f66b95fd92079c7897070d6633b185141489b97fdfa3283ccf2bdd61c5b47c66dbbf13a092d484aec915c9d6e531e3f1511ba93e863f1a7d9edc51a66d4df0ded5033e235f82ac45d171685d413c80e1c291db780d65fa78b868dbd69cb5de8dc7ae17c119da0a9804454dfc243f432154f61c09f47ccb22be79383f8a4426d27", 0xaf, 0x80}, {&(0x7f0000000380)="8b4ae933741321c297378b2bda9b159acf15c549928fdac12455913dafd4e825308ecb52c44af8fc94cd12834167996aef6a0ae49f65f721707fd90d2850fb00cb5a08ab91ba37033790d7f0db6f649a8b1acf18", 0x54, 0x7fff}, {&(0x7f0000000400)="9108ca844ca2b5e65c6b1ed5afd430f79ae83ad379f7828140131a8431e90f2a9bfac71a98a275907cff91e9241af3dd31d9f322ed7ce82053f95f41171c9c3e3ee8567bc26123fc68f8c15effe97d1ef241d9d5a9bdf699fb507c0bbeec48e509a5909a41cb6ddc129e9ebf5c9e7187728986dd72329842570fac3e1ef6cb554c153f9816b58baa130178b43dbf0780ff5aaddd10f3db3f1a0874843fe54ff085664ad831c34e54546b38e6f1c7b300021656549154dfc0bb15ccda1cbeffd3ec9832750c83952fe4c2f9b02066ac2064621230c6a9786e29a67af7156698b3877526", 0xe3, 0x4}, {&(0x7f0000000500)="943751358927788400b1e16a90eca99362abca4c9e78ecd5dc005b6509a776b28cc509b49eab2964c86214175941419a28b9861d64ef8337d88d308b487a539e59ed13bc5f35b1b013467085173b49a2672dbbbf03ebdb60742e877beac76a0ca44b0e8cee764ab205719db12a31f510437b761d15589964952e9001cbfb489c9bb3da253a960eaec47fc072103160b1dffd0578bc7791013a13f64d4995d35ba851f5dab5f3c687cfe13155ecd1e7f2da6e33a678c834c94a463f3aae612e5d591e863ed3ceb3e22d3f389e4c29233361598819d3fdac2bc6736e6a1628f388c932f5f8", 0xe4, 0x1}, {&(0x7f0000000600)="b802caed608ccd9e74919c7849c00ee25785a66cbb625bbbc959d605e07f39a10e39e982", 0x24, 0x3}, {&(0x7f0000000640)="ee1b87e6c7543d2c54c460bdb5244202d7c95388ea77d0702b533a068c4eea5f45dc5bfd4ded92a3e2ab068c92254d542fe731ebd1437c9b962d1ab9967a5e92956d5e01ab1312cb8ec3cc04da6b654b96f3c74ac40fb9a2", 0x58, 0x80000001}], 0x10, &(0x7f0000000780)='\x00') r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/vcs\x00', 0x800, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000a00)=0x100) r4 = signalfd(r1, &(0x7f0000000100)={0x2}, 0x8) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r5, 0x1000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000880)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000a40)={0x6, 0x8, 0x800, 'queue0\x00', 0x13}) perf_event_open(&(0x7f0000000800)={0x0, 0x70, 0x7, 0x7fff, 0x2, 0x4, 0x0, 0xc619, 0x0, 0x0, 0xc9, 0x8, 0x1, 0x9, 0x9, 0x6, 0x7fff, 0x9, 0x5d0, 0x4, 0x1ff, 0x5, 0x5, 0x8000, 0x6, 0x1, 0x3, 0x7ff, 0x80000001, 0x3, 0x5, 0x7, 0xfffffffffffffffd, 0x10000, 0xffffffffffffffff, 0x1, 0x200, 0x5a71, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f00000007c0), 0xb}, 0x20000, 0x4, 0x4, 0x7, 0x7, 0xfffffffffffffff7, 0x1f}, r6, 0x0, r4, 0x8) 15:25:52 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 582.531884] device lo entered promiscuous mode 15:25:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xb80b000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:52 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090009000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 582.566453] binder: 14181:14196 ioctl 40046207 0 returned -16 [ 582.573744] device lo left promiscuous mode [ 582.613367] binder_alloc: 14181: binder_alloc_buf, no vma [ 582.619153] binder: 14181:14213 transaction failed 29189/-3, size 0-1885798912 line 2967 [ 582.649925] binder: undelivered TRANSACTION_ERROR: 29201 [ 582.655534] binder: undelivered TRANSACTION_ERROR: 29189 15:25:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='self/@wlan1system^\x00', 0x3) getsockopt$inet6_dccp_int(r0, 0x21, 0x15f02ea8d6317d2, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 582.666838] binder: 14226:14229 unknown command 0 [ 582.666912] device lo entered promiscuous mode 15:25:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:52 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000900d3030c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x2], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:52 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 582.707995] device lo left promiscuous mode [ 582.714554] binder: 14226:14229 ioctl c0306201 20000380 returned -22 [ 582.747972] IPVS: length: 164 != 8 15:25:52 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00o']) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x20000001) [ 582.781696] binder: 14240:14242 transaction failed 29201/-22, size 0-2560 line 2967 [ 582.793379] IPVS: length: 164 != 8 [ 582.818615] binder: BINDER_SET_CONTEXT_MGR already set 15:25:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630d, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:52 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x74000000, 0x0) 15:25:52 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090063000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000e80)='/dev/input/mouse#\x00', 0x40, 0x4001) read$eventfd(r1, &(0x7f0000000000), 0x8) sendmsg$rds(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/27, 0x1b}], 0x1, &(0x7f0000002000)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7}, @rdma_args={0x48, 0x114, 0x1, {{0x14, 0xffff}, {&(0x7f0000000f40)=""/61, 0x3d}, &(0x7f0000001fc0)=[{&(0x7f0000000f80)=""/10, 0xa}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2, 0x21, 0x7}}], 0x60, 0x40}, 0x4000800) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000280)=""/164, &(0x7f0000000180)=0xa4) 15:25:52 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 582.837517] binder: 14240:14254 ioctl 40046207 0 returned -16 [ 582.872338] binder_alloc: 14240: binder_alloc_buf, no vma [ 582.878103] binder: 14240:14254 transaction failed 29189/-3, size 0-2560 line 2967 15:25:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xc0fe], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 582.897358] binder: 14260:14261 unknown command 0 15:25:52 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='8:0\f'], 0x4) 15:25:52 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090039000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 582.933399] binder: 14260:14261 ioctl c0306201 20000380 returned -22 [ 582.951254] binder: undelivered TRANSACTION_ERROR: 29201 [ 582.956857] binder: undelivered TRANSACTION_ERROR: 29189 [ 582.967490] IPVS: length: 164 != 8 15:25:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40046304, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:52 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:52 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x4000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 583.015422] IPVS: length: 164 != 8 15:25:52 executing program 6: openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x8040, 0x0) 15:25:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x804, 0x7) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:52 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090008000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 583.082665] binder: 14296:14297 unknown command 0 [ 583.099750] binder: 14298:14300 transaction failed 29201/-22, size 0-6917529027641081856 line 2967 [ 583.126106] binder: 14296:14297 ioctl c0306201 20000380 returned -22 15:25:53 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xa00, 0x0) 15:25:53 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xa000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:53 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200), 0x14) 15:25:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 583.183675] binder: BINDER_SET_CONTEXT_MGR already set 15:25:53 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090023000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 583.227318] binder: 14298:14319 ioctl 40046207 0 returned -16 [ 583.245905] binder: 14327:14329 unknown command 0 15:25:53 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x802, 0x79a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) signalfd(r0, &(0x7f0000000100), 0x8) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000140)={0x3, 0x80000000}, 0x2) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x8, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1, 0x4) sendto$inet(r1, &(0x7f0000001600)="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", 0x5a9, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 15:25:53 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x6], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:53 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 583.286187] binder_alloc: 14298: binder_alloc_buf, no vma [ 583.291864] binder: 14298:14341 transaction failed 29189/-3, size 0-6917529027641081856 line 2967 [ 583.324335] binder: 14327:14329 ioctl c0306201 20000380 returned -22 15:25:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:53 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009002b000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 583.370059] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.375615] binder: undelivered TRANSACTION_ERROR: 29189 15:25:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x500000000000000, 0x0) 15:25:53 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3ff, 0x101000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000140)=0x6, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r2 = memfd_create(&(0x7f0000000180)='bdevself\'wlan0\x00', 0x3) io_setup(0x2, &(0x7f00000001c0)=0x0) io_cancel(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000280)="d704682b4898e7c438f60da1e276dddea11768e3a2b396434c1cc89d5e5ec9b462f63d0d8a07e8dfcc15b276d4344f69ad3cbd7ef4ca2066f45d70a69182edc2de20335478f95b1b6b06014e0566", 0x4e, 0x2, 0x0, 0x1, r2}, &(0x7f0000000340)) 15:25:53 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:53 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfec00000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 583.470873] binder: 14369:14370 unknown command 0 [ 583.487347] binder: 14369:14370 ioctl c0306201 20000380 returned -22 15:25:53 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a8430691000000390009002d000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 583.519629] IPVS: length: 164 != 8 15:25:53 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x630b, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:53 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xb80b0000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 583.561587] IPVS: length: 164 != 8 [ 583.579410] binder: 14365:14388 transaction failed 29201/-22, size 0-4294967167 line 2967 15:25:53 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:53 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090030000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 583.626385] binder: 14397:14398 unknown command 0 [ 583.631684] binder: BINDER_SET_CONTEXT_MGR already set [ 583.648452] binder: 14397:14398 ioctl c0306201 20000380 returned -22 [ 583.666114] binder: 14365:14396 ioctl 40046207 0 returned -16 [ 583.692303] IPVS: length: 164 != 8 [ 583.703197] binder_alloc: 14365: binder_alloc_buf, no vma [ 583.709089] binder: 14365:14414 transaction failed 29189/-3, size 0-4294967167 line 2967 [ 583.721637] IPVS: length: 164 != 8 [ 583.759876] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.765555] binder: undelivered TRANSACTION_ERROR: 29189 15:25:54 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:54 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090007000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xfeffffff, 0x0) 15:25:54 executing program 6: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000003400)=[{&(0x7f0000000800)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000980)="d0", 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="1800000000000000840000000000000000f67d000600010018000000000000008400000007000000e0000001000000009055d40446378dec65f757443228eb1b33ff4b758bd9202ba12bd3e782a670ba3c0700000000000000c90a208ea701b96b8417247b7332f5af5bfa0ee6fc16288d98944f9c80e1dd01d507e47bd1aca218891d720cb7b9374c7d9966a8fededbc2c791f469209fd893cb0b27531d0ae15d5d4a595a1461f837f23f151549cd2c329a0a"], 0xb7, 0x80}, {&(0x7f0000000c00)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000000c40)="fa7d9e4c4fe1ffa6", 0x8}, {&(0x7f0000001d80)="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", 0xfe}], 0x2, 0x0, 0x0, 0x814}], 0x2, 0x0) 15:25:54 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x463044000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:54 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfe80], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 584.438951] binder: 14425:14428 transaction failed 29201/-22, size 0-31232 line 2967 [ 584.449957] kauditd_printk_skb: 3179 callbacks suppressed [ 584.449970] audit: type=1326 audit(584.446:30334): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.451423] binder: 14433:14438 unknown command 0 [ 584.455634] audit: type=1326 audit(584.446:30335): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.485321] binder: 14433:14438 ioctl c0306201 20000380 returned -22 [ 584.499519] audit: type=1326 audit(584.446:30336): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.499539] audit: type=1326 audit(584.446:30337): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.499559] audit: type=1326 audit(584.447:30338): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.499576] audit: type=1326 audit(584.447:30339): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.499592] audit: type=1326 audit(584.447:30340): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.499609] audit: type=1326 audit(584.447:30341): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:25:54 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:54 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:54 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035070c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$packet(0x11, 0x10000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) [ 584.499629] audit: type=1326 audit(584.447:30342): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.499648] audit: type=1326 audit(584.447:30343): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14430 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 584.545766] binder: BINDER_SET_CONTEXT_MGR already set [ 584.572965] IPVS: length: 164 != 8 15:25:54 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x300], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa630840, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2, 0x0) [ 584.726911] binder: 14425:14446 ioctl 40046207 0 returned -16 [ 584.758279] binder_alloc: 14425: binder_alloc_buf, no vma [ 584.763961] binder: 14425:14440 transaction failed 29189/-3, size 0-31232 line 2967 15:25:54 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:54 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035fc0c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 584.796989] binder: 14470:14471 unknown command 0 15:25:54 executing program 6: syz_emit_ethernet(0x42, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@timestamp={0x44, 0x18, 0x7, 0x0, 0x0, [{}, {}, {[@empty=0xa00]}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000000000)) 15:25:54 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x600], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 584.821160] binder: 14470:14471 ioctl c0306201 20000380 returned -22 15:25:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 584.877223] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.882815] binder: undelivered TRANSACTION_ERROR: 29189 15:25:54 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x200, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000180)={0x2, 0x11, 0x11, 0xe, 0x4, 0x80000001, 0x6, 0x73, 0x1}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x3a, @empty, 0x4e24, 0x1, 'ovf\x00', 0x4, 0xffff, 0x6f}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:54 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:54 executing program 6: r0 = socket$inet(0x2, 0x3, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) 15:25:54 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:54 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfc00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:54 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035020c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4c, 0x0) 15:25:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40086310, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 584.945999] binder: 14495:14496 unknown command 0 [ 584.964878] binder: 14495:14496 ioctl c0306201 20000380 returned -22 [ 584.991998] IPVS: length: 164 != 8 15:25:54 executing program 6: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000100), 0xaea, &(0x7f0000fff000/0x1000)=nil, 0x2) 15:25:54 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035480c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:54 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xff00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 585.057797] binder: 14514:14516 unknown command 0 [ 585.064575] binder: 14508:14511 transaction failed 29201/-22, size 0--2 line 2967 [ 585.080202] binder: 14514:14516 ioctl c0306201 20000380 returned -22 [ 585.090991] IPVS: length: 164 != 8 [ 585.101826] IPVS: length: 164 != 8 15:25:54 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:54 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 585.128750] binder: BINDER_SET_CONTEXT_MGR already set [ 585.144596] binder: 14508:14528 ioctl 40046207 0 returned -16 15:25:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x40040, 0x0) sendmmsg$alg(r1, &(0x7f0000001740)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="bc549f9b7da1372983234d86f26b92cb7721f2768fe729e4ec75c556812f6e6de9ff466842611968aff3c4d0db91e3b57123a41e76a3526c0e59c314db028e38fc1bd6da4777df751d7d47943052fdf4eeb538a930010fcd90510da2ef81ce1501452971aa3169053d7e6d7264c378e4afb7e7fae48d943abc51fb8090f76ce07b70330277fd6ff79088a792df9a59dbe6b17c2ba1b353dbfd5b36735cb244722b024bbea2348e53e7c43a19ab8a25759b9cb3f7786c2f0115a95521145b4b6f85266a9ae96e71362692a0c7cf0eb9bb35e398c7904b", 0xd6}, {&(0x7f0000000180)="324519525ca2111348bfaea35866b6e66fcf4bc0b4fe2a", 0x17}], 0x2, &(0x7f00000003c0)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x78, 0x117, 0x2, 0x5d, "8e936d8b9d9849079d616354e5548e87ee6a4a7721149312ac462dea383a7353a67678a1e51992c5b19e2aea0c0eab43f7d81c55b52ebb43d825d65d3bd43ad0d8115df78b5c87eb80258760d6d9b162946742fd0b358d227c18700bb3"}, @iv={0x70, 0x117, 0x2, 0x58, "601576c61eed4ef898bb28878b974b91148044a4122c029719113faa221e190120d288adb20d5b8f39f3f69aeb5ac062451a998f3b1d42a428fd90f0b54a8c962e1ce0a188faed345c0de4b7a95dbd5b1eaf224dc8790697"}, @assoc={0x18, 0x117, 0x4, 0x10000}, @iv={0xc0, 0x117, 0x2, 0xa9, "be7839d5efef5f7fce076252e8c859723871fe8dd78eb910ae76bea6cb1136087a919373c882c4357316031db1b4bedd94a0c02c31e7288341194369d76df2378ac960fc6854d65fb1a34979607595c222a448ace97f521e2298cd8cf2642e5784a6c2b067a9ec7ab3acce1508934ae7ac83b2dfd3da463c23ac7bb1ce4b47724d319043281a5255f2d8892e58d58d1e4333748713e2641809464d8cf9196938b980b6e1f2e2c11896"}, @assoc={0x18, 0x117, 0x4, 0xfffffffffffffff9}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xd0, 0x117, 0x2, 0xbc, "c21d1c8cd2a33f498849c3517e72ca503f6cd890991e70c671872bb97d08e6c1b19ed33dfd914f010e7fc8284819adca7d5dd574e3dcec4d94a499bec4f19fdae586705b886897466547363bc1b96a3c5a3df6a23511dad0430fd932e4a8e8a892a283a8309139f811cf640f18c476c281e81c7a9e59bab535d5265412d1103c2e30c0d41a3781d86784609197fd7e02c649dfed42c7fa1cac2aaa6d2da1c8ce6756a6ad4424179bbd38757d9ee123105bff0d539169b70426c80252"}, @iv={0xa8, 0x117, 0x2, 0x91, "c7d61c36e002344d95c5dc6bd1b1bbb4963badef48bb9c2e00e2b2505e8ed8f56aa02d7f2cd37211c1f97d5a9a212ec0605d0bce441e207d089105eb12891924430bb52fd37360c3dda58c0fe370991b77fed79eb49a76895b2fec7fdc263c61a0f21e9af4dbb28c2a1eab3462240aa5ee70465ba976fe3bb3392c597410398f312e8648e77df2e05cb9903d5665f2a648"}], 0x1380, 0x10}], 0x1, 0x8000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f0000000100)=0xa4) r2 = memfd_create(&(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) [ 585.178401] binder_alloc: 14508: binder_alloc_buf, no vma [ 585.184133] binder: 14508:14528 transaction failed 29189/-3, size 0--2 line 2967 15:25:55 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035030c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:55 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='ramfs\x00') [ 585.229807] IPVS: length: 164 != 8 [ 585.240496] binder: 14549:14551 unknown command 0 15:25:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x400000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 585.272704] IPVS: length: 164 != 8 [ 585.278869] binder: 14549:14551 ioctl c0306201 20000380 returned -22 [ 585.295639] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.301185] binder: undelivered TRANSACTION_ERROR: 29189 15:25:55 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7400000000000000, 0x0) 15:25:55 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000900350f0c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x14, 0x80800) sendto(r0, &(0x7f0000000100)="6939510995e264d257fa19d1430cb92bde6feb93f6aa3c9541aaf78bbdbe82bff039410177a510b53fd6d5505519ad461b3ba768c0477f8c1ea2eed76245ccf47496eeb52cc2611be0d8f67301fe9c4f2614ae4f3bf48033bc2048331dbed39866ada551c5cc6fc743b0de917e0bf4", 0x6f, 0x40, &(0x7f0000000280)=@xdp={0x2c, 0x2, r1, 0x31}, 0x80) openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x402, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000340)) 15:25:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:55 executing program 6: 15:25:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:55 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 585.414097] IPVS: length: 164 != 8 [ 585.427905] binder: 14580:14582 transaction failed 29201/-22, size 0-3 line 2967 15:25:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfe80000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 585.456247] IPVS: length: 164 != 8 15:25:55 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035600c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:55 executing program 6: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000013c0)) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001400)='IPVS\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0x10000, 0x0, 0x1, 0x9}, {0x4, 0x5871, 0x9, 0x5}, {0xfff, 0x0, 0x9, 0xc7b6}, {0x80000000, 0x4, 0x0, 0x2}]}, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x101}, &(0x7f0000001440)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001480)={r1, 0x0, 0x0, 0x80, 0x20, 0x8}, 0x14) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mq_getsetattr(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x63, 0xb, 0x106, 0x2, 0x2, 0x80000000009, 0xfffffffffffffffb}, &(0x7f0000000180)) [ 585.478268] binder: 14588:14591 unknown command 0 [ 585.490782] binder: BINDER_SET_CONTEXT_MGR already set 15:25:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40000000, 0x0) 15:25:55 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 585.524330] binder: 14580:14593 ioctl 40046207 0 returned -16 [ 585.530559] binder: 14588:14591 ioctl c0306201 20000380 returned -22 [ 585.557276] binder_alloc: 14580: binder_alloc_buf, no vma [ 585.562955] binder: 14580:14593 transaction failed 29189/-3, size 0-3 line 2967 15:25:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1634040, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:55 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035002500060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:55 executing program 6: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) mount(&(0x7f0000000080)='./control\x00', &(0x7f0000000100)='./control\x00', &(0x7f0000000140)='sockfs\x00', 0x2201002, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f00000001c0)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000380)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') close(r0) [ 585.594809] IPVS: length: 164 != 8 [ 585.605353] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.610914] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.634611] IPVS: length: 164 != 8 15:25:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfe800000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 585.653206] binder: 14618:14619 unknown command 0 15:25:55 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x25d7, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000340)={0x7, 0x0, [{0xbf9, 0x0, 0x1}, {0xbff, 0x0, 0x2}, {0x3fc, 0x0, 0x9}, {0x27f, 0x0, 0x3}, {0xbea, 0x0, 0x6}, {0x182, 0x0, 0x400}, {0x356, 0x0, 0x81}]}) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00') getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xfffffffffffffea8) write$P9_RLINK(r1, &(0x7f00000003c0)={0x7, 0x47, 0x1}, 0x7) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000074000000939551c158000357c1cf076a908cd4020093f4ab8d68db003b94052904bd89c3a5553a1b5834d4162e4f0c4aa97303c7742a3aa01ea1a4a43eaf268fb5c8c15b5914bc83c397a9a8c88570d23b4ec481de1c93a01ff856a6e8484dc4e542d5e5bff59ea7f01204075f07fba2951b5681efcdad3cb3"], &(0x7f00000001c0)=0x98) [ 585.685749] nla_parse: 10 callbacks suppressed [ 585.685757] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 585.693082] binder: 14618:14619 ioctl c0306201 20000380 returned -22 15:25:55 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000000, 0x0) 15:25:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xdc050000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:55 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x80000, 0x0) sendmsg$unix(r0, &(0x7f0000001300)={&(0x7f0000002340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000012c0)=[{&(0x7f0000000280)="4672ec0ab791256daf942cecfce8b33eabea4229356796c4ebd5be", 0x23}, {&(0x7f0000001340)="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", 0x1000}], 0x2, 0x0, 0x0, 0x80}, 0x8000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x101000, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 585.793861] binder: 14630:14632 transaction failed 29201/-22, size 0-122 line 2967 [ 585.801813] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 585.819235] binder: BINDER_SET_CONTEXT_MGR already set [ 585.826522] binder: 14630:14649 ioctl 40046207 0 returned -16 15:25:55 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 585.859822] binder: 14653:14656 unknown command 0 [ 585.869909] binder_alloc: 14630: binder_alloc_buf, no vma [ 585.875579] binder: 14630:14649 transaction failed 29189/-3, size 0-122 line 2967 [ 585.887354] IPVS: length: 164 != 8 15:25:55 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000900350b0c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:55 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c630f, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:55 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:55 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x700, 0x0) [ 585.905646] binder: 14653:14656 ioctl c0306201 20000380 returned -22 [ 585.908566] IPVS: length: 164 != 8 [ 585.929494] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.935143] binder: undelivered TRANSACTION_ERROR: 29189 15:25:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x3], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:55 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 586.002004] binder: 14672:14674 unknown command 0 [ 586.025829] binder: 14676:14677 transaction failed 29201/-22, size 0--144678142324244480 line 2967 [ 586.040168] binder: 14672:14674 ioctl c0306201 20000380 returned -22 [ 586.090628] binder: BINDER_SET_CONTEXT_MGR already set [ 586.108071] binder: 14676:14691 ioctl 40046207 0 returned -16 [ 586.122193] binder_alloc: 14676: binder_alloc_buf, no vma [ 586.127858] binder: 14676:14692 transaction failed 29189/-3, size 0--144678142324244480 line 2967 [ 586.144584] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.150200] binder: undelivered TRANSACTION_ERROR: 29189 15:25:56 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:56 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x5, 0x4) 15:25:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xa00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe109000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:56 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) write$binfmt_elf32(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffff7, 0x5, 0xaf, 0x7ff, 0x8, 0x3, 0x3f, 0xb14, 0x1d, 0x38, 0x12a, 0x2d, 0x8, 0x20, 0x1, 0x82, 0x3, 0x3}, [{0x2, 0xa8e7, 0x3, 0x7, 0x100000001, 0xc1, 0x0, 0x70044fd6}, {0x60000000, 0x3cd, 0x7fffffff, 0x5, 0x1, 0x3, 0x8d99, 0x9}], "48158c825b770068951cf552f08f14655fc68c1e569d117f158327b6a305867cf54ef98d99d92f5bbeab8cfe59b09122da0b22cc80aeeb7938476c9f1cf6a856fd0fbcd9396cc6f1b11c794fc3f0692e48b53fbac3bc552a865e373112d5b4c8d2cbfba9d8d21517cbae2a75fffebf39a30d4f11de3c285fc1466727121ae68759505e115c124fe504ad2433c929deeb25354e0749707a2c7ebdcfd47488b2db5281521a71de0c77119950142b4464ef6fa6aa3037f46ae4186fa0df1fe03742158b1a13b288be3c58fee21b28f1f878bc3614cadf45eed3f2eff58cc6", [[], [], [], [], [], [], [], [], []]}, 0xa55) sendfile(r0, r1, 0x0, 0xa3) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r3, 0x67b, 0x0, 0x3, 0x81}, &(0x7f0000000280)=0x18) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000d80)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001000)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000001100)=0xe8) getpeername$packet(r2, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000001380)=0xe8) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f00000013c0)={@mcast1, 0x0}, &(0x7f0000001400)=0x14) accept$packet(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001480)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000014c0)={'ip6gre0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001540)=0x14) accept(r1, &(0x7f0000001580)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001600)=0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001640)={'veth1_to_bond\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002b00)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000002b40)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000002c40)=0xe8) getpeername$packet(r2, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000002cc0)=0x14) getsockname$packet(r2, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000002d40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000002d80)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002e80)=0xe8) recvmmsg(r2, &(0x7f00000045c0)=[{{&(0x7f0000002ec0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002f40)=""/65, 0x41}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/43, 0x2b}, {&(0x7f0000004000)=""/144, 0x90}, {&(0x7f00000040c0)=""/135, 0x87}], 0x5, 0x0, 0x0, 0x9}, 0x1}, {{&(0x7f0000004200)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000004280), 0x0, &(0x7f00000042c0)=""/121, 0x79, 0x3}, 0xffffffff}, {{&(0x7f0000004340)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000043c0)}, 0x9}, {{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000004400)=""/225, 0xe1}], 0x1, &(0x7f0000004540)=""/106, 0x6a, 0x6}, 0x5}], 0x4, 0x2000, &(0x7f00000046c0)={0x0, 0x1c9c380}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000047c0)={'dummy0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000004840)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000004880)={{{@in6=@ipv4={[], [], @dev}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000004980)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000049c0)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000004ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000004e80)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f0000004f80)=0xe8) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000005780)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005740)={&(0x7f0000004fc0)={0x780, r4, 0x400, 0x70bd2b, 0x2, {}, [{{0x8, 0x1, r5}, {0x17c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfffffffffffffff9}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x148, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x24, 0x4, [{0x100000001, 0x6, 0x1, 0x7}, {0x8, 0x0, 0x1, 0x40}, {0x33, 0x8001, 0x9, 0x416}, {0x6, 0x8, 0xd0, 0x6}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x80000001}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r16}, {0x130, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffff}}}]}}, {{0x8, 0x1, r21}, {0x2d0, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x24, 0x4, [{0x1, 0xfffffffffffff001, 0x9, 0x9}, {0x8, 0x8, 0x100, 0x5}, {0x7, 0x10001, 0x5, 0x1bf}, {0x8, 0x6, 0x200000000000, 0x3}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r22}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0x7fff, 0x2, 0xa700000000000000, 0x3}, {0x0, 0x6c15, 0x4, 0xfffffffffffffeff}, {0x6, 0x3, 0x9c, 0x7}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x3c, 0x4, [{0x8, 0x1000, 0x5, 0xfff}, {0xfffffffffffffff7, 0x1ff, 0x8e, 0x5}, {0x56c, 0x2, 0x3, 0x7}, {0x1, 0x3ae4, 0x81, 0x400}, {0x8, 0x5, 0x3, 0x8}, {0x1, 0x101, 0x80000000, 0x1}, {0x0, 0xff, 0x9, 0x10001}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r23}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x40000}, 0x20008005) 15:25:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200000000000000, 0x0) 15:25:56 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035001400060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x300000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 586.630620] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 586.632857] IPVS: length: 164 != 8 [ 586.640783] binder: 14711:14713 unknown command 0 [ 586.650277] binder: 14711:14713 ioctl c0306201 20000380 returned -22 [ 586.659227] binder: 14714:14715 transaction failed 29201/-22, size 0--2231252140385370112 line 2967 15:25:56 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 586.685813] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:25:56 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035005f00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:56 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 586.736116] binder: BINDER_SET_CONTEXT_MGR already set [ 586.755480] binder: 14714:14731 ioctl 40046207 0 returned -16 [ 586.764381] IPVS: length: 164 != 8 15:25:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfc00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x5000000, 0x0) 15:25:56 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000ffffffff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 586.785399] binder_alloc: 14714: binder_alloc_buf, no vma [ 586.791199] binder: 14714:14731 transaction failed 29189/-3, size 0--2231252140385370112 line 2967 [ 586.805954] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.811605] binder: undelivered TRANSACTION_ERROR: 29189 [ 586.829910] binder: 14741:14742 unknown command 0 [ 586.861814] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 586.864858] binder: 14741:14742 ioctl c0306201 20000380 returned -22 15:25:56 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:56 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:56 executing program 6: r0 = getpgid(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x101) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time={0x77359400}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0x40bc5311, &(0x7f0000000400)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000000)) 15:25:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x6000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:56 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 586.932262] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:25:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 586.981509] binder: 14765:14767 transaction failed 29201/-22, size 0-1792 line 2967 15:25:56 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035080c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:56 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x300000000000000, 0x0) [ 587.032441] IPVS: length: 164 != 8 [ 587.036496] binder: 14779:14781 unknown command 0 [ 587.050117] IPVS: length: 164 != 8 [ 587.058274] binder: 14779:14781 ioctl c0306201 20000380 returned -22 [ 587.067394] binder: BINDER_SET_CONTEXT_MGR already set 15:25:56 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:56 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xdc05], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 587.080470] binder: 14765:14785 ioctl 40046207 0 returned -16 15:25:56 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) timerfd_create(0x6, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@mcast1={0xff, 0x1, [], 0x1}, 0x2c, r1}) getgid() munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x40001, 0x0) r3 = openat(r2, &(0x7f00000001c0)='./file0\x00', 0x121280, 0x80) getpeername$packet(r2, &(0x7f0000000280), &(0x7f00000002c0)=0x14) fchmod(r3, 0x103) 15:25:56 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:57 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035100c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 587.132174] binder_alloc: 14765: binder_alloc_buf, no vma [ 587.137890] binder: 14765:14789 transaction failed 29189/-3, size 0-1792 line 2967 15:25:57 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 587.179264] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.185049] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.201597] IPVS: length: 164 != 8 [ 587.215983] binder: 14809:14810 unknown command 0 15:25:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x4], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4000000, 0x0) [ 587.242740] IPVS: length: 164 != 8 [ 587.246675] binder: 14809:14810 ioctl c0306201 20000380 returned -22 15:25:57 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035680c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 587.293195] binder: 14822:14823 transaction failed 29201/-22, size 0-116 line 2967 [ 587.373889] binder: BINDER_SET_CONTEXT_MGR already set [ 587.388122] binder: 14822:14837 ioctl 40046207 0 returned -16 [ 587.403193] binder_alloc: 14822: binder_alloc_buf, no vma [ 587.408906] binder: 14822:14837 transaction failed 29189/-3, size 0-116 line 2967 [ 587.422101] binder: undelivered TRANSACTION_ERROR: 29201 [ 587.427641] binder: undelivered TRANSACTION_ERROR: 29189 15:25:57 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:57 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ce8ceea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x1, &(0x7f0000cbc000)=""/244, &(0x7f00000000c0)=0x1e5) 15:25:57 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000900356c0c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:57 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xbb8], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:57 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x6800, 0x0) [ 588.035372] binder: 14849:14850 transaction failed 29201/-22, size 0-4294966781 line 2967 [ 588.045645] IPVS: length: 164 != 8 [ 588.050935] binder: 14851:14852 unknown command 0 15:25:57 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:57 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000900357a0c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:57 executing program 6: r0 = socket(0x15, 0x8000000000080005, 0x0) getsockopt(r0, 0x1000200100000114, 0x2713, &(0x7f0000000000)=""/1, &(0x7f0000000280)=0x19) 15:25:57 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 588.084762] binder: 14851:14852 ioctl c0306201 20000380 returned -22 [ 588.086624] binder: BINDER_SET_CONTEXT_MGR already set 15:25:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xdc05000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:58 executing program 6: [ 588.137449] IPVS: length: 164 != 8 [ 588.152328] binder: 14849:14871 ioctl 40046207 0 returned -16 15:25:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x600, 0x0) 15:25:58 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1, 0x109900) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x1f, 0x800) 15:25:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:58 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035060c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:58 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:58 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xfec0000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 588.205158] binder_alloc: 14849: binder_alloc_buf, no vma [ 588.210838] binder: 14849:14892 transaction failed 29189/-3, size 0-4294966781 line 2967 15:25:58 executing program 6: [ 588.266956] binder: 14900:14902 unknown command 0 15:25:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 588.299290] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.304847] binder: undelivered TRANSACTION_ERROR: 29189 [ 588.305424] IPVS: length: 164 != 8 [ 588.333183] binder: 14900:14902 ioctl c0306201 20000380 returned -22 15:25:58 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:58 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035003900060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:58 executing program 6: 15:25:58 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x80fe], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 588.392550] binder: 14921:14922 transaction failed 29201/-22, size 0--554050781184 line 2967 [ 588.406874] IPVS: length: 164 != 8 15:25:58 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x103, 0x8000023) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x700000000000000, 0x0) [ 588.450010] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:25:58 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:58 executing program 6: [ 588.515152] binder: BINDER_SET_CONTEXT_MGR already set [ 588.519031] binder: 14934:14936 unknown command 0 [ 588.531233] binder: 14921:14944 ioctl 40046207 0 returned -16 [ 588.531413] binder: 14934:14936 ioctl c0306201 20000380 returned -22 [ 588.537366] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:25:58 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x3000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:58 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x340, @time={0x77359400}, 0x1, {0x7ff, 0x7}, 0x5, 0x1, 0x1}) [ 588.574074] binder_alloc: 14921: binder_alloc_buf, no vma [ 588.579754] binder: 14921:14938 transaction failed 29189/-3, size 0--554050781184 line 2967 [ 588.598418] binder: undelivered TRANSACTION_ERROR: 29201 [ 588.603977] binder: undelivered TRANSACTION_ERROR: 29189 15:25:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:58 executing program 6: [ 588.628127] binder: 14934:14954 unknown command 0 15:25:58 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:58 executing program 6: [ 588.657253] binder: 14934:14954 ioctl c0306201 20000380 returned -22 [ 588.681559] IPVS: length: 164 != 8 15:25:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xffffffff00000000, 0x0) [ 588.713504] IPVS: length: 164 != 8 15:25:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:58 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035740c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:58 executing program 6: 15:25:58 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xa00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:58 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0", 0x4) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r2, &(0x7f00000001c0)="168d6c89aee22d40", 0x8, 0x0, &(0x7f0000000380)=ANY=[], 0x0) recvmsg(r2, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$getregset(0x4204, r3, 0x4, &(0x7f00000011c0)={&(0x7f00000001c0)=""/4096, 0x1000}) [ 588.806595] binder: 14985:14988 unknown command 0 15:25:58 executing program 6: 15:25:58 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:58 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035050c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 588.830779] binder: 14967:14969 transaction failed 29201/-22, size 0-144115188075855872 line 2967 [ 588.849279] binder: 14985:14988 ioctl c0306201 20000380 returned -22 15:25:58 executing program 6: 15:25:58 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0xb80b], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 588.910308] binder: BINDER_SET_CONTEXT_MGR already set [ 588.950482] IPVS: length: 164 != 8 [ 588.956168] binder: 14967:15006 ioctl 40046207 0 returned -16 [ 588.983253] IPVS: length: 164 != 8 [ 589.000854] binder: 15019:15021 unknown command 0 [ 589.005967] binder_alloc: 14967: binder_alloc_buf, no vma [ 589.011602] binder: 14967:15024 transaction failed 29189/-3, size 0-144115188075855872 line 2967 [ 589.033507] binder: 15019:15021 ioctl c0306201 20000380 returned -22 15:25:58 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000900354c0c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:58 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x6c000000, 0x0) 15:25:58 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:58 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000feffff0700", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:58 executing program 6: 15:25:58 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='rose0\x00', 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x1, 0x4, 0x1000, 0x4, 'syz0\x00', 0x9}, 0x1, 0x30, 0xfff, r2, 0x3, 0x3, 'syz1\x00', &(0x7f0000000280)=['net/dev\x00', 'net/dev\x00', '\x00'], 0x11, [], [0x1, 0x83d4, 0x800]}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:58 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x100000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:58 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb630000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 589.050669] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.056253] binder: undelivered TRANSACTION_ERROR: 29189 15:25:58 executing program 6: [ 589.118810] binder: 15044:15045 unknown command 0 [ 589.125698] IPVS: length: 164 != 8 [ 589.155221] binder: 15044:15045 ioctl c0306201 20000380 returned -22 15:25:59 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035040c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:59 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfc00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 589.166401] binder: 15050:15051 transaction failed 29201/-22, size 0-33554432 line 2967 [ 589.179491] IPVS: length: 164 != 8 15:25:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x18100, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:59 executing program 6: 15:25:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf630c40, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 589.253345] binder: BINDER_SET_CONTEXT_MGR already set 15:25:59 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x3f000000, 0x0) 15:25:59 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a843069100000039000900350a0c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 589.287413] binder: 15050:15067 ioctl 40046207 0 returned -16 [ 589.314594] IPVS: length: 164 != 8 15:25:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfe800000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 589.336517] binder_alloc: 15050: binder_alloc_buf, no vma [ 589.342185] binder: 15050:15080 transaction failed 29189/-3, size 0-33554432 line 2967 [ 589.342646] binder: 15076:15077 unknown command 0 [ 589.368400] IPVS: length: 164 != 8 [ 589.431533] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.437149] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.450091] kauditd_printk_skb: 3969 callbacks suppressed [ 589.450100] audit: type=1326 audit(589.447:34313): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x455a79 code=0x50000 [ 589.475055] audit: type=1326 audit(589.447:34314): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 589.482418] binder: 15076:15077 ioctl c0306201 20000380 returned -22 [ 589.494484] audit: type=1326 audit(589.447:34315): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 589.520344] audit: type=1326 audit(589.447:34316): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 589.539882] audit: type=1326 audit(589.448:34317): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 589.559301] audit: type=1326 audit(589.448:34318): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 589.578724] audit: type=1326 audit(589.448:34319): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 589.598128] audit: type=1326 audit(589.448:34320): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:25:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:59 executing program 6: 15:25:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000740)={@mcast2={0xff, 0x2, [], 0x1}, r1}, 0x14) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000100)) 15:25:59 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035090c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfec0], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:59 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3630840, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:59 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000ffffffff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 589.617540] audit: type=1326 audit(589.448:34321): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 589.636928] audit: type=1326 audit(589.448:34323): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15079 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 589.649058] binder: 15110:15112 transaction failed 29201/-22, size 0-1610612736 line 2967 15:25:59 executing program 6: 15:25:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4, 0x0) 15:25:59 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035001400060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfc], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 589.687209] IPVS: length: 164 != 8 [ 589.693006] binder: 15111:15113 unknown command 0 [ 589.716457] binder: 15111:15113 ioctl c0306201 20000380 returned -22 [ 589.740998] IPVS: length: 164 != 8 15:25:59 executing program 6: 15:25:59 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="f1e3154594f4dc30389e67071cf3c1b8c6e532109955e42c6d758a521eaa1116ea9483403dcffba65c9d10ec09f855e37110a35e5d1c528832e2a55930d47d3e46893599f9a0aaaf5241b043a092ff10bcad047b24f6214eed7664426c453ac57e7bb1", 0x63) [ 589.766549] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 589.801168] binder: BINDER_SET_CONTEXT_MGR already set 15:25:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40106309, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 589.835600] binder: 15110:15135 ioctl 40046207 0 returned -16 [ 589.845169] IPVS: length: 164 != 8 [ 589.854945] IPVS: length: 164 != 8 [ 589.866909] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 589.884550] binder_alloc: 15110: binder_alloc_buf, no vma [ 589.890198] binder: 15110:15135 transaction failed 29189/-3, size 0-1610612736 line 2967 [ 589.909786] binder: 15151:15152 unknown command 0 [ 589.917628] binder: 15151:15152 ioctl c0306201 20000380 returned -22 [ 589.925685] binder: undelivered TRANSACTION_ERROR: 29201 15:25:59 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:59 executing program 6: 15:25:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x2000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:59 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000340)={{0x6, 0x7, 0x1374233e, 0x9, 'syz0\x00', 0x1000}, 0x1, 0x400, 0x9, r3, 0x8, 0x8, 'syz1\x00', &(0x7f00000002c0)=['/dev/cuse\x00', 'em0\x00', '\x00', 'em0(}{\'*wlan0wlan1\x00', '{eth0ppp0em1selftrusted*\\\x00', "26922b00", '/dev/cuse\x00', '\x00'], 0x4b, [], [0x2, 0x1, 0x0, 0x80]}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2001, 0x0) signalfd(r0, &(0x7f0000000180)={0xfffffffffffffffd}, 0x8) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000140)={0x7fff, 0x1, 0xfffffffffffffffe, 0xfc0000000, 0x2, 0xfffffffffffffe01}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:25:59 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:59 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035003900060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:59 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x74, 0x0) 15:25:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40406300, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 589.931205] binder: undelivered TRANSACTION_ERROR: 29189 15:25:59 executing program 6: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f00000001c0)='./control/file0\x00', 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000380)='./control/file0\x00') rmdir(&(0x7f0000000040)='./control\x00') close(r0) [ 590.004665] IPVS: length: 164 != 8 15:25:59 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xb80b], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:25:59 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035005f00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:25:59 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:25:59 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x808, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = memfd_create(&(0x7f00000001c0)='vboxnet0]keyringvmnet0lo//{security\x00', 0x2) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000280)={"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"}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) write$cgroup_int(r2, &(0x7f0000000180)=0xde02, 0x12) write$P9_RMKNOD(r2, &(0x7f0000000140)={0xffffffffffffff4a, 0x13, 0x2, {0x80, 0x1}}, 0x14) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 590.038872] binder: 15174:15175 unknown command 0 [ 590.049207] IPVS: length: 164 != 8 [ 590.062578] binder: 15174:15175 ioctl c0306201 20000380 returned -22 [ 590.072921] binder: 15179:15180 transaction failed 29201/-22, size 0-10 line 2967 [ 590.123447] binder: BINDER_SET_CONTEXT_MGR already set 15:25:59 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) 15:25:59 executing program 6: r0 = inotify_init() ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)) 15:26:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x5, 0x0) [ 590.178813] binder: 15179:15183 ioctl 40046207 0 returned -16 [ 590.189474] binder_alloc: 15179: binder_alloc_buf, no vma [ 590.195184] binder: 15179:15197 transaction failed 29189/-3, size 0-10 line 2967 [ 590.218479] binder: 15206:15207 unknown command 0 15:26:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:00 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035002500060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:00 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:00 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xdc050000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:00 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0xfffffffffffffffb, @local={0xfe, 0x80, [], 0xaa}, 0x200}, {0xa, 0x4e21, 0xcdf5, @loopback={0x0, 0x1}, 0x8}, 0x1, [0x4, 0x2, 0x10000, 0x5746, 0x3, 0x3f, 0x6, 0x1]}, 0x5c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x6, 0x4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000002c0)=""/164, &(0x7f0000000280)=0xa4) [ 590.238579] binder: 15206:15207 ioctl c0306201 20000380 returned -22 [ 590.277476] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.283060] binder: undelivered TRANSACTION_ERROR: 29189 15:26:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1263484000000000, &(0x7f0000000080), &(0x7f0000000140)}}}], 0x0, 0x0, &(0x7f0000000640)}) [ 590.356795] IPVS: length: 164 != 8 15:26:00 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 590.379631] binder: 15230:15240 transaction failed 29201/-22, size 0-96 line 2967 [ 590.402681] IPVS: length: 164 != 8 [ 590.415831] binder: BINDER_SET_CONTEXT_MGR already set [ 590.424337] binder: 15243:15244 unknown command 0 15:26:00 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c08060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x6c, 0x0) 15:26:00 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xdc05000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x7) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f0000000100)=0xa4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}, 0x2, 0x0, 0x2, 0x6, 0x7fff, 0xaac, 0x6}, 0x20) [ 590.431831] binder: 15230:15245 ioctl 40046207 0 returned -16 [ 590.440279] binder_alloc: 15230: binder_alloc_buf, no vma [ 590.445928] binder: 15230:15245 transaction failed 29189/-3, size 0-96 line 2967 [ 590.454083] binder: 15243:15244 ioctl c0306201 20000380 returned -22 15:26:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x40406301}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:00 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c02060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:00 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 590.522268] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.527817] binder: undelivered TRANSACTION_ERROR: 29189 15:26:00 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 590.605977] binder: 15271:15273 unknown command 0 15:26:00 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xff00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:00 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00140000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x500, 0x0) [ 590.641590] binder: 15271:15273 ioctl c0306201 20000380 returned -22 [ 590.662515] binder: 15283:15285 transaction failed 29201/-22, size 0-5476377146882523136 line 2967 15:26:00 executing program 1: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socket$inet6(0xa, 0x80807, 0x8000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000380)={{0xc000000, 0x7f, 0x100000001, 0x10000, 0x3f, 0x6}, 0x4, 0x32c84d9c, 0xffff, 0xdc7, 0x6, "de280f02e409f975976fa3458b7226a01c9e6d8a2f36009baaba15b02c87801c9f9092ac58cbdf518ff3be973dfd3f12f8ad24c47a3a336db7312a03aa1ce2a1c77fdce9cfaf623601d6365abca3ca9f33e7016d4e636705a948b10280e6db85c0343b237fe16249005f0dd552f83e736072a932c93b9fa15fb5e7376a16eb14"}) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 15:26:00 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x7a00000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:00 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xc0fe], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 590.740325] binder: BINDER_SET_CONTEXT_MGR already set [ 590.756501] nla_parse: 10 callbacks suppressed [ 590.756509] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 590.771974] binder: 15283:15297 ioctl 40046207 0 returned -16 [ 590.800828] IPVS: length: 164 != 8 15:26:00 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 590.826149] IPVS: length: 164 != 8 [ 590.835102] binder_alloc: 15283: binder_alloc_buf, no vma [ 590.840772] binder: 15283:15315 transaction failed 29189/-3, size 0-5476377146882523136 line 2967 [ 590.841171] binder: 15313:15316 unknown command 0 [ 590.862754] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000280)=""/238) r1 = socket$inet6(0xa, 0x805, 0x0) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5, &(0x7f0000000680)=[{&(0x7f0000000380)="32d72ec1e1e9876e8d5457738687e12d9839e6dc77f1fe1a72ddd1ca9680815205fef542a218cfe68bf25cb48dd4c693a24ca53c102ff8145f6f19645e87fbe2715ef96c70d5a47c0eca6d2fa683fdcf5a392dda88e2609a8b44cb4966388090c3a9d528106095c20403f08773092cbdc8cfb9eede211463e05c067c6e8c8e3834ce78ab8c4be0376ee33af0fd3311a07161c8518eb10f8a4571273c145cb70e0ec9a8d6145dc54395377d26d51710e048675c9ee266b92d310a3ff55c9bcf36cd45ae9eef8933a200", 0xc9, 0x200}, {&(0x7f00000001c0)="19be35e9b9b8ecb9605d2c70571c25cdbcc534683aa244136501fdbd6eaa8650c80e4208f2f2256ff6691c2c4748717751953c941e53cf1ad52c31dfe620f6", 0x3f, 0x5}, {&(0x7f0000000480)="068bd1459adff8fea52bc8efffaf5dfb3f9d7bda5d9b24efa16d546e2116c2540c5309c578955a89aa1cfe2cc50df979a986c766c04957f1fe08a29d3e70cd39cc36b5dd5c014a0f42ba6d31f1e04401efa515ad4294c0e69424af154b7e5f227be106948ca4bf965b1e9529a60638daa51c", 0x72, 0x5}, {&(0x7f0000000500)="6bb64836b381a501e250dab36eac179e4fb00dfb90ff52295bc99ff59daebd30fb47a1bb2273b566ecb9022c757b65e710bd040de196d14f1eeb5835b45cd7fd634e13b6145d01258b09d95a729867503325", 0x52, 0x1}, {&(0x7f0000000580)="62019ebbe14408f6185060f03ca797b13b0252e9b7fa3b30cf1d30839149e2aa51a70da7618008415073516f88041ab1491d1df13440e751a47a3eb8444db21c652585ffe4a848e3f7eb6fbfa64c81c3982d2fe3b5cc5838e6e752543eb5c8fef7a44718ac90b9083cb9333d43cf6b35c1148e8c97a7f443ba31e0d05e205954a75a8a0d51e3892b3ddbf3540e69d1421c6283e677d81442399922a557ed962e0907d4634819798629fd6b3b65b63531ef058bd25f75ebff35dc1541a22356497ef11a48e3152f156eaaea3bd618e1b2c3e60d6a3f03e73dc0bff176e432d44b28f0bcf2b3e88491a5d98cbefbc0b8", 0xef, 0x4}], 0x100000, &(0x7f0000000700)={[{@commit={'commit', 0x3d}, 0x2c}]}) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) 15:26:00 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x2], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:00 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x3f00, 0x0) [ 590.881212] binder: 15313:15316 ioctl c0306201 20000380 returned -22 [ 590.925859] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.931472] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.953228] IPVS: length: 164 != 8 15:26:00 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0b060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 590.980997] IPVS: length: 164 != 8 15:26:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x2000000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) 15:26:00 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 591.050164] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:00 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x80fe], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:00 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 591.101988] binder: 15352:15353 transaction failed 29201/-22, size 0-65534 line 2967 [ 591.110403] binder: 15350:15351 unknown command 0 [ 591.123972] IPVS: length: 164 != 8 [ 591.125068] binder: 15350:15351 ioctl c0306201 20000380 returned -22 [ 591.142140] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4000000000000000, 0x0) [ 591.169215] IPVS: length: 164 != 8 [ 591.176447] binder: BINDER_SET_CONTEXT_MGR already set [ 591.187215] binder: 15352:15366 ioctl 40046207 0 returned -16 15:26:01 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:01 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c04060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xc63}}], 0x0, 0x0, &(0x7f0000000640)}) [ 591.212491] binder_alloc: 15352: binder_alloc_buf, no vma [ 591.218231] binder: 15352:15366 transaction failed 29189/-3, size 0-65534 line 2967 15:26:01 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000180)) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000140)={0x8000, 0x100000001, 0x7fffffff, 0x6}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 591.265751] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.271311] binder: undelivered TRANSACTION_ERROR: 29189 15:26:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:01 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x200000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:01 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000feffff0700", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4c000000, 0x0) [ 591.311844] IPVS: length: 164 != 8 [ 591.319776] binder: 15384:15385 unknown command 0 [ 591.324895] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 591.342605] IPVS: length: 164 != 8 [ 591.346488] binder: 15384:15385 ioctl c0306201 20000380 returned -22 15:26:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x4008630a}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:01 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r1 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000680)={r2, 0xf0, "cb4158af5c301574dff83930348d033c7a68c0f212e97a3fc0ceb3d3943fa64422655c05a169307aaaf0f66e88a106bdf766e3803352692d30a3867d4b15ad57c45ecae5ce34138a99ce03555fc3ce37cb74241d12cfe0b92ef41a2ebae6f4acdec015a1007c4468094717b8ee5999fcb4fd2258bbe687c856aba8fff1f6003a72bfcad72316c6223b8c19fc529879c9fcd0b2e171e709bc60ba501090a5ca52f91386b2560fee65969a475a3bfbefddf44177f81316ba3ee4f7d7ad66864f4f903eb279c1bf8006ea49d2200cc4d7599fc762c7c2bae1e0432d4d82f3be60ed5e12d607a23ea3cacc72921d432fa484"}, &(0x7f00000001c0)=0xf8) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1f, 0x42) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000280)={"f40e862307ac9331e0733b02bf37af609746a7bb24679bb135d9d70279b30ac87ad7eebe05dbeabbbe778d153a32a632eb269360df789f24ec4ae12f5605cbf3036b6411e0983de0829cc8b5af8e0744bc1942a38212cc4cf9a3a223a3282931485f30dfb8b66c4c1cb767ea08d77954b1705c228033ce764a2d2572cfdbdbdc1c1a1ad158d99450fe00ea7b6170d53cf54355502d2f844997737edfb03b0233c5339a5e026bf95fc3b575541c7ecdd00d08a28b3137ac5cc0630e1b2afda016294f202f75199d1074b5259c06a6e23c7c7cb7f016f6fcaf4b7574220816256623f3c3ce8830b967aa73bb7f268bd4cd5c0e9d18572da446abf735744a1490fc208a1d6a6ca7d96627344b18b469b5e5dc8bbfc12659964a2c1ba40a1fefba41aa79f1f962320efc323e1a2875cb2293cd948937dc22cd1efba5c8328f78eaea809e42f985657783cd342ed91ac6c5713f842efd3f107bf2addad5ae9c01e245fa84183a48ca2a78dcb3abdfddd6666d00b395f1f4474304f310fa211ce8a8d7750bc4047d0a41205ad359624dc32fea45ee5d3634dbbf0c281342241484152c2a8b725e570193cd6210faa8dd1c7668eafb6589638e3e58d4afb5ab3032c070f46352217c4c7f9072ef787cc51439762e0b02e4168384dd145bf2e65cf71cc76e50c7e0e1d3e9b097cf0719fb95d52126dbda76cdd08f6b8a93d9f1164416376e05f0fa124440efb677702519d03f8df3f3369712df6cd15cc7f3503fcf727c36e1e8b4925f29a6d73e67b522a47bdcb55b16c97c157faaba4e1591462dca300b5be1dc81b0345c033cca7b162376d81987094b170b48a3d9cc99379dc3fbb97fc6a836a9d2415b66e8dd94e64c62798ca13f3ca1e37c6051b3b52592e79fe045ef729accde02027b81253454c21b93fe096ca47c1c2f2e6a3c02b06818b63355a9ff3ece71bc41a9f0c8f1b21cc9d1456c2ff570244d8c7005339dd0074dbec71ada1d40cfda5a0f3c9abd83aa8772e05186d2554bc3c9be97614758a1f0559148dc5abdabd383ddffd654573134110ac3a1f40f661c802416afb854fdc99a55c039dde2c62f5221ffe8f670e414243f11912231bfa00052c5929b23b9e768dc1423acb0afefe1878264faf6220beef8eed1ffab8e0f751b4b6070cc480a9ecf79299ef9357c291d75cd3c1d1bfb273fa974380a25f7e05338b1148fa61f966237f176f2f1716fd824e44ea052a9d8453f88ce90401d6e770af2fd84a08e0df37e9ba26eafdfae9e6bdb2af0b57b6c74ce274fbc99fdfea844b4b4ad3ead9b324002f10af4a0fc6399151d762d89f6b784a73e4e4964691c7e9f65f39561c3565ea677bf9b9d293f1ce4107436754e725c0bce6484d3ce6b0a5db6a62b82fc7ea55503dd966c1d9d17faaf0b878b3643ef7f11367db7fc962023ebd96c5d5e"}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 591.396114] binder: 15394:15395 transaction failed 29201/-22, size 0-1275068416 line 2967 [ 591.418049] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:01 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:01 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x6000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:01 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:01 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c000b0000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 591.469814] binder: BINDER_SET_CONTEXT_MGR already set [ 591.478573] binder: 15410:15411 unknown command 0 [ 591.488639] binder: 15410:15411 ioctl c0306201 20000380 returned -22 [ 591.495852] binder: 15394:15408 ioctl 40046207 0 returned -16 [ 591.497862] IPVS: length: 164 != 8 [ 591.532184] IPVS: length: 164 != 8 [ 591.536553] binder_alloc: 15394: binder_alloc_buf, no vma [ 591.542301] binder: 15394:15418 transaction failed 29189/-3, size 0-1275068416 line 2967 15:26:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xf630c4000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:01 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x800) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) [ 591.584499] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4800, 0x0) 15:26:01 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfc000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 591.632939] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.638580] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.655710] binder: 15433:15434 unknown command 0 [ 591.660894] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:01 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x800) getgroups(0x3, &(0x7f00000001c0)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x20, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_mmap='cache=mmap', 0x2c}, {@posixacl='posixacl', 0x2c}, {@access_user='access=user', 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@loose='loose', 0x2c}, {@cache_mmap='cache=mmap', 0x2c}, {@aname={'aname', 0x3d, '\'vmnet0cpuset'}, 0x2c}, {@dfltgid={'dfltgid', 0x3d, r3}, 0x2c}]}}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ppp\x00', 0x80000, 0x0) ioctl$KDMKTONE(r4, 0x4b30, 0x800) 15:26:01 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 591.677222] binder: 15433:15434 ioctl c0306201 20000380 returned -22 15:26:01 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 591.731469] binder: 15433:15434 unknown command 0 15:26:01 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00050000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 591.765587] binder: 15448:15452 transaction failed 29201/-22, size 0-18432 line 2967 [ 591.780995] binder: 15433:15434 ioctl c0306201 20000380 returned -22 15:26:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x863104000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7a00, 0x0) 15:26:01 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfec00000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 591.807409] IPVS: length: 164 != 8 [ 591.813861] binder: BINDER_SET_CONTEXT_MGR already set [ 591.837245] binder: 15448:15463 ioctl 40046207 0 returned -16 [ 591.844400] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. [ 591.853352] IPVS: length: 164 != 8 15:26:01 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 591.866945] binder_alloc: 15448: binder_alloc_buf, no vma [ 591.872739] binder: 15448:15463 transaction failed 29189/-3, size 0-18432 line 2967 [ 591.884012] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:01 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x80000, 0x0) r0 = socket$inet6(0xa, 0x806, 0x6) socket$bt_hidp(0x1f, 0x3, 0x6) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x23b, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet_dccp_int(r1, 0x21, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="a00100002381324de29da9b8eb07c8e0dc66b738df2be563f1fdeeac9dfc054a6bf4508ee3f2f6efb1f1f4683e0b15d10fec504351c7bd396e0ae27a2ce082c6a950f8ee893327f301a2db8e464e3cb0907741fd2ad6cc7c6cac4c9093784fe0a123e1213e7b58f0484ba167fe60c3236b86cdcc7e8046b4a45c4b7506a62337cea8a9092a4c0116136f193a3855b732f15a4ccc4d1e198d96037c1891859c398e88dc089b347862b94921b84437f0425eb5f4652510c9e2b03e7318cbcf392c866feadb2a77b1e58c28a14015c881eb94dfcb2d4769d0d6806fb12729f9a3a3b9016b69c00b5985f4cb8b3ab6c07fc4cc64a6b0d957c304141534229608c42367bd6240f2570b87bbe87748f256090e187529971a984ecb3fba5bc3cbc1ccdc7b70a4686eb101f6c2d21521b15c20b25d3d6ed11e430b7728828dd7fd4ecd653bc873cb2aa701ca51ee4319c78090646fc18885281f609a09697dba38728e3ba59f66629441faeafca55fedcd1de8ade583a53e00091d717422568249f439725292a48648e49c6a2f9e5b897fcb557ff7f01b01a852d9d1010d979bde45f3bcf94834c625d6cd8910f17fa89c08239d50802050e7f0e7ccbe5361e538575eafc2a987df8f00497bebbfcea0c17d4295bf", @ANYRES16=r2, @ANYBLOB="000229bd7000fedbdf250600000020000100080002007f00000008000600666f00000c00070006000000020000000800050001000000340001000800080004000000080006006f766600080004004e220000080004004e230000080006006c63000008000800ff0300000c00010008000800020000005800010014000300ac1414120000000000000000000000000800080000000000080002008700000008000b007369700008000b00736970000c00070016000000140000000c00070004000000110000000800050000000000600003001400060000000000000000000000000000000001080008004900000008000400000800000800010000000000140006000000000000000000000000000000000008000800c800000014000600fe80000000000000000000000000001c08000400e40e00005c00030008000800000000001400020076657468305f746f5f7465616d0000000800080081000000080003000100000008000500000000000800080001000000080007004e24000014000200766c616e3000000000000000000000000800050001000000"], 0x1a0}, 0x1}, 0x24008000) 15:26:01 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 591.925750] binder: 15469:15471 unknown command 0 [ 591.942210] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.947879] binder: undelivered TRANSACTION_ERROR: 29189 [ 591.951171] binder: 15469:15471 ioctl c0306201 20000380 returned -22 15:26:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:01 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x600], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:01 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c68060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xa000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x68, 0x0) 15:26:01 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 592.087924] binder: 15500:15503 unknown command 0 [ 592.098058] binder: 15498:15499 transaction failed 29201/-22, size 0-27648 line 2967 15:26:01 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00090000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x3], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:02 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 592.133651] binder: 15500:15503 ioctl c0306201 20000380 returned -22 [ 592.168091] binder: BINDER_SET_CONTEXT_MGR already set 15:26:02 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000280)={{0x14000, 0xf001, 0xf, 0xfffffffffffffff8, 0x8000000000000, 0x2, 0x8, 0x3, 0x0, 0x9, 0x6, 0x1}, {0x4, 0x0, 0x9, 0xff, 0x4, 0x100000000, 0x7fffffff, 0x5, 0x0, 0x5, 0x200, 0x1}, {0x6000, 0x10000, 0xf, 0x2d1b, 0xffff, 0x4, 0x8, 0xfffffffffffff602, 0x80000001, 0xfffffffffffff33d, 0x400, 0x7fff}, {0x2000, 0x4, 0x3, 0x6, 0x7fffffff, 0x3, 0x6, 0x9, 0x3, 0x8, 0x6}, {0x3001, 0x16002, 0xe, 0x0, 0x0, 0x7, 0x5, 0x14cd, 0x5, 0x8, 0x9ff5, 0x10001}, {0x15000, 0xd000, 0x1a, 0x5, 0x0, 0x7a, 0x3, 0x1, 0x0, 0x1f, 0x400, 0x1b}, {0x3000, 0x107000, 0x3, 0x6, 0x7f, 0x0, 0x100, 0x9, 0x1, 0x100000001, 0xba, 0x3}, {0x5000, 0x2000, 0xd, 0x100, 0x4, 0x2, 0x81, 0x7, 0xfb37, 0x5c, 0x4, 0x8}, {0x0, 0x7001}, {0x1000, 0xf000}, 0x20000000, 0x0, 0x5000, 0x2000, 0x3, 0xc000, 0x2, [0x7f, 0x3, 0x1, 0x2]}) r1 = socket$inet6(0xa, 0x805, 0x0) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x100, 0x200000) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f0000000140)=0xfe6b) 15:26:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x40046304}}], 0x0, 0x0, &(0x7f0000000640)}) [ 592.199516] binder_alloc: 15498: binder_alloc_buf, no vma [ 592.205226] binder: 15498:15523 transaction failed 29189/-3, size 0-27648 line 2967 [ 592.232079] binder: 15498:15519 ioctl 40046207 0 returned -16 15:26:02 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c10060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:02 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 592.266921] IPVS: length: 65131 != 8 15:26:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7a00000000000000, 0x0) 15:26:02 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 592.294460] IPVS: length: 65131 != 8 [ 592.308202] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.313789] binder: undelivered TRANSACTION_ERROR: 29189 [ 592.327105] binder: 15541:15544 unknown command 0 15:26:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfe80], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e1, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:02 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x7fffffff}, &(0x7f00000001c0)=0x8) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) [ 592.349944] binder: 15541:15544 ioctl c0306201 20000380 returned -22 15:26:02 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c60060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x40486312}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:02 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 592.429241] binder: 15559:15560 transaction failed 29201/-22, size 0-2529 line 2967 [ 592.449663] sctp: [Deprecated]: syz-executor1 (pid 15563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.449663] Use struct sctp_sack_info instead 15:26:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xdc05], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:02 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c09060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 592.506230] binder: BINDER_SET_CONTEXT_MGR already set [ 592.516149] binder: 15572:15576 unknown command 0 [ 592.537997] binder: 15559:15574 ioctl 40046207 0 returned -16 15:26:02 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xa00000000000000, 0x0) [ 592.553157] binder: 15572:15576 ioctl c0306201 20000380 returned -22 [ 592.560734] IPVS: length: 164 != 8 [ 592.575120] binder_alloc: 15559: binder_alloc_buf, no vma [ 592.580795] binder: 15559:15585 transaction failed 29189/-3, size 0-2529 line 2967 15:26:02 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c03060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfe80000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x363084000000000}}], 0x0, 0x0, &(0x7f0000000640)}) [ 592.610090] sctp: [Deprecated]: syz-executor1 (pid 15593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.610090] Use struct sctp_sack_info instead [ 592.647409] binder: undelivered TRANSACTION_ERROR: 29201 [ 592.652956] binder: undelivered TRANSACTION_ERROR: 29189 15:26:02 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:02 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 592.707129] IPVS: length: 164 != 8 [ 592.715935] binder: 15602:15603 unknown command 0 15:26:02 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0f060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:02 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x503000, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d0000000701000000048ec8c64e3375000000bdcab53f1df43410a0fd10e2c46d5641f149dc52fdf19f2ea8ffb5eddff8740f1566ad052c89633c6514d39e5b6ea9b49d3e8f1bbd3f026ed4"], 0xd) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000180)={@ipv4={[], [], @remote}}, &(0x7f00000001c0)=0x14) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000280)=0xc) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/164, &(0x7f00000000c0)=0xa4) prctl$void(0x3f) [ 592.750237] binder: 15602:15603 ioctl c0306201 20000380 returned -22 15:26:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xa000000, 0x0) 15:26:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfec0000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:02 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 592.804425] binder: 15621:15622 transaction failed 29201/-22, size 0-5 line 2967 [ 592.834902] IPVS: length: 164 != 8 15:26:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x4630440}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:02 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c6c060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:02 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 592.872858] IPVS: length: 164 != 8 [ 592.877708] binder: BINDER_SET_CONTEXT_MGR already set 15:26:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x300000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 592.917482] binder: 15640:15642 unknown command 0 15:26:02 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x800002, 0x11, r1, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000000)=ANY=[]) 15:26:02 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 592.954568] binder: 15640:15642 ioctl c0306201 20000380 returned -22 [ 592.971615] binder: 15621:15635 ioctl 40046207 0 returned -16 15:26:02 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c7a060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x300, 0x0) [ 593.002616] binder_alloc: 15621: binder_alloc_buf, no vma [ 593.008267] binder: 15621:15643 transaction failed 29189/-3, size 0-5 line 2967 15:26:02 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:02 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x5dc], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 593.116877] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.122419] binder: undelivered TRANSACTION_ERROR: 29189 15:26:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x12634840}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:03 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c07060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:03 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:03 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xa00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4c00, 0x0) 15:26:03 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:03 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000cfc060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 593.216143] binder: 15686:15689 unknown command 0 [ 593.218478] binder: 15683:15692 transaction failed 29201/-22, size 0-76 line 2967 [ 593.255339] binder: 15686:15689 ioctl c0306201 20000380 returned -22 15:26:03 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:03 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x600000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x1200}}], 0x0, 0x0, &(0x7f0000000640)}) [ 593.299613] binder: BINDER_SET_CONTEXT_MGR already set [ 593.322145] binder: 15683:15706 ioctl 40046207 0 returned -16 [ 593.340866] binder_alloc: 15683: binder_alloc_buf, no vma [ 593.346552] binder: 15683:15706 transaction failed 29189/-3, size 0-76 line 2967 15:26:03 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:03 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:03 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00600000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 593.404989] binder: 15721:15722 unknown command 0 [ 593.418185] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.423744] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.437239] binder: 15721:15722 ioctl c0306201 20000380 returned -22 15:26:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100000000000000, 0x0) 15:26:03 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xa000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:03 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x500}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 593.538416] binder: 15744:15745 transaction failed 29201/-22, size 0-432345564227567616 line 2967 15:26:03 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c48060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 593.583306] binder: BINDER_SET_CONTEXT_MGR already set [ 593.611665] binder: 15744:15750 ioctl 40046207 0 returned -16 [ 593.634652] binder_alloc: 15744: binder_alloc_buf, no vma [ 593.640346] binder: 15744:15750 transaction failed 29189/-3, size 0-432345564227567616 line 2967 [ 593.656692] binder: 15760:15762 unknown command 0 15:26:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400000000000000, 0x0) 15:26:03 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x4000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:03 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c06060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 593.685171] binder: undelivered TRANSACTION_ERROR: 29201 [ 593.690758] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.697982] binder: 15760:15762 ioctl c0306201 20000380 returned -22 15:26:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:03 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:03 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x40486311}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:03 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x300], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 593.809320] binder: 15782:15785 transaction failed 29201/-22, size 0-83886080 line 2967 [ 593.850311] binder: 15792:15793 unknown command 0 15:26:03 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c05060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:03 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 593.882137] binder: 15792:15793 ioctl c0306201 20000380 returned -22 [ 593.892728] binder: BINDER_SET_CONTEXT_MGR already set [ 593.903533] binder: 15782:15797 ioctl 40046207 0 returned -16 15:26:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x6c00000000000000, 0x0) 15:26:03 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:03 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x40046307}}], 0x0, 0x0, &(0x7f0000000640)}) [ 593.941416] binder_alloc: 15782: binder_alloc_buf, no vma [ 593.947127] binder: 15782:15797 transaction failed 29189/-3, size 0-83886080 line 2967 15:26:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:03 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xa00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:03 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c4c060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:03 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1090000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 594.041385] binder: 15819:15820 unknown command 0 [ 594.044915] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.051902] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.066687] binder: 15819:15820 ioctl c0306201 20000380 returned -22 15:26:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:04 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:04 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00390000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x6], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 594.154334] binder: 15834:15837 transaction failed 29201/-22, size 0-3775463424 line 2967 15:26:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x74}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x6000000, 0x0) [ 594.203719] binder: BINDER_SET_CONTEXT_MGR already set 15:26:04 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 594.230247] binder: 15848:15849 unknown command 0 [ 594.248637] binder: 15834:15846 ioctl 40046207 0 returned -16 [ 594.263128] binder: 15848:15849 ioctl c0306201 20000380 returned -22 15:26:04 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0a060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:04 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xa], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xa00000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) [ 594.297890] binder_alloc: 15834: binder_alloc_buf, no vma [ 594.303552] binder: 15834:15864 transaction failed 29189/-3, size 0-3775463424 line 2967 15:26:04 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:26:04 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 594.403211] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.408909] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.429684] binder: 15879:15883 unknown command 0 15:26:04 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:04 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x3, 0x0) 15:26:04 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:26:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x4], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:04 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c005f0000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 594.471291] binder: 15879:15883 ioctl c0306201 20000380 returned -22 [ 594.500459] kauditd_printk_skb: 5290 callbacks suppressed 15:26:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xe630c40}}], 0x0, 0x0, &(0x7f0000000640)}) [ 594.500472] audit: type=1326 audit(594.499:39613): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:26:04 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c74060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 594.581896] binder: 15907:15912 transaction failed 29201/-22, size 0-768 line 2967 [ 594.602968] binder: 15913:15914 unknown command 0 15:26:04 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x400000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 594.632317] binder: BINDER_SET_CONTEXT_MGR already set [ 594.639644] binder: 15913:15914 ioctl c0306201 20000380 returned -22 [ 594.659005] binder: 15907:15917 ioctl 40046207 0 returned -16 [ 594.668106] audit: type=1326 audit(594.550:39614): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 594.684958] binder_alloc: 15907: binder_alloc_buf, no vma [ 594.687700] audit: type=1326 audit(594.550:39615): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 594.693352] binder: 15907:15926 transaction failed 29189/-3, size 0-768 line 2967 [ 594.713337] audit: type=1326 audit(594.550:39616): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 594.740477] audit: type=1326 audit(594.550:39617): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 594.759893] audit: type=1326 audit(594.550:39618): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 594.767475] binder: undelivered TRANSACTION_ERROR: 29201 [ 594.779284] audit: type=1326 audit(594.550:39619): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 594.779306] audit: type=1326 audit(594.550:39620): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 594.784904] binder: undelivered TRANSACTION_ERROR: 29189 15:26:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x700}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:04 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 15:26:04 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00390000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:04 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c000b0000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 594.804308] audit: type=1326 audit(594.550:39621): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 594.848598] audit: type=1326 audit(594.550:39622): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15890 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:26:04 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 594.916731] binder: 15939:15940 unknown command 0 15:26:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xff00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:04 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 594.960177] binder: 15944:15949 transaction failed 29201/-22, size 0-254 line 2967 [ 594.971724] binder: 15939:15940 ioctl c0306201 20000380 returned -22 [ 594.999852] binder: BINDER_SET_CONTEXT_MGR already set [ 595.009235] binder: 15944:15953 ioctl 40046207 0 returned -16 [ 595.053527] binder_alloc: 15944: binder_alloc_buf, no vma [ 595.059188] binder: 15944:15953 transaction failed 29189/-3, size 0-254 line 2967 15:26:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x600000000000000, 0x0) 15:26:04 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00050000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:04 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:26:04 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:04 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x4c00}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 595.099101] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.104652] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.131787] binder: 15977:15978 unknown command 0 15:26:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x3000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:05 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 595.160636] binder: 15977:15978 ioctl c0306201 20000380 returned -22 [ 595.188681] binder: BINDER_SET_CONTEXT_MGR already set 15:26:05 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00140000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:05 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 595.209780] binder: 15982:15985 ioctl 40046207 0 returned -16 15:26:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xd63000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xbb8], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:05 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 15:26:05 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c005f0000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 595.292613] binder: 15982:15985 transaction failed 29189/-22, size 0-108 line 2852 [ 595.322615] binder: 16007:16008 unknown command 0 15:26:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7a, 0x0) 15:26:05 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:05 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 595.370542] binder: 16007:16008 ioctl c0306201 20000380 returned -22 [ 595.381540] binder: 15982:16017 transaction failed 29201/-22, size 0-108 line 2967 15:26:05 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00600000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:05 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281660be520501805e86bd441c8537957c21c886f85750dbc0c6f365f2bc1e3c7829c40c8f27a74e4bc0f3c839c1be00bd04a123146abc2e7a173d65f6cfa90a2e6e07159416f40fc4d055c85dc762c271cfff2da21deb17e1db35a5cc9904b5bb75e041fc54117d0cce76677b7acab7adb8392a9502fdabbedc5cff9fb08ab498c03b90b65a2b2be8133f41410035a10b711f587e8a52fb010"], &(0x7f00000001c0)=0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15:26:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x1000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 595.426149] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.431799] binder: undelivered TRANSACTION_ERROR: 29201 15:26:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe209000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:05 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x6000000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:05 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 595.563192] binder: 16046:16051 transaction failed 29201/-22, size 0--2159194546347442176 line 2967 [ 595.573676] binder: 16053:16054 unknown command 0 [ 595.601611] binder: BINDER_SET_CONTEXT_MGR already set 15:26:05 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00090000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:05 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 15:26:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4000, 0x0) 15:26:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xff000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 595.609047] binder: 16053:16054 ioctl c0306201 20000380 returned -22 15:26:05 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000feffff0700", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 595.640492] binder: 16046:16059 ioctl 40046207 0 returned -16 [ 595.672500] binder: 16053:16054 unknown command 0 [ 595.680258] binder: 16053:16054 ioctl c0306201 20000380 returned -22 15:26:05 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00020000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:05 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 595.680398] binder_alloc: 16046: binder_alloc_buf, no vma [ 595.692428] binder: 16046:16075 transaction failed 29189/-3, size 0--2159194546347442176 line 2967 15:26:05 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) [ 595.733088] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.738628] binder: undelivered TRANSACTION_ERROR: 29189 15:26:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xb80b0000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:05 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x2630440}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7, 0x0) [ 595.796852] nla_parse: 42 callbacks suppressed [ 595.796860] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:05 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:05 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xfc00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:05 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 595.900474] binder: 16097:16099 unknown command 0 [ 595.905634] binder: 16097:16099 ioctl c0306201 20000380 returned -22 [ 595.915621] netlink: 13 bytes leftover after parsing attributes in process `syz-executor5'. 15:26:05 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x3000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:05 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:05 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0xb80b000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:05 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000003900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 596.040105] binder: 16094:16096 transaction failed 29201/-22, size 0-72057594037927936 line 2967 [ 596.085809] binder: 16140:16142 unknown command 0 15:26:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xa, 0x0) 15:26:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 596.123454] binder: 16140:16142 ioctl c0306201 20000380 returned -22 [ 596.140673] binder: BINDER_SET_CONTEXT_MGR already set [ 596.178276] binder: 16094:16147 ioctl 40046207 0 returned -16 [ 596.210005] binder_alloc: 16094: binder_alloc_buf, no vma [ 596.215731] binder: 16094:16157 transaction failed 29189/-3, size 0-72057594037927936 line 2967 15:26:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x7a}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:06 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00065708001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:06 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:06 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 596.245164] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.250699] binder: undelivered TRANSACTION_ERROR: 29189 15:26:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4800000000000000, 0x0) [ 596.308827] binder: 16162:16165 unknown command 0 [ 596.328285] binder: 16162:16165 ioctl c0306201 20000380 returned -22 15:26:06 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00067a00001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xa00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 596.357881] binder: 16178:16179 transaction failed 29201/-22, size 0-504403158265495552 line 2967 15:26:06 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000ffffffff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xe630c4000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:06 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060600001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:06 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 596.482718] binder: BINDER_SET_CONTEXT_MGR already set [ 596.491125] binder: 16201:16202 unknown command 0 [ 596.506522] binder_alloc: 16178: binder_alloc_buf, no vma [ 596.512222] binder: 16178:16205 transaction failed 29189/-3, size 0-504403158265495552 line 2967 [ 596.521473] binder: 16178:16199 ioctl 40046207 0 returned -16 15:26:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 596.542152] binder: 16201:16202 ioctl c0306201 20000380 returned -22 15:26:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfec00000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:06 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7a000000, 0x0) 15:26:06 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060003001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xa63084000000000}}], 0x0, 0x0, &(0x7f0000000640)}) [ 596.611917] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.617523] binder: undelivered TRANSACTION_ERROR: 29189 15:26:06 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 596.680112] binder: 16223:16226 unknown command 0 15:26:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xa000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:06 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006f000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 596.716084] binder: 16223:16226 ioctl c0306201 20000380 returned -22 15:26:06 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7400, 0x0) 15:26:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x5000000}}], 0x0, 0x0, &(0x7f0000000640)}) [ 596.763065] binder: 16240:16242 transaction failed 29201/-22, size 0-7493989779944505344 line 2967 15:26:06 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00067400001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:06 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xc0fe], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 596.843273] binder: BINDER_SET_CONTEXT_MGR already set [ 596.882610] binder: 16240:16256 ioctl 40046207 0 returned -16 [ 596.899364] binder: 16264:16265 unknown command 0 [ 596.923328] binder_alloc: 16240: binder_alloc_buf, no vma [ 596.927812] binder: 16264:16265 ioctl c0306201 20000380 returned -22 [ 596.928981] binder: 16240:16275 transaction failed 29189/-3, size 0-7493989779944505344 line 2967 15:26:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe209, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:06 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:06 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006c0fe001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xc630000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x6], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:06 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x7000000, 0x0) 15:26:06 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 597.018443] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.024078] binder: undelivered TRANSACTION_ERROR: 29189 [ 597.082138] binder: 16292:16300 unknown command 0 15:26:06 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060060001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:06 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x300000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 597.111660] binder: 16303:16304 transaction failed 29201/-22, size 0-57865 line 2967 [ 597.129928] binder: 16292:16300 ioctl c0306201 20000380 returned -22 15:26:07 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x6, 0x0) 15:26:07 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 597.166764] binder: 16292:16300 unknown command 0 [ 597.178060] binder: BINDER_SET_CONTEXT_MGR already set [ 597.203592] binder: 16292:16300 ioctl c0306201 20000380 returned -22 15:26:07 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060005001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x100000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 597.230136] binder: 16303:16311 ioctl 40046207 0 returned -16 [ 597.288344] binder_alloc: 16303: binder_alloc_buf, no vma [ 597.294019] binder: 16303:16320 transaction failed 29189/-3, size 0-57865 line 2967 15:26:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x9631040}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:07 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:07 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006fec0001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x48, 0x0) [ 597.390471] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.396110] binder: undelivered TRANSACTION_ERROR: 29189 15:26:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xff00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 597.431261] binder: 16348:16352 unknown command 0 15:26:07 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:07 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060300001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:07 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 597.461482] binder: 16359:16360 transaction failed 29201/-22, size 0-7 line 2967 [ 597.484843] binder: 16348:16352 ioctl c0306201 20000380 returned -22 15:26:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x3000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 597.534454] binder: BINDER_SET_CONTEXT_MGR already set 15:26:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x6c00000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x4c00000000000000, 0x0) [ 597.563809] binder: 16359:16368 ioctl 40046207 0 returned -16 15:26:07 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006a901001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:07 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 597.624732] binder_alloc: 16359: binder_alloc_buf, no vma [ 597.630481] binder: 16359:16387 transaction failed 29189/-3, size 0-7 line 2967 [ 597.639407] binder: 16384:16386 unknown command 0 [ 597.668682] binder: 16384:16386 ioctl c0306201 20000380 returned -22 15:26:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:07 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x6000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:07 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060040001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x7400}}], 0x0, 0x0, &(0x7f0000000640)}) [ 597.729181] binder: undelivered TRANSACTION_ERROR: 29201 [ 597.734718] binder: undelivered TRANSACTION_ERROR: 29189 15:26:07 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x68000000, 0x0) [ 597.811290] binder: 16411:16412 unknown command 0 15:26:07 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006fe80001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:07 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 597.832678] binder: 16418:16421 transaction failed 29201/-22, size 0-7782220156096217088 line 2967 [ 597.858133] binder: 16411:16412 ioctl c0306201 20000380 returned -22 15:26:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x300], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x600000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) [ 597.910127] binder: BINDER_SET_CONTEXT_MGR already set [ 597.952223] binder: 16418:16429 ioctl 40046207 0 returned -16 [ 597.963502] binder: 16440:16445 unknown command 0 15:26:07 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c000600ff001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:07 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a75841269"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:07 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 597.996130] binder: 16440:16445 ioctl c0306201 20000380 returned -22 [ 598.005504] binder_alloc: 16418: binder_alloc_buf, no vma [ 598.011138] binder: 16418:16429 transaction failed 29189/-3, size 0-7782220156096217088 line 2967 15:26:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xf630c40}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:07 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xdc05], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:07 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x3000000, 0x0) 15:26:07 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060800001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 598.097734] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.103448] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.160875] binder: 16473:16474 unknown command 0 15:26:08 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:08 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:08 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00066800001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 598.188350] binder: 16473:16474 ioctl c0306201 20000380 returned -22 15:26:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xbb8], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 598.233172] binder: 16482:16484 transaction failed 29201/-22, size 0-50331648 line 2967 15:26:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x3630840}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:08 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000007fffffe00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 598.320645] binder: BINDER_SET_CONTEXT_MGR already set 15:26:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x6c00, 0x0) 15:26:08 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00066c00001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfe80000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 598.351311] binder_alloc: 16482: binder_alloc_buf, no vma [ 598.354819] binder: 16482:16502 ioctl 40046207 0 returned -16 [ 598.356944] binder: 16482:16508 transaction failed 29189/-3, size 0-50331648 line 2967 [ 598.376327] binder: 16503:16504 unknown command 0 [ 598.394559] binder: 16503:16504 ioctl c0306201 20000380 returned -22 [ 598.446947] binder: 16503:16504 unknown command 0 [ 598.458138] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.463783] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.473490] binder: 16503:16504 ioctl c0306201 20000380 returned -22 15:26:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:08 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006003f001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:08 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:08 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x4000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x6800000000000000, 0x0) [ 598.580743] binder: 16538:16539 unknown command 0 15:26:08 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006000a001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 598.602740] binder: 16546:16547 transaction failed 29201/-22, size 0-26624 line 2967 [ 598.616817] binder: 16538:16539 ioctl c0306201 20000380 returned -22 15:26:08 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 598.654197] binder: BINDER_SET_CONTEXT_MGR already set 15:26:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xff00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x6800}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:08 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 598.684535] binder_alloc: 16546: binder_alloc_buf, no vma [ 598.687385] binder: 16546:16552 ioctl 40046207 0 returned -16 [ 598.690206] binder: 16546:16556 transaction failed 29189/-3, size 0-26624 line 2967 15:26:08 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c000600f0001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 598.764452] binder: 16571:16572 unknown command 0 [ 598.774817] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.780352] binder: undelivered TRANSACTION_ERROR: 29189 15:26:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe109, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:08 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xb80b], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xfeffffff00000000, 0x0) [ 598.820230] binder: 16571:16572 ioctl c0306201 20000380 returned -22 15:26:08 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060009001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:08 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="bc04000052f2ac73d2843e6888324f2c9875e5670cd6d70b30acf677462fcf1d8361d26f71f8f0a124b0cc2419cfb10a19f6d39b6030c2c7bdb77d12e9f3c0311e4cc66173f4a60a8f554a200ef06d0e1fdd1d5a1033cce3cadc74cd16a4e92c458dffbf587b195e27688a390245e4770a76c529fd98ab59fc40d5979eb63a9abc90f9efa5151228c787908d2f84ea8f3f2dfccf6ff562c92a3eec45c946f5b1ea3ef70cb1e47656cb54e65b746cf5bd402f588e4fd77f7c32caee44b9a4f658af47b69f1ed79c5ce1a82dec1f9f8b434da68acc9a25b4bfe18a014e6f154bc02cf1389e68e7fd36a19e888c940dc0c0de1db3370b16cef2e28d7e2da8ea6a9310760b20844633c78a36c7a3a8e99d43b5b9f466dacc027193fc90a374461cf4c270441db1f4660e864b203dbae79ddf19cf0df72af72fd0addd1515f9381b3bf773de0781bf77c739d5e4eaee4af2e9616f9d9f688e036c3bac0e5166eb90971d22c2c265f393a5342e249816dfed70aeef1138912da6c5f13bf8afb0362fa2d59f27c842169e0ad1f415c9efa263a1a3a6e3849b2f988d6828cad122508df65d3e728c4e061e86abdbce2ec90ecfc736417db69c8c6fd4794f261c97e2eaf69857e27309fae3815a032cf705a3decb6b944b96ae02ede75f51efd547d9518cb2e9633177d5c5d9cb618dd9a469bc42e7c4a0881c4c90ab2158f868615b5aa4cb93f336a70424371abfba32340a32e80ad983f460a2872aedb714d1ef79bc4a9149bd135232fae3425d32c9329da7b83a2f220ccc259770e87a8ffd8336e7cf875628af8d19838331e93987117f91486824e2fa38ac867de54afe9c598a7584126905c75df0921401d6f17a149684b518290d028ace983cfec3512aa66ac7e5fc71d2815a833081cecb76bd60117eb0d481ed6a075679413928e2b348d9c18f5eacd47a9983c01be9e8621f3273de813a15543600d632b5eb973c038928627c59f46d5d81df0cb453e0c2309acbae403d9a5c6483f0acc12ab46eefdf1e5a326991baafb8d326da9eef18b7a756209a1aa680ded1526d92a35b0008c3d6c84f610bc24cc4f7dca4b44d8aa977eeae2941ba203a937e792486cf6042bd0e19478edff047dfed57afa324e73318a2b3f37866205aaa350c94a78918188a1843a88f6573dba01c54d9db88d30a3ce7992f52761477b8b4b969fcdb789aee1abcf2b9457080c640027312c8c823fa2d38bc948594d2821e88dda0aada9a51203bc3ff4b850f7268605264c41641e078a88bd359499a9e38bc77afbc466fcd1631a539f649ae9935f08a096fe47dae75d4f104aec452277bce963cfe7753c01d1786b7bec4bf23e900666e9203d97bdcd234b33a5f911e2e939425c3f5aabf25d4d7f9896e11e1e1413fe91e20454e92dd39c0016fe728c6d02d3b07d944604acae6e57064ef6151e7fe956ddfdc671cab26245bb8b345f963a4bfcef2c0250f50b7a17d918cf5ac4e6cd14281"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 598.879415] binder: 16582:16586 transaction failed 29201/-22, size 0-57609 line 2967 15:26:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x3}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:08 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c000680fe001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:08 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000feffff0700", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 598.951492] binder: BINDER_SET_CONTEXT_MGR already set [ 598.963100] binder: 16582:16601 ioctl 40046207 0 returned -16 [ 598.991533] binder_alloc: 16582: binder_alloc_buf, no vma 15:26:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 598.997262] binder: 16582:16607 transaction failed 29189/-3, size 0-57609 line 2967 [ 599.021621] binder: 16612:16613 unknown command 0 15:26:08 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xdc05000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:08 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006004c001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:08 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x3f00000000000000, 0x0) [ 599.060595] binder: 16612:16613 ioctl c0306201 20000380 returned -22 [ 599.100396] binder: undelivered TRANSACTION_ERROR: 29201 15:26:08 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 599.105965] binder: undelivered TRANSACTION_ERROR: 29189 15:26:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0xe109, 0x0, &(0x7f0000000640)}) 15:26:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x700000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:09 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000000300150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x400000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:09 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000000ffffffff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 599.250035] binder: 16647:16648 unknown command 0 [ 599.259924] binder: 16646:16651 transaction failed 29201/-22, size 0-0 line 2967 [ 599.287093] binder: 16647:16648 ioctl c0306201 20000380 returned -22 15:26:09 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:09 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000002d00150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 599.299303] binder: BINDER_SET_CONTEXT_MGR already set 15:26:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1000000, 0x0) 15:26:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x0, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 599.325104] binder: 16646:16657 ioctl 40046207 0 returned -16 [ 599.354309] binder: 16647:16648 unknown command 0 15:26:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xb80b0000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:09 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:09 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006fc00001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 599.370048] binder_alloc: 16646: binder_alloc_buf, no vma [ 599.378889] binder: 16646:16664 transaction failed 29189/-3, size 0-0 line 2967 [ 599.400938] binder: 16647:16648 ioctl c0306201 20000380 returned -22 15:26:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x1000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x0, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xa00], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 599.502235] kauditd_printk_skb: 7089 callbacks suppressed [ 599.502246] audit: type=1326 audit(599.501:46713): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 599.527357] audit: type=1326 audit(599.495:46704): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 599.546769] audit: type=1326 audit(599.514:46714): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 599.547076] binder: 16694:16695 unknown command 0 [ 599.566268] audit: type=1326 audit(599.514:46715): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 599.590492] audit: type=1326 audit(599.514:46716): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 599.609881] audit: type=1326 audit(599.514:46717): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 599.629314] audit: type=1326 audit(599.514:46718): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:26:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x60, 0x0, &(0x7f0000000640)}) 15:26:09 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:09 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "00000000000000000600", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x0, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x2) 15:26:09 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00061000001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 599.648709] audit: type=1326 audit(599.514:46719): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 599.654963] binder: 16694:16695 ioctl c0306201 20000380 returned -22 [ 599.668280] audit: type=1326 audit(599.514:46720): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 15:26:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 599.668297] audit: type=1326 audit(599.514:46721): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16673 comm="syz-executor7" exe="/root/syz-executor7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x455a79 code=0x50000 [ 599.737701] binder: 16711:16713 transaction failed 29201/-22, size 0-0 line 2967 15:26:09 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060900001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x3], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:09 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000000000200", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 599.768646] binder: BINDER_SET_CONTEXT_MGR already set 15:26:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xb63}}], 0x0, 0x0, &(0x7f0000000640)}) [ 599.802205] binder: 16711:16720 ioctl 40046207 0 returned -16 15:26:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0xfeffffff) 15:26:09 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:09 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006000b001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:09 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000000000100", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 599.861508] binder_alloc: 16711: binder_alloc_buf, no vma [ 599.867228] binder: 16711:16736 transaction failed 29189/-3, size 0-0 line 2967 [ 599.890596] binder: 16740:16741 unknown command 0 [ 599.901320] binder: 16740:16741 ioctl c0306201 20000380 returned -22 15:26:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x9e1, 0x0, &(0x7f0000000640)}) 15:26:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x80fe], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x4c}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:09 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006000f001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 15:26:09 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x2], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 600.038568] binder: 16766:16767 unknown command 0 [ 600.039818] binder: 16765:16768 transaction failed 29201/-22, size 0-0 line 2967 [ 600.064154] binder: 16766:16767 ioctl c0306201 20000380 returned -22 15:26:09 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x3f000000) 15:26:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x4c00000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:10 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:10 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c0006006c001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 600.139308] binder: BINDER_SET_CONTEXT_MGR already set [ 600.178488] binder: 16765:16780 ioctl 40046207 0 returned -16 [ 600.186870] binder: 16787:16788 unknown command 0 15:26:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc00000000000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x0, &(0x7f0000004fe8)}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:10 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060858001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 600.219432] binder_alloc: 16765: binder_alloc_buf, no vma [ 600.225153] binder: 16765:16780 transaction failed 29189/-3, size 0-0 line 2967 [ 600.248734] binder: 16787:16788 ioctl c0306201 20000380 returned -22 15:26:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0x6800000000000000, 0x0, &(0x7f0000000640)}) 15:26:10 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x0, &(0x7f0000004fe8)}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc000000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x12000000}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:10 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x3000000) 15:26:10 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060074001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 600.400510] binder: 16826:16827 unknown command 0 [ 600.418423] binder: 16815:16818 transaction failed 29201/-22, size 0-0 line 2967 15:26:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x0, &(0x7f0000004fe8)}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:10 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 600.468152] binder: 16826:16827 ioctl c0306201 20000380 returned -22 [ 600.496943] binder: BINDER_SET_CONTEXT_MGR already set 15:26:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xdc050000], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:10 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00065908001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 600.525873] binder_alloc: 16815: binder_alloc_buf, no vma [ 600.531099] binder: 16815:16841 ioctl 40046207 0 returned -16 [ 600.531519] binder: 16815:16845 transaction failed 29189/-3, size 0-0 line 2967 [ 600.545659] binder: 16826:16827 unknown command 0 15:26:10 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x0, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0x2}}], 0x0, 0x0, &(0x7f0000000640)}) 15:26:10 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "000000000000ff00", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) [ 600.582149] binder: 16826:16827 ioctl c0306201 20000380 returned -22 15:26:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xfffffffffffffffe}}], 0xa000000, 0x0, &(0x7f0000000640)}) 15:26:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x3f00000000000000) 15:26:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x4], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) [ 600.664632] binder: 16865:16867 unknown command 0 15:26:10 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060857001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 600.716584] binder: 16865:16867 ioctl c0306201 20000380 returned -22 15:26:10 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00\x00\x00\x00\x00\x00@\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x0, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 15:26:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x5, &(0x7f0000000480)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140)}, 0xb63000000000000}}], 0x0, 0x0, &(0x7f0000000640)}) [ 600.757207] binder: 16882:16883 transaction failed 29201/-22, size 0-0 line 2967 15:26:10 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}]}, &(0x7f00000001c0)=0x10) connect$inet6(r0, &(0x7f00006f7000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x5dc], [0xff, 0xff], @rand_addr=0xfffffffffffffffb}}, 0x1c) 15:26:10 executing program 6: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x6}, &(0x7f0000000a80)=0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000fc0)="6440c9d479221c342ba8308b834ee39ab5a10dd690bf9510945c90d9a6129bdcf7307e0a63ca7ab39c2ba4114153ef6c2181f7ba238c27d1e7bc7fa1df99c310952bf1ed989add001316dd5a6bf07acedc1abbd0a5fc", 0x56}], 0x1, &(0x7f0000002040)}], 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:26:10 executing program 5: memfd_create(&(0x7f0000000100)='\x00', 0x0) r0 = socket$inet6(0xa, 0x1800000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00064800001900150004000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 600.822322] binder: BINDER_SET_CONTEXT_MGR already set [ 600.839191] binder: 16882:16896 ioctl 40046207 0 returned -16 15:26:10 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2}}, [0x0, 0x0, 0x3ff, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x1ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000280)=0x20) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, "0000000000000000000000009000", 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1=0xe0000001, 0x0, @loopback=0x7f000001, 0x0, @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffd}}}]}, @arpreply={'arpreply\x00', 0x10, {{@random="12c72ebf2945", 0xfffffffffffffffd}}}}]}]}, 0x278) 15:26:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0xfeffffff00000000) 15:26:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x0, 0x0, 0x0, 0x50000}]}) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') [ 600.874193] binder: 16903:16905 unknown command 0 [ 600.900981] binder_alloc: 16882: binder_alloc_buf, no vma [ 600.906721] binder: 16882:16896 transaction failed 29189/-3, size 0-0 line 2967 [ 600.915881] binder: 16903:16905 ioctl c0306201 20000380 returned -22 [ 630.067076] list_add corruption. prev->next should be next (ffff8801dae26708), but was 0000000000000000. (prev=ffff8801dae26740). [ 630.079123] ------------[ cut here ]------------ [ 630.083977] kernel BUG at lib/list_debug.c:28! [ 630.088665] invalid opcode: 0000 [#1] SMP KASAN [ 630.093318] CPU: 0 PID: 16904 Comm: syz-executor3 Not tainted 4.18.0-rc4-next-20180712+ #5 [ 630.101700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.111055] RIP: 0010:__list_add_valid.cold.0+0x23/0x25 [ 630.116394] Code: e8 2f 0e 57 fe eb 97 48 89 d9 48 c7 c7 e0 89 1a 88 e8 02 45 ff fd 0f 0b 48 89 f1 48 c7 c7 a0 8a 1a 88 48 89 de e8 ee 44 ff fd <0f> 0b 4c 89 e2 48 89 de 48 c7 c7 e0 8b 1a 88 e8 da 44 ff fd 0f 0b [ 630.135667] RSP: 0018:ffff8801dae079c0 EFLAGS: 00010086 [ 630.141017] RAX: 0000000000000075 RBX: ffff8801dae26708 RCX: 0000000000000000 [ 630.148287] RDX: 0000000000000000 RSI: ffffffff81634151 RDI: 0000000000000001 [ 630.155544] RBP: ffff8801dae079d8 R08: ffff8801c9fea240 R09: ffffed003b5c4fc0 [ 630.162809] R10: ffffed003b5c4fc0 R11: ffff8801dae27e07 R12: ffff8801dae26740 [ 630.170072] R13: ffff8801dae07ab8 R14: ffff8801dae26740 R15: 0000000000000001 [ 630.177330] FS: 0000000001a6d940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 630.185550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.191428] CR2: 000000000119cfd0 CR3: 00000001ab858000 CR4: 00000000001426f0 [ 630.198772] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 630.206036] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 630.213292] Call Trace: [ 630.215859] [ 630.217998] ? cpu_stop_queue_work+0x114/0x460 [ 630.222569] cpu_stop_queue_work+0x248/0x460 [ 630.226976] ? cpu_stop_park+0x160/0x160 [ 630.231026] ? trace_hardirqs_off+0xd/0x10 [ 630.235247] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 630.240363] ? kasan_check_read+0x11/0x20 [ 630.244497] ? do_raw_spin_unlock+0xa7/0x2f0 [ 630.248893] ? touch_softlockup_watchdog+0x30/0x30 [ 630.253817] stop_one_cpu_nowait+0xd3/0x100 [ 630.258123] watchdog_timer_fn+0x93/0x2e0 [ 630.262260] __hrtimer_run_queues+0x3eb/0x10c0 [ 630.266839] ? softlockup_fn+0x30/0x30 [ 630.270718] ? hrtimer_start_range_ns+0xd20/0xd20 [ 630.275555] ? pvclock_read_flags+0x160/0x160 [ 630.280048] ? kvm_clock_read+0x25/0x30 [ 630.284013] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 630.289017] ? ktime_get_update_offsets_now+0x3db/0x5d0 [ 630.294369] ? do_timer+0x50/0x50 [ 630.297894] ? kasan_check_read+0x11/0x20 [ 630.302035] ? rcu_nmi_exit+0xe0/0x2d0 [ 630.305922] ? do_raw_spin_lock+0xc1/0x200 [ 630.310146] hrtimer_interrupt+0x2f3/0x750 [ 630.314381] smp_apic_timer_interrupt+0x165/0x730 [ 630.319214] ? smp_call_function_single_interrupt+0x660/0x660 [ 630.325094] ? _raw_spin_unlock+0x22/0x30 [ 630.329230] ? handle_edge_irq+0x330/0x870 [ 630.333451] ? task_prio+0x50/0x50 [ 630.337003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 630.341835] apic_timer_interrupt+0xf/0x20 [ 630.348719] [ 630.350952] RIP: 0010:smp_call_function_single+0x3ed/0x5c0 [ 630.356554] Code: e8 03 4c 01 e8 c6 00 f8 48 89 44 24 28 e8 2b 43 0c 00 45 85 e4 74 67 48 8b 44 24 28 48 83 c3 18 49 89 c4 e8 05 42 0c 00 f3 90 <48> 89 d8 41 c6 04 24 04 48 c1 e8 03 42 0f b6 04 28 84 c0 74 08 3c [ 630.379473] RSP: 0018:ffff88019add6ee0 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 630.387174] RAX: ffff8801c9fea240 RBX: ffff88019add6f58 RCX: ffffffff81702e4c [ 630.395076] RDX: 0000000000000000 RSI: ffffffff81702dfb RDI: 0000000000000005 [ 630.402334] RBP: ffff88019add7040 R08: ffff8801c9fea240 R09: ffffed003b5e5b28 [ 630.409624] R10: ffffed003b5e5b28 R11: ffff8801daf2d947 R12: ffffed00335badf8 [ 630.416879] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000001 [ 630.424154] ? smp_call_function_single+0x43c/0x5c0 [ 630.429160] ? smp_call_function_single+0x3eb/0x5c0 [ 630.434169] ? rcu_note_context_switch+0x730/0x730 [ 630.439084] ? add_nops+0x90/0x90 [ 630.442536] ? generic_exec_single+0x5e0/0x5e0 [ 630.447106] ? add_nops+0x90/0x90 [ 630.450549] ? kasan_check_write+0x14/0x20 [ 630.454769] ? __mutex_lock+0x6c4/0x1680 [ 630.458820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 630.464345] ? fill_pte+0xd6/0x420 [ 630.467875] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 630.472889] ? find_next_and_bit+0x165/0x1d0 [ 630.477301] smp_call_function_many+0x884/0xa40 [ 630.481964] ? add_nops+0x90/0x90 [ 630.485418] ? __native_set_fixmap+0x49/0x60 [ 630.489831] ? smp_call_function_single_async+0x340/0x340 [ 630.495375] ? __native_set_fixmap+0x60/0x60 [ 630.499772] ? tracepoint_probe_unregister+0xa2/0x8f0 [ 630.504953] ? lock_acquire+0x188/0x540 [ 630.508913] ? add_nops+0x90/0x90 [ 630.512358] ? lock_acquire+0x189/0x540 [ 630.516316] on_each_cpu+0x46/0x1d0 [ 630.519936] ? lock_acquire+0x188/0x540 [ 630.523902] text_poke_bp+0xc0/0x16a [ 630.527615] ? poke_int3_handler+0x90/0x90 [ 630.531840] ? lock_acquire+0x188/0x540 [ 630.535804] __jump_label_transform.isra.0+0x450/0x8b0 [ 630.541069] ? modules_open+0xa0/0xa0 [ 630.544952] ? __mutex_lock+0x6c4/0x1680 [ 630.549003] ? mask_and_ack_8259A.cold.1+0x21/0x21 [ 630.553923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 630.559458] ? jump_label_type+0x132/0x1d0 [ 630.563694] arch_jump_label_transform+0x2f/0x40 [ 630.568435] __jump_label_update+0x16e/0x1a0 [ 630.572831] jump_label_update+0x151/0x2e0 [ 630.577052] __static_key_slow_dec_cpuslocked+0xb8/0x210 [ 630.582504] ? static_key_disable+0x30/0x30 [ 630.586823] static_key_slow_dec+0x63/0xa0 [ 630.591043] tracepoint_probe_unregister+0x739/0x8f0 [ 630.596131] ? perf_event_update_sibling_time.part.66+0x76/0x90 [ 630.602174] ? perf_trace_lock+0x920/0x920 [ 630.606394] ? for_each_kernel_tracepoint+0xb0/0xb0 [ 630.611398] ? perf_trace_lock+0x920/0x920 [ 630.615619] ? free_filters_list+0x300/0x300 [ 630.620018] ? mutex_unlock+0xd/0x10 [ 630.623717] ? perf_event_detach_bpf_prog+0x29c/0x3d0 [ 630.628912] trace_event_reg+0x10c/0x350 [ 630.632961] perf_trace_event_unreg.isra.3+0xbb/0x210 [ 630.638242] perf_trace_destroy+0xc1/0x100 [ 630.642463] ? perf_tp_event_init+0x120/0x120 [ 630.646954] tp_perf_event_destroy+0x15/0x20 [ 630.651347] _free_event+0x414/0x15e0 [ 630.655142] ? ring_buffer_attach+0x840/0x840 [ 630.659644] ? perf_event_release_kernel+0x2e3/0xfc0 [ 630.664757] ? lock_downgrade+0x8f0/0x8f0 [ 630.669008] ? kasan_check_read+0x11/0x20 [ 630.673158] ? do_raw_spin_unlock+0xa7/0x2f0 [ 630.677554] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 630.682152] ? kasan_check_write+0x14/0x20 [ 630.686386] put_event+0x48/0x60 [ 630.689741] perf_event_release_kernel+0x8d1/0xfc0 [ 630.694661] ? put_event+0x60/0x60 [ 630.698188] ? locks_remove_flock+0x40f/0x5f0 [ 630.702674] ? trace_hardirqs_on+0x10/0x10 [ 630.706915] ? lock_acquire+0x1e4/0x540 [ 630.710876] ? locks_remove_file+0x3da/0x590 [ 630.715282] ? lock_downgrade+0x8f0/0x8f0 [ 630.719426] ? kasan_check_read+0x11/0x20 [ 630.723570] ? do_raw_spin_unlock+0xa7/0x2f0 [ 630.727961] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 630.732529] ? locks_check_ctx_file_list+0xdd/0x120 [ 630.737530] ? kasan_check_write+0x14/0x20 [ 630.741757] ? do_raw_spin_lock+0xc1/0x200 [ 630.745984] ? _raw_spin_unlock+0x22/0x30 [ 630.750118] ? locks_remove_file+0x3df/0x590 [ 630.754518] ? fcntl_setlk+0x1010/0x1010 [ 630.758666] ? blkcg_maybe_throttle_current+0xa1b/0x1040 [ 630.764107] ? fsnotify_first_mark+0x350/0x350 [ 630.768674] ? __fsnotify_parent+0xcc/0x420 [ 630.773071] ? fsnotify+0x14e0/0x14e0 [ 630.776867] ? perf_event_release_kernel+0xfc0/0xfc0 [ 630.781954] perf_release+0x37/0x50 [ 630.785566] __fput+0x35d/0x930 [ 630.788842] ? fput+0x1a0/0x1a0 [ 630.792118] ? kasan_check_write+0x14/0x20 [ 630.796337] ? do_raw_spin_lock+0xc1/0x200 [ 630.800559] ____fput+0x15/0x20 [ 630.803825] task_work_run+0x1ec/0x2a0 [ 630.807700] ? task_work_cancel+0x250/0x250 [ 630.812007] ? copy_fd_bitmaps+0x210/0x210 [ 630.816317] exit_to_usermode_loop+0x318/0x380 [ 630.820886] ? syscall_slow_exit_work+0x500/0x500 [ 630.825718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 630.831243] do_syscall_64+0x6be/0x820 [ 630.835124] ? syscall_slow_exit_work+0x500/0x500 [ 630.839957] ? syscall_return_slowpath+0x5e0/0x5e0 [ 630.844876] ? syscall_return_slowpath+0x31d/0x5e0 [ 630.849802] ? prepare_exit_to_usermode+0x291/0x3b0 [ 630.854804] ? perf_trace_sys_enter+0xb10/0xb10 [ 630.859457] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 630.864303] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 630.869476] RIP: 0033:0x40fb51 [ 630.872649] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 630.891920] RSP: 002b:00007ffe16ade650 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 630.899614] RAX: 0000000000000000 RBX: 0000000000000016 RCX: 000000000040fb51 [ 630.906884] RDX: 0000000000000000 RSI: 0000000000731078 RDI: 0000000000000015 [ 630.914140] RBP: 0000000000000013 R08: 00007ffe16ade5d0 R09: 0000000000000000 [ 630.921394] R10: 0000000000000003 R11: 0000000000000293 R12: 0000000000000000 [ 630.928649] R13: 0000000000000000 R14: 00007ffe16aded00 R15: 00000000007034c0 [ 630.935920] Modules linked in: [ 630.939111] Dumping ftrace buffer: [ 630.942640] (ftrace buffer empty) [ 630.946347] ---[ end trace 3ef4903c19900f4b ]--- [ 630.951103] RIP: 0010:__list_add_valid.cold.0+0x23/0x25 [ 630.956451] Code: e8 2f 0e 57 fe eb 97 48 89 d9 48 c7 c7 e0 89 1a 88 e8 02 45 ff fd 0f 0b 48 89 f1 48 c7 c7 a0 8a 1a 88 48 89 de e8 ee 44 ff fd <0f> 0b 4c 89 e2 48 89 de 48 c7 c7 e0 8b 1a 88 e8 da 44 ff fd 0f 0b [ 630.975731] RSP: 0018:ffff8801dae079c0 EFLAGS: 00010086 [ 630.981084] RAX: 0000000000000075 RBX: ffff8801dae26708 RCX: 0000000000000000 [ 630.988429] RDX: 0000000000000000 RSI: ffffffff81634151 RDI: 0000000000000001 [ 630.995685] RBP: ffff8801dae079d8 R08: ffff8801c9fea240 R09: ffffed003b5c4fc0 [ 631.002958] R10: ffffed003b5c4fc0 R11: ffff8801dae27e07 R12: ffff8801dae26740 [ 631.010227] R13: ffff8801dae07ab8 R14: ffff8801dae26740 R15: 0000000000000001 [ 631.017487] FS: 0000000001a6d940(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 631.025695] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.031583] CR2: 000000000119cfd0 CR3: 00000001ab858000 CR4: 00000000001426f0 [ 631.038848] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 631.046239] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 631.053499] Kernel panic - not syncing: Fatal exception in interrupt [ 631.060561] Dumping ftrace buffer: [ 631.064088] (ftrace buffer empty) [ 631.067954] Kernel Offset: disabled [ 631.071566] Rebooting in 86400 seconds..