, 0x7) 03:35:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18, 0x0, 0x6, {0xffe}}, 0xfffffffffffffe4b) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$cont(0x11, r7, 0x9, 0x80) close(r6) r8 = socket(0x840000000002, 0x3, 0x6) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='lo\x00', 0x0, 0x2, 0x6}) r9 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="0be9d80ff35d03c7f44e6deadca0abf01d71d9f74b28ceeeffd77b7ec9b1552dc2bf2ac4f09252d9ddb44f1fa0494d99aeb9b639442e7072c1924a3beb8b2e222b0615ee4f30d6a818dc4a8a28910b9819d6e92630160a58a5b13fa6fbace15335d0de7b77baf1d51f395dcd7e83b6f3a044f9bafa98f7912577a9d3098002259dd9b404541ee6bc44843908045ea78a140e338eab2e677c0557320252642ace6f5ba50b6849efde2462c19dc2a97bfd0ec72e6085"], 0xb5) fallocate(r6, 0x6, 0x8, 0x8020003) lseek(r9, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r11) r12 = geteuid() r13 = geteuid() r14 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r14) r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b80)={&(0x7f0000001b40)='./file0\x00', 0x0, 0x10}, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001f00)={0x0, 0x0}, &(0x7f0000001f40)=0xc) lstat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r18) getresuid(&(0x7f0000002040)=0x0, &(0x7f0000002080), &(0x7f00000020c0)) getresuid(&(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0) r21 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r21) r22 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r22, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r22, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r22, &(0x7f0000000080)=ANY=[@ANYBLOB="0be9d80ff35d03c7f44e6deadca0abf01d71d9f74b28ceeeffd77b7ec9b1552dc2bf2ac4f09252d9ddb44f1fa0494d99aeb9b639442e7072c1924a3beb8b2e222b0615ee4f30d6a818dc4a8a28910b9819d6e92630160a58a5b13fa6fbace15335d0de7b77baf1d51f395dcd7e83b6f3a044f9bafa98f7912577a9d3098002259dd9b404541ee6bc44843908045ea78a140e338eab2e677c0557320252642ace6f5ba50b6849efde2462c19dc2a97bfd0ec72e6085"], 0xb5) fallocate(r22, 0x3, 0x0, 0x8020003) lseek(r22, 0x0, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r24) r25 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r25, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r26) r27 = socket$inet6_tcp(0xa, 0x1, 0x0) r28 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r27, 0x0, r28) r29 = openat$ppp(0xffffffffffffff9c, &(0x7f0000003680)='/dev/ppp\x00', 0x400, 0x0) sendmsg$netlink(r9, &(0x7f0000003740)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x1088802}, 0xc, &(0x7f0000003600)=[{&(0x7f0000000180)={0xa4, 0x14, 0x3929de2cda411659, 0x70bd2c, 0x25dfdbff, "", [@generic="7049856e7b01aab9bba4a8c12c3e0f3ea0835642ae866b1b6afd49674ed05cd3aaf023a41f5bc18ec60ca06890cd2c44ebb17958500d3d0135e79377982d905aac168fcdcecee8a68f0220fd5eccc64dfabb82c8169e2636d99bc42383687bcb1e1f15593bdc9417bf4734214770bbc8e4abbf2994a79b478e96d34a313a30d8ced23ef954163a014db8a63080a26f3c61e1c6cd"]}, 0xa4}, {&(0x7f0000000240)={0x2cc, 0x33, 0x4, 0x70bd29, 0x25dfdbff, "", [@nested={0x2a0, 0x45, [@generic="ba089247945d0836033553d2e635c3575a8a5372944f20cf290475b95313bfaf261f8efb46eca94eaa2b24f409bb35d037561bfbb2ffb26fd81b48466e6858ba2b2dbca91e3f19dee873c6b0ee7ca51af188bf2fb2d150d1fe1f2bb88261fd5c51080c033d54791a81582fb7feadf3271d5a2fee8bacbdb5bcb382f219cb24b645451e0259f2f96f2b5db9637c0fb3d05df2afc14fc12d059fd6984a55a73119f7ad35b0e4f7d5333564e49c9aa1", @typed={0x8, 0x8f, @str='lo\x00'}, @typed={0x14, 0xd, @ipv6=@mcast2}, @generic, @generic="feeb85ffbb4df0ee58b6d857d4b52bf5bdf672fda18295f649422d787cd5bf4dff0e66eddd0f45b4bde20093d799805ddbc33bf236c58d6351134627f741132364e953fe949d0c8537781f7b5191f6e2d6bf1509e0e6e24c2a785fbcf75118588b4d570ef85f4f0258a768aa6531a4110cd80627e3b228c361ec460045a5fc392658465ac6aeca2f8b2035bafce8f24853c0be2e33c030fc1f8f06d77afd0f1d44dc626f425f6a7d05d1ff50551c2e8c242a04fc14a42f5baf4315d429cf6d7ae008c0cc268eadd8161727b99a6950c958922f6b9651f4a220b655c00ab3731bd74304104cd9", @generic="44ee857b2c75e4eb4fb8049e3519068c92f49b6b8b7687dfd95d3589995d9a65a9d18c370185abf33becbae74ec4881be911846d6383fac4a69d02ffc17ff4c3108f2734fe9ed6eb25443f88a133c91d39ae1eb3edf2bc3970dbfa3a6ae6d4d40ddc2bd2b66aa8caff31e29568e73dc06851ee4d908b4bf811c062c1871663ee9ab5c09dbd1e7e869ac3f7dbff0f80240b6af186664c36ea7c90f42915652fcb5143556ed605f330fa50ed0980b65d76207e3df0ff1e451b39f681858e4b836eb3de27a7a40185d797f0211e697ff8784cbda99e004753812ee63acd4cfb4a576142c74402ebb5c04f7018"]}, @nested={0x14, 0x28, [@generic="d58587dab3d2d288a69208d39fd4", @generic='l']}, @typed={0x8, 0x29, @uid=r11}]}, 0x2cc}, {&(0x7f0000000540)={0x12c4, 0x2c, 0x371e1d63e87be555, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x168, 0x88, [@generic="57d0ceb1c2642b2a9b0c0675375b45f9d15d7208cd565cd588514f005d04ac648f3e28d86b21e4ba3c0eb0e45c34a0e3ae7c6a22c560614a48d94a41c4638a4872078d2f12ca1fa56574f995b882ec5e77a7c5096e20f27b01ea01e3c02aa960fe411fb893c5b926f0431e99f767587f36c57e17eeab1c616763a2647701358464e6a254cee7fb969afba9b70908144744e59786520769039245791cda1a4619530c9b9a0ef597b0cf49a2090f3f29c045a6bc5c54f7a13da205114a196c821766b6c397895a39051734", @typed={0x8, 0x6, @str='lo\x00'}, @generic="fe6867a651cd8138c4d243d9b29c9a5874e1ad4c5fc10ad617899f7bc2dd43148c0d7e5957ae0f909e3ea923856c4bc1f7f563cddb71345710dc9da8ca657a9ef3475a253df3fa06b071d182c1d62557740ba0d3a2aeb93c95d2b837784344ce855318bdbd62938dd48ed625868546e06a2767046d6bb294b622e7cf5735d47c3c57ef38d90d4a45523e251b8b576d8f9a"]}, @generic="a5be61503cd4a099194ddd92edfd22bab512862dea471581a317d10f27d528f05c6697108b44d314cc2b539b71a860a043a7ec5caf04edb4d4ecfe2c6a72829522", @nested={0x1108, 0x58, [@generic="4a66d58f87fdfd4ed4d15cbeb46b5c31d093dbf88664e7344938d5741844c4c536a4", @generic="6703d6cecec87ee0370a3654a60d0094ba0533a21b594dd8a8d90a0fb5c4c7c6bbf3bcf6953a313cb7c37628cedab473dc06768f7c89fe741c663ff8fb983819cb806f854049df49c4e7992e0eb03da30364cdd307338e05bc7631bbea69f68c909c5f0348be9201cb72eba2a76540d6b3953c9294ef9d860acff5b5e7f1bfd43c1c74f8e24d82db5dab0bd88151c0964c15189baf13ae6ddb58cb944632d280ce96cd72218edca7ca3139c78de0d13620354c8d", @typed={0x14, 0x9, @ipv6=@ipv4={[], [], @multicast1}}, @typed={0x14, 0x1f, @ipv6=@ipv4={[], [], @rand_addr=0x2}}, @typed={0x1004, 0x9, @binary="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"}]}]}, 0x12c4}, {&(0x7f0000001840)={0x298, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, "", [@typed={0xc2, 0x75, @uid=0xffffffffffffffff}, @typed={0xc, 0x18, @u64=0x4}, @typed={0x8, 0x0, @fd=r6}, @typed={0x8, 0x41, @u32=0x10000}, @nested={0x90, 0x36, [@generic="467ed2d1b8d4275d5df460c09087dbf1c134062f06ade9b51ae586e19f2efa2b2705f62b27d5409d0e31a359a975e3a9157e25eaa729d8586603f660f8ea251176798c4826021e55a69277c064ff4241f6b1ed5b3ea02e1188fee765f6a15edbdcdfcbbc4db8dacf4eb650800be304ed958312f8ed98dcf36d3cddfcca5596e1097b55eeb0a7064018b9c4"]}, @nested={0x1cc, 0x19, [@typed={0x8, 0x4a, @uid=r12}, @generic="dba87992ef6cc34976a2f5c3be1872183b32a816d6185f39ac1181292243e24d119e6de91cdfdb10223ff861f6fbabdcd107747adceb303463991404f084a28955f98c", @typed={0xe0, 0x3a, @binary="a80bd540486a8e2cf8aae4dc2b21a68b012d130e53849087529417906ef89d8719310ea2bcbeb7110b5e2e467758f3e7a43b262cea617b112c077ed1ed1148a79986c3ba2a374b7fe6bdc28580975ad9b4d006a0e3bf345f5187d49e205b3900b98a042770756ab860563773713f5b152966234d9118040e0004661014f64ce77f4c622742e34a3ea4de126b9652e3e471d30fd6c6ef4d91d0448d8640df4806a9f61f1f0a2271b7e1cc553254a3a413e33e428bb5b42a7200a44ac4b9b2ddcc40550ba78fbdf998d0b1119fb6fb25b7cff17c16ac3832d30fc5"}, @generic="94dd07cbc3", @generic="c8a0e0c31f1456a470fef027719b773973bf4d519ee28d25d3f6e0fe01f7ccf961059691cecf396cf99c023964129fc1dc4b31d3926c956ea46d770ad510e7fbbfae0802b4ee07b066c27a713479c4deb374f0661694998b4f4fdd809cb02002b14cc012dd982f745035d6c55af3c6590897ab8b", @typed={0x1c, 0x6c, @str='bdevkeyring!vboxnet1/!\\\x00'}, @typed={0x8, 0x20, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}]}, @typed={0x8, 0x3f, @uid=r13}]}, 0x298}, {&(0x7f0000001b00)={0x14, 0x29, 0x400, 0x70bd27, 0x25dfdbfc, "", [@typed={0x4, 0x76}]}, 0x14}, {&(0x7f0000001bc0)={0x31c, 0x2d, 0x2, 0x70bd2b, 0x25dfdbfd, "", [@generic="ccb873c9391a2d8c44e02947d9d680e5e5c0003fcbae29c6b8e228e83d6e57503abba77a8abb66244e0d33c492f8856bb53e6c0d2975da3b85dee41495b7b287bb89a943f904da9bbf2a42ac4ffdac119f4c78a8f3a0c9e4a954ff2b988a0ff2d8327929275a59896febd9d094364a2adde19a9b3c31e7348f5570a0b5ae8222dcd512c2baffd5a8da1cbe88b5588226473cc7306e203c76e089772ea981298deac74204393ae388cced2bffeba27fc086fed20fb73781f46d62aa9f4253dbee2c9e933c8f27712a38355e598bf937bb261b31d285e92f55fb8753537fd6841bba6676d0fe6d18c19b95", @typed={0x8, 0x35, @ipv4=@multicast2}, @nested={0x20, 0x33, [@typed={0x8, 0x58, @pid=r14}, @typed={0x8, 0x6c, @str='lo\x00'}, @generic="1a463314c49ed25e9059"]}, @typed={0x8, 0x5f, @ipv4=@empty}, @nested={0x1f0, 0x8d, [@typed={0x14, 0x87, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, @generic, @generic="6b4ed44206e78d4e56d66174796fc93d65ff3ccb0eef72b1cc54cf303655e502eb8328667b1195c5035f9d251ae08a78a26b19cf00ba693b748fdf6788726c6ec11610861c9aefa1783bc7954417b65eee90c3186ff71f9ecbc9eaabf61ebc811c1dca0892b8aa0558b5e8fe2d0a9060882cf6364a524a76a7b123d6f9344e9d18edfabac7b2fb8714ca5f424dbd7b6413b3fdc0345affa22820a37a9d1b67a79e57ea418bbc314d42e509c97ca275692945eeb27246a1ff60b1c218757c25310240a09eb512", @typed={0x14, 0x68, @str='security%bdev\x00'}, @generic="1e2b9fd861e35c5cfb3469a5029a79b101fc7bceeb89b4635b8621f8408c533adb823838e02120730aee965566cb0159fe937c2d2ec9deb8e88b876061b960c46d617275217a158d7f74ec97433127c51fbd9aa2c9f8a548a340547c1da461ee70ec75f547c3d4ffd8bfccab9ad87892d62dff2dffa81df818d423d76f784311aef34ae92c1994345e39b8d29b3799e6f3e604ae378c04e5544458a7da443119156f6f7d39c5202b709f0fa1e64c23bb1fd9e79ec096faf9684d88690985aa606d7b25060a3f3646e9ebf2558a253078ade681aed1d7e5be1465c4a49882fbb03fdf20fe71171b10be6bcd907fb60f0e4df604", @typed={0x8, 0x6f, @fd=r15}]}]}, 0x31c}, {&(0x7f00000021c0)={0x13c4, 0x3d, 0x200, 0x70bd25, 0x25dfdbfc, "", [@nested={0x70, 0x72, [@typed={0x8, 0x37, @uid=r16}, @typed={0x8, 0x3e, @uid=r17}, @typed={0x4, 0x36}, @generic="9742e6b5a2dc3fbceb4621f3b5c1909fe4e1ab7006148df673ce7a499c4738b5a811eabf58d99eca61882d69ef278039856a1c4d80c0cc510844f26a728765bdd4852f3f7038a20094bb5007971452bae5d1305f04"]}, @typed={0x8, 0x22, @pid=r18}, @nested={0x1214, 0x85, [@typed={0x8, 0x7d, @u32=0x4}, @generic="1f541d8f96cb743e67b000c6d056bf03baf8e54f943733c9f4d0d1bde28c5abfe03b08a2a2f47904fa8e2c35b3b692053cf58f8d89bae62eaf3c102f927a26e0097b8ec83cf2bbc1c7129a", @typed={0x8, 0x37, @uid=r19}, @generic="4c302e1b34a1b584f944b21874f7aa07b0d18b3aede4ec2306a53696f505dace754ae1a22f1ce3adb1d4fa8c14f6767cef920e968f10d2283093d4454c174fc8ca1f4f7d53f4cfc0c279cc128eb85e78c5002fae49b54a5a225be2882a2c85665075b162df0a23a4599f1635fa85187b610371a931e5a88625250c0b36ecf5afcf983252956977be8ebd672ba2c141d26fbb347ea7d218559e4e57637ccd7e45cfdd088919b5cf4d854f33aa8eecc9a027b44830a20f37940d08afc52d9da2bc0cbc", @typed={0x8, 0x53, @uid=r20}, @typed={0x8, 0x3e, @fd=r6}, @generic="3930e19274d67c04a15ee60e840b4433559865f64b7ff4be9ee53802ff574d46164a54d3fd4ca74a5a5a237796e88b91f34890e2162ebf4d920bc33a3a723544332129cca5d6a163d6d8ca3ba960fb454740dc7f2e832c36d8f7440cf0c56d98102104f858ab722f4b193710ace7dd3d686ccd2e766cea2fb3cd4dbf376ab6498ab2ff1e5c45cb0c44f40e562ff3b239f1380126bccfc049a49f02835f100a565de90ac381d37b1745c3e02daad927b4fb2c2b794b437901382016ecab0d9fb7bea7a2a6437ad4e6db742cc24e", @typed={0xc, 0xe, @u64=0x6b9}, @typed={0x8, 0x62, @str='lo\x00'}, @generic="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"]}, @nested={0x100, 0x0, [@typed={0x80, 0x23, @binary="ce877d03ea3a753ec2db9b79873db8c3b104505a8b808ad63fcf42f6822378396ea8c65ef3d2e8e9de97e04e886203073a9ce50787d56f6999809f979ff5a597faa74772fb8b259758e1a4871c00fe65f29f39bd732993b2261aa6d2998342ec9d322a903c9ffc303a807f1299620cff0bb20a460fde3b817c71"}, @typed={0xc, 0x51, @u64=0x4}, @generic="4ffcd36e095650a9c8ab9deeb22a4e30d9fcc7fa81f52cc9df009150979e410b7479d12330cd269337bf61686227b554e131236484faea57eeda83", @typed={0x34, 0x5f, @binary="9d8a9036d7d5e2ab7df26a70c82a1243f2ca6f48401be3057ba764f82db628c73c67be4755666c2a416621985a23"}]}, @generic="47005d9e9029e94f0fcbed3bdd842f3c2853a5ad5547f464a03d20f56428788b", @typed={0x8, 0x13, @pid=r21}]}, 0x13c4}, {&(0x7f00000035c0)={0x3c, 0x40, 0x100, 0x70bd25, 0x25dfdbff, "", [@nested={0x2c, 0x54, [@generic="e205875b4cbdd0f6ebd243a8754a05c577aba9d611e76f0488296bd11e102196c4659cfb4b"]}]}, 0x3c}], 0x8, &(0x7f00000036c0)=[@rights={{0x18, 0x1, 0x1, [r22, r8]}}, @cred={{0x1c, 0x1, 0x2, {r7, r24, r26}}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r27, r29]}}], 0x58, 0x11}, 0x8040) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f00000003c0)=0xe8) mount$fuseblk(&(0x7f00000001c0)='/dev/loop0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='fuseblk\x00', 0x1, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r26}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x61}}, {@allow_other='allow_other'}], [{@hash='hash'}, {@smackfshat={'smackfshat', 0x3d, 'trusted:eth0'}}, {@subj_user={'subj_user', 0x3d, ')eth0'}}, {@fowner_gt={'fowner>', r30}}, {@subj_role={'subj_role', 0x3d, '%mime_type'}}, {@appraise='appraise'}, {@subj_user={'subj_user', 0x3d, '/dev/binder#\x00'}}, {@audit='audit'}]}}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r31 = socket$netlink(0x10, 0x3, 0x5) writev(r31, &(0x7f0000000040), 0x0) fchdir(r31) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x7530}}) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000180)=0x8) r32 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r32, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:18 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 187.303712] ip6_tunnel: xmit: Local address not yet configured! 03:35:18 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:18 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:19 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:19 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 187.507822] binder: BINDER_SET_CONTEXT_MGR bad uid 3072 != 0 [ 187.513810] binder: 7475:7485 ioctl 40046207 0 returned -1 03:35:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/relabel\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/228, 0xe4}], 0x1, 0xfff) r5 = socket(0xa, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'rose0\x00', r6}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000100)={@mcast2, r8}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000054744317e303d3a69fe0939ac7a2895ae6322d42c8b3e4ae8511f963f715a383db142a777c0fa07d1ef912985672b035c23a26f8a427578c5ea6c037c8c06112df705706479f4854c66981eb0e05b3b4d3647e686841084b10120e441fd05e66c17f062841e3423cc15c4b527bab2e6f9a0aa79aa8ae5"], 0x0, 0x0, 0x0}) [ 187.929331] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.960708] binder: 7506:7507 not enough space to store 1 fds in buffer [ 187.967901] binder: 7506:7507 transaction failed 29201/-22, size 112-24 line 3475 03:35:19 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:19 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1, 0x40000000000000}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x204001, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000100)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x200, 0x8, '9P2000.u'}, 0x15) 03:35:19 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000) write$P9_RREMOVE(r0, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) r2 = socket$inet(0x10, 0x2000000003, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000100)=0x78) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 187.973631] ip6_tunnel: xmit: Local address not yet configured! [ 187.983069] binder: undelivered TRANSACTION_ERROR: 29201 [ 187.998228] binder: 7506:7510 not enough space to store 1 fds in buffer [ 188.005150] binder: 7506:7510 transaction failed 29201/-22, size 112-24 line 3475 [ 188.013141] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.049668] binder: 7517:7519 not enough space to store 1 fds in buffer [ 188.060951] binder: 7517:7519 transaction failed 29201/-22, size 112-24 line 3475 [ 188.062965] binder: 7520:7522 transaction failed 29189/-22, size 112-24 line 3138 [ 188.063185] binder: undelivered TRANSACTION_ERROR: 29189 [ 188.090616] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.098239] binder: 7517:7525 not enough space to store 1 fds in buffer [ 188.115765] binder: 7517:7525 transaction failed 29201/-22, size 112-24 line 3475 [ 188.123626] ip6_tunnel: xmit: Local address not yet configured! [ 188.133334] binder: undelivered TRANSACTION_ERROR: 29201 03:35:21 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x0, 0x1000, &(0x7f0000000680)="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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/192, 0xc0, 0x1, 0x9}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x4}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x1080}], 0x0, 0x0, 0x0}) 03:35:21 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x20) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a74700000000000000000000000000000000000000000000000000000000000000000000000007a2a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) r2 = gettid() r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) syz_open_procfs(r3, &(0x7f00000000c0)='net/psched\x00') setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0xffffffffffffff01) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:21 executing program 0: unlink(&(0x7f00000000c0)='./file0\x00') r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040), 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0x56, &(0x7f0000000180)={&(0x7f0000000280)={0xc, r2, 0x70e1a60c002b1d51, 0x70bd26, 0x25dfdbfe, {}, [{{@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}}}, {{@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x3, 0x1}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10001}, 0x480c5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000100)='attr/current\x00') pidfd_send_signal(r5, 0x18, &(0x7f0000000200)={0x30, 0x2, 0x100}, 0x0) [ 190.361301] binder: 7535:7538 got transaction with invalid offset (40, min 40 max 112) or object. [ 190.370800] binder: 7533:7539 not enough space to store 1 fds in buffer 03:35:21 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:21 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r4, r5, 0x0, 0xfffffffd) connect$unix(r4, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 190.370831] binder: 7533:7539 transaction failed 29201/-22, size 112-24 line 3475 [ 190.371001] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.423407] binder: 7537:7551 got transaction with invalid parent offset or type 03:35:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000b58c00000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ff0f0000050000000200000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ede7dc7fd1b7beb61857e698aa74cf3cf4bc4057"]) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x4) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:22 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:22 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 190.423438] binder: 7537:7551 transaction failed 29201/-22, size 112-24 line 3525 [ 190.496992] binder: 7535:7538 transaction failed 29201/-22, size 112-24 line 3379 03:35:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev, @in=@multicast1}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="116348400000000000f8ff00000000000000000000000000000000000000000000000000700000000000000018000000000008001e0e3684fde446d5e7a4", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040), 0x0) sendmsg$sock(r1, &(0x7f00000026c0)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x0, 0x0, 0x0, {0xa, 0x4e24, 0xe41b, @local, 0x1}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0x1000}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @txtime={{0x18, 0x1, 0x3d, 0x3292}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x736}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xf0}, 0x4d000) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) capget(&(0x7f0000000500)={0x20080522, r5}, &(0x7f0000000540)={0x7, 0x313, 0x1000, 0x4, 0x2, 0xfffffffd}) munlockall() r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x0, 0x0) openat(r6, &(0x7f0000001680)='\x00', 0x20000, 0x100) r7 = socket$inet(0x2, 0x5, 0x7c) fcntl$notify(r7, 0x402, 0x80000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000001280)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000000b58c00000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ff0f0000050000000200000000000000018000000000000000000000000800"/192]) prctl$PR_GET_NAME(0x10, &(0x7f00000016c0)=""/4096) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000600)=0xb) [ 190.534575] binder: 7565:7567 not enough space to store 1 fds in buffer [ 190.535612] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.537223] binder: 7535:7571 got transaction with invalid offset (40, min 40 max 112) or object. [ 190.537250] binder: 7535:7571 transaction failed 29201/-22, size 112-24 line 3379 [ 190.537493] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.583387] binder_alloc: 7574: binder_alloc_buf size 2286984189968520 failed, no address space [ 190.583394] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 190.583414] binder: 7574:7577 transaction failed 29201/-28, size 112-2251799813685272 line 3284 [ 190.607712] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.609105] binder_alloc: 7574: binder_alloc_buf size 2286984189968520 failed, no address space [ 190.609112] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 190.609131] binder: 7574:7581 transaction failed 29201/-28, size 112-2251799813685272 line 3284 [ 190.621370] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.710888] binder: 7565:7567 transaction failed 29201/-22, size 112-24 line 3475 [ 190.720604] binder: undelivered TRANSACTION_ERROR: 29201 [ 190.727373] binder: 7565:7586 not enough space to store 1 fds in buffer [ 190.734161] binder: 7565:7586 transaction failed 29201/-22, size 112-24 line 3475 [ 190.742081] binder: undelivered TRANSACTION_ERROR: 29201 03:35:22 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:22 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a747000000000000000000000000000000000000000000000000000000000000000000000000085616466000000000000000000000000000000000000000400000000000000000b12b4bc5b6c5d52b008b47c7339a7f26552019d10bb054dacdd97d91129f99bbabec3778d6819cd17c78d5bc4f0d779136c59fa76377e98d84a31f1f69617"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:22 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fchmod(r0, 0x10) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x13, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x1b3}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x20b6bbf775272447, 0x50}}}], 0x0, 0x0, 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x400040, 0x0) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) [ 191.164256] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.170020] binder: BINDER_SET_CONTEXT_MGR already set [ 191.175453] binder: 7537:7551 ioctl 40046207 0 returned -16 [ 191.181614] binder: 7537:7551 transaction failed 29189/-22, size 112-24 line 3138 [ 191.189487] binder: undelivered TRANSACTION_ERROR: 29189 03:35:22 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x4c180, 0x0) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f00000001c0)=""/9) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f00000000c0)={0x8, 0xfffffffd, 0x4, 0x3, 0x4}) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = open(&(0x7f0000000000)='./file0\x00', 0x200200, 0x8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000140)={0xa, 0xa, 0xa9, 0x14}, 0xa) ptrace$setopts(0x4206, r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r4, &(0x7f0000002340), 0x0) readv(r4, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r4, 0x5432, &(0x7f00000002c0)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f0000000100)={0x1ff, 0x0, 0xa737, 0x5}) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:22 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 191.228117] binder: 7591:7597 got transaction to invalid handle [ 191.234431] binder: 7603:7607 got transaction with invalid parent offset or type 03:35:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) 03:35:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000500000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="6ae2f89ff3f19e5376cc709b4f032edc43fa90676347f226da3f0b215d41749916e3fb85322d6d92ff55c016f10ce17d3227dc243056f18d6c239a54b52644e9d5e88e2badd667e6a01a9a44f31349303b104cba2e6f555fd81d353a05d0985e06c5b87ac1e970e2a1393f90fe4beeef7d3049915db3028f88095f45c4d9d156d73459ee8b4affe5cccb8f1a22e3d1516025bd4824b685771b120c90e67259c95d7bbe3460d0a8ede54005181fb0f138db798d0823fb20eb2850a93795ab7c62e90ee5faddabd12a33db60a587bcd06ce3b1939094bbe774f02a46301c"], 0x0, 0x0, 0x0}) [ 191.247318] binder: 7591:7597 transaction failed 29201/-22, size 112-19 line 3138 [ 191.259121] binder: undelivered TRANSACTION_ERROR: 29201 03:35:22 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fsync(r1) 03:35:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000040)=""/9) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x2f, 0x5, 0x11, 0x14, 0x6, 0x1, 0x0, 0x72}}) prctl$PR_GET_FP_MODE(0x2e) [ 191.265812] binder: 7591:7608 got transaction to invalid handle [ 191.265820] binder: 7591:7608 transaction failed 29201/-22, size 112-19 line 3138 [ 191.266187] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.314214] binder: 7614:7621 not enough space to store 1 fds in buffer [ 191.314243] binder: 7614:7621 transaction failed 29201/-22, size 112-24 line 3475 [ 191.314618] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.328984] binder_alloc: 7618: binder_alloc_buf size 6025519380131537656 failed, no address space [ 191.328991] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 191.329010] binder: 7618:7624 transaction failed 29201/-28, size 112-24 line 3284 [ 191.329175] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.345024] binder_alloc: 7618: binder_alloc_buf size 6025519380131537656 failed, no address space [ 191.345031] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 191.345051] binder: 7618:7624 transaction failed 29201/-28, size 112-24 line 3284 [ 191.345212] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.390167] binder: release 7631:7634 transaction 358 out, still active [ 191.390171] binder: undelivered TRANSACTION_COMPLETE [ 191.391107] binder: send failed reply for transaction 358, target dead 03:35:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="117248000000000000000000000000000000cd000000004c6ec6fb88a4399887001000000000000000000000008afdffff000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a747000000000000000000000000055feffffffffffff000000000000000000000000000000008561646600000000030000000000000002000000000000001600000000000000"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x0, 0x0, 0x0}) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003d80), 0x0, 0x0, 0x0) flock(r3, 0x9) 03:35:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffd00, 0x0, &(0x7f0000000600)=[@register_looper], 0x0, 0x0, 0x0}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 03:35:23 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:23 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 191.395170] binder: release 7631:7638 transaction 360 out, still active [ 191.395174] binder: undelivered TRANSACTION_COMPLETE [ 191.404290] binder: send failed reply for transaction 360, target dead [ 191.553455] binder: 7603:7607 transaction failed 29201/-22, size 112-24 line 3454 [ 191.563028] binder: undelivered TRANSACTION_ERROR: 29201 03:35:23 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 191.593372] binder: 7647:7649 ERROR: BC_REGISTER_LOOPER called without request [ 191.606437] binder: 7647:7649 unknown command 0 [ 191.611916] binder: 7647:7649 ioctl c0306201 20000140 returned -22 [ 191.624755] binder: 7652:7655 unknown command 4747793 [ 191.630071] binder: 7652:7655 ioctl c0306201 20000140 returned -22 [ 191.637192] binder: 7647:7657 ERROR: BC_REGISTER_LOOPER called without request [ 191.637199] binder: 7647:7657 unknown command 0 [ 191.637207] binder: 7647:7657 ioctl c0306201 20000140 returned -22 [ 191.680158] binder: BINDER_SET_CONTEXT_MGR already set [ 191.685762] binder: 7652:7663 ioctl 40046207 0 returned -16 03:35:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x200400, 0x0) 03:35:25 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r1, 0x0) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000200)="f37d67c676d4c6427821a981f9575ece462db0ab8fab855e532b", 0x1a, r1) r3 = add_key(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="276f3cd849c5eab551d040d7ae4866dd7e1750e0ee758ef041de6ce4533ac72cc90e2a49bf4dda3b3f3410fb623d70a9ac105b8e8126fba5c71c283065d252dfdceed3013e9d31a12752408ebf6577", 0x4f, 0xfffffffffffffffa) keyctl$negate(0xd, r2, 0x6, r3) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000003d80), 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x58, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000007000000000000000000008561646600000000050000000000000001000000000000003000000000000000"], @ANYRESDEC, @ANYBLOB="0010000000000000"], 0x0, 0x0, 0x0}) 03:35:25 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) finit_module(r2, &(0x7f00000000c0)='):\x00', 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x5c, 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00000500000000001e000000000100005000000000000000"], @ANYBLOB="2416d987681b11103543abd85e194ef3999697cdda2e8fa689df68c7ea92e9b67562c02cb0a923970a7fd4daf09e38c996d489b82901ae9f5ed779eb2f09978d8fe4b1dc079817c5"], 0x0, 0x0, 0x0}) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000003d80), 0x0, 0x0, 0x0) lseek(r4, 0x81, 0x4) 03:35:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) clone(0x4000000, &(0x7f0000000680)="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", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000001680)="5cd35981b9cc97c3a49e2b823a15a82802d8c36ca5cc52c33441748b15f2baba159adb2867586602057708261b3710aa4a659e0ac17732b1fd51c7ff2c21452134e941571144bb541c73a931be5f4258c75f46ca916ad1c54d49adee7c363dbfed4a8ddb22944bcf29093918db4f84eb429bb11cc1f298aef448f32977285c9382ec0681b60f4f88894093b4decabb10ac11cbb4b82b0f9dc664cba2fad82e53edfe85cb9c6af999e8317eeb14b6753fd57ab9e09f31fea1f690c699eed736f28590b4a859ca35a7ca6814dd3389f62ff18afad939e6b79cdcb9c9610dec75062a1e878a4920ce250204288e9d9a6adfe5dcceb11311dfdf605cdc38a0df50693ff0c7594e194b5babb551c626b13c0d602d3f60eb1a3d7e6a69cd70e8be01281301aa7d3be90f588ac3f67e8b97694ee240d7ba8b72b52cc0b2150997ad948987d3fb95bd820078b32209d8e10d8c9da99ee8adb3d0457cd58d9212d051bc64fc85a3c624496f9cf0841c1616307a627c9ebd16a5e7f04376896269910531497021661627c1503ebb09be7c957784ea678e3f4820f1245e3f6395a1199b9ff0f56547402d1c44ec03d1e36f5d293dffb385e5afb4b17d0043027c887cb574f3bf842b384d6ab995cd01899c7a0d1d62ad45b9af1ca9784825b0089f3434bf8841ad70ba375c28d82d797db7ee3b2910034d8d7b689b1d3beb090a2d21a4a6b9eab7d033ca78f0918ce692b5ebefae2d088e516a9a92029c1bfd575f247497dc758f75d1650949d62eca4e12ab73d89b71d288f84de1071184d33617dbeb7b51a06b129a46f5111796808b69eecb22fdf74f8827ffe20e2c441e6eb4e53c4ce9700320a27a4a94e91b0010cd277979bf3cbff14892760ca3de640f3108d1ea90fd58c7246f0be9f6bb7eb07da1a2b07caf0f2b288d59724e908209ea9ddb99b9d3a8e5518ddb4540d2e99553015cf367503b30d8aafee29136b0c060a59be82a49406107430080a60a7d1a58d701a1b78e71a0ec2be618aeddc02b01c5d6a19f4eb4c670be6b310188b965e76aef456b990c6128e647faee3df81b778f1d8e160e891829e56235066d69f51fe397e37b34a4977064c819e7225380818d21e234bebc36aa35cf3acd052fda8ae91ba489677069afb71da5268ff82c5bfe217902b9f95cd2191c070a16ad61d3b246cb602d6e1c25ab25d5727473b92c483e3562edbea9d7404b3dbae195e594662249ac17b0630cbdb7c8ff53e871f88b29a18dc0e63d2c31a2cf9666d5e39ac87120ccd0d41352962438aaa9d088472b352b3750aaa5e8ab8ed126719a5aeaf82a794358bc559922d2581bce64fb66a4bdc0efecf30254221a9bd21652c6d79020fd65c9065706ee3444f7306ce7ac5d094a12d8f587c8ad7c25d4b79c3cc0794ac0082e8efde661e3ca71641d5a7f8209e03ad1e04d8e452a33fdbf216879a0cc1c429cf438cdda63627808eaf272d5588aa3ff5fdde4da1e5ee7e8abeffa8faa839079776c5353ad17607d0dcf0ebfa8a3e536d72aa10bdff6d29f0daf1b9727327c4f4774c56d3658f21321da83785800b517fea1e69e9cb761580728a41cf76c3df13e28436942e859b739f40a09fdffbf3b8d81c915068ef7c9a1fb1d6b63c4136049df8a0d39b453699cecbe8543c3c037e26e5948a83bcf2a343976134d322287d8d2a5cbbaba1645df4f40264413ea46795ecfe3b6bb731cde3223df1e7dfdaedd3c95cb2ebd7a372583cea87ab0fbbd902bc612d82bff75e0e9884e0e86fa21031e152220cab556c086da9b120393b014e08ac2a7239d5afa705cdb7571307501b9f78d28bc6aad7f810e1489f76583fdfb7cce5b096cf62342c973760f1914a04c08caf3cd3ca813adb4d0304ad24540e72abf85aea019e3f539fd04133cf2970011e805cd33cbbb843f38263e400667705a28a23dc55c0841be1a5bd3345aaf6f06afb883dab5d888b5c6fe2b2afa27e85d12a40fed8891c3dd25ad86662fa53c39e6bb2d1eeff6fdfa3ee5667e0cbd1cf9a71443ca00cb709e0451a4f02e54081a7f1d1baf42e46082b549b020e130af12f009749cac2b73b56270f02b9aaa851b87acb50f5c8dd7bd4c81ab3ee4eb0a6e379ac5244f1ac04b40c84780cfd0e2c2eb4a82d4d0fd2814be7945d6a5c7ecc9a3f4473b4fb1ab7e0415565c4f06ad025c1ac2f202566015199c655d247855db1129fad2bc7457122e12efc06cda04eab112523ad9ddcfa0d3be89e70e9c68fa84efc884d8e5d426ff903978604226490d8af713bd74627743de3ee41d3f26453c1c038d553334250c5468db353e344bbd8b1b46af4e7b1617a5fed394379349250d9f6c85a4d31760498fa5a2677a3c0a2a048dfb58a08386c893bd3d5a464818dc8ecc2b9f1194227062b5c58182892fff0757ecdb4ee8f60506bbefd03aa6b6367f73b66a887d7a2287a15e0a741955d8622cd6a0357cb3622f2cb81c739b2215a37fb157aa432110950b87c37617a7ebed2ec13cd9468e03897f633e2a2a6b271aad090a743b62f19ccdae776cb8835e0a8c1b9ef2d2c217ff9dd5aed691b8188eded1347a3f339699133b600d210acfa432f83f43ff8ddf0dac5098a116c3dc12c81bc2661dae59b9abeb2cb28a1b4fa51e455ebf70380324ea8d40cde9f03127520d2ed03dedb40eb4e6d637b46df986b10dd74149ae04baecd831bb03a7c7f81269f118ee8d26be1373e03f5e3df24947803359a347aa1bd5e589913ac2b9ca1e70f0919e87990585553d6b2e4ee6105987afdf49ba61b1681d36dbab2c6dc463602d9a6944ca39606b5ed7ea5e3a10344c3f204e7ba54c81c9476787bd65c5ebbe997e5a2a39c85fd1f45559574f339375ae51e929888fa2c8a3bc1d2cebb6eef932dade9733f4b8d36b58a94886d75c91698c298413117dfe5e8a5cc1f8fbb6b78e545542b34399475bca5d3d6d28ea6ca8f1c6c1dfd57dff45ce44bbcff4f44db88b83c8d460dd7d335a8d6145b1e2c543d72497f42f5e72d8f6567f628bf5d0f0ddc3858f5f74f03a422a03b22329a86d43eada5212332c3cb248dd68cc422564e9705c9dc427c7dc1b6c15f901d1ef3892ebad160ecdb0dbdac44e0577222c5459593481237c180cd29fc4b9cd8892d368d57cc67e22c47b83a84b5173658dbcd4eb9e223ce6a75281983648b374b1db44b10e439ece97fea8fdf8fea696d91f5680980b4befe8448472b2c2f2c0435e1d0523bdf706b9183c6e36e51c5e32864274598c3e54234b2dec1c3342a2ca481bd1e39deee4880e120fe0c7fa8ec71ae6064c0bb470877278df352324d157ed0b07b772e0fbb5baf6ec72e1edd94217ec13d756eb5c41755d762fa9fdb53026fe1a875253c31ba85dc5b47cf2baec3a7e3a1633c1ded6de907ab489efa693c2c29fdb842c3423c6cbfa429191f45d22ad778173664e943a5dbc18819bc4826864764f6a4a15bf68f3de4928c11c945656404566c2faf96266f613f424bc80ecc5915c596bb0bce5f5c2d1eb0bdab66310568a8b7b64f9fc2ff1a1d102813dcf0583ef580e1417635529602e5a1c65c9cad1d8cd5711aed75de5ef424526c933c39e2bb4e130787a7e462c7ce063b1d5fca49e28424c4425478a54473ea30d11d0fcd50af45b8bfff65a59e197a2d065b15f9c1cfe594260f87049f1fc47cde76962ac998d7db7effa3544fb0fe26bd647354180d1b2ef0b144d3ca57462889300159b66f9b400fe938a61e597f7e80b04954d7c0a272f7452a54c8bd884247964034d27b1c03d603b5272b040a635e71805531e1e748fed2309686b7cfe9d4fe96f5756f16694637e188b0c75e87d0dec2d4baf47c84819f65524fa0a87606c7aed3475c534d2f0b8e6589fe9f4ac5daf4a21bbce5bebff10f875f514b448fa4eeba89cbea8a0ab440d5a6d1428e5263f6121b47fd5f133cf6b2361ff4a55f7b577e8e69a07ed899baceb6664727b228cf81f4e30f93c4b1a42fff90572361aab796b1d4a07c7c8cd92dcc8adcc5fe2fd6e1f11f19cae0c982da30d55487d1416c0a33aea9658ea5df16ef087d5672467016ef78876c13b62acf736bb534188db6af338868aca2c794a325803a7e9ca0859a2d9bb1c002eebb0bea488623f03dce7333c6093354183326d46199f9e0b7fb00e02973833b53f70759781989340efcf773319d42e86d996eb5644be158a62c0c642b333dcf1d9aec189c1a60e7c28747f9f726370a6dfaad117b4f7c1dea69120f6539b13636a6d6f47457cb76ffd8bcf4deff122b7fa528a07e971d6f672cf5e0feb53e2fd685d8ff5329691499d8fcb6bc93e3ee5121993e57e94a0ab38fbdeabe0936a547fafa00f23e55f40b4e8528bffeddf320eeb2d0bd4bcd647703504e7814303f7b96f63df49ea9b6566edc62e2609ff0436f85bfe29bb1248e6ee8dfa4c996db6d04c33b41651082ac293b54f2701f13f828e28d79a6d283e2d7a933684cbb011b7ce9271fb11b9b9c7dd649635461bf7884591554658c7f16379043296a3f32db1cd23698de787076e2c499c7f4f282dea836b857aed6edb76304f48e509df43d4163b5fb8cc52159ffe27bff7b3316f7b3b945981a9b1131275f089c6a2d8c24c2b36aa9bd97025e1f4b8d2b690fb4fb5dc1db0ee7a64cf7550a9edc17fdf46c063bd060587c1c065c92550757fb66116f46905deafa47d76e93e13341158353b37149e6cde001b986c70a3dfb384233ad84e8904d0420e8bd5a320e7eaecef2a84e041bf1db6243219d2c38f22ef480414dc77072f11dbc787a14604183dcf6f59595b487eb3c8bfcfd5270239230962bcb3972792749423e2e1e649644c0b8281882e4ad087d3b79997dd3d4c937ea494973f3d5bf4b627e7ee5633e353b4242c52e69dc46cdeb106b4efc8ee8d511e20bdab3ef50bef09dc23d112418b8bd9e2ba27d8bb764a466968d6d3af36598e076e3f07a1975a6f41d8e2dbf7e11d1f39df1cbcc0ad8efa45b1511cfbe35bf4b972504a3ae4f0d6f0f6500bea463bc02b749f4882bb539fec83c3c2f006b8dcabb902c41a1123802c0cd9835170900fd77d2babec2bccf2f688b176a4b837e00d4ec9962ebda6acb963c43ef317ee90aa1f9406bc3f409a5b23931209a2e641b58bcab3951329f49128bd16721f58a6930a0f0e9878ae6a93f36a8543fe4fe8033ed8efe92aebc39d7ab6bb6c8ea3b803cbd67c86d3287c756de0d328965bf7af8c5cea2118f709bc80182141434ded0773e029d9c15aa4ee16155f33e889ac802a7ca1b00c53cc3e01008836a55e9e52d4d4fd4720ce82bf2c4bd203810d1a02ba559501f9a4c4d99feda183c1ed2820796a50c05b5f37d4d80d29f7ee6a62b08e267583b11007fe7847f41029952918220037d141521c1f8c769f331730be2cb0ee8db75e3183ef3568cda233dbcf180b71cf1630b122a8eb038cb5c1eccba431fed55cff3d41e37f4e534f66046316b7e9a206549f9b658c1a553a42cccbae5a0e0f6a8cb4904449e512f14f6349ffbb9152745679f219e19e3ccdd3354c0f98e8beb316ef98a8a6277cdd783987fca1abb6ef05c35833415a6a3f8fc87b078cd0a6bf955ffe209555cbc017c1dfd8f14b7aa1464a10db7f103a118a4861ca7f7a103bb488e145341b2d9d0257e206dc73fa5478cc22a265043aab40081a51e9fc6671db43b063a575b01f0f038ea23005251cd5b03d5bb7dd3a35016581bf5fb7c644778246262a0cf17dac1296b5972ceae1616217bbee413682") r2 = accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000000)=0x6e, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x10c, 0x0, 0xf9, "f70e78303c2da67c96568edbcb7690f0", "77048f2a89ac614b38a9bb2b7234c8e9360ae022bd90b85967d67dbac4e0e9b188c8c70c6df121356bc639442fbe860f1ed96c12451e91fa38d9c7c30a2e7736a7aa578965c19c89ab6a62becfae5f229169be0d77914414d08990ba17061ffa5bebfbc8dfd00cad3e3dff7195e8e5078d6cd9ebb6e1b8794ab234efb6ce3ef22fb956415041c35da49a961b295ac8f646fbc5d7a578bdef1e4f9bf1b956b5bcf1f5050d70ba78379673514ba4ef487b8bcf1b6a2ffef84670f7c00eaff1a45f8579bc514be6cb63be1c8ec94d6e3107125a113aa86f2e73ffdd07b40f8e9bef518f06cc9203f4171e69a527da9dce86748e9ad9f62c32"}, 0x10c, 0x1) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:25 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 194.284838] binder_alloc: 7670: binder_alloc_buf size 3834033537023162296 failed, no address space [ 194.294995] binder: 7669:7673 unknown command 0 03:35:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001020000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000001000000000028000000000000006400000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:25 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600), 0xfffffffffffffed0, 0x0, 0x0}) 03:35:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000040c44192c2000bd619aa2c0e020280ac6398d6a5fef364efad5de30dca3b4437d97396b27dbbf77f4d812e20729b9b928d"], 0x0, 0x0, 0x0}) [ 194.295003] binder: 7669:7673 ioctl c0306201 20000140 returned -22 [ 194.309278] binder: 7674:7676 not enough space to store 1 fds in buffer 03:35:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 194.309306] binder: 7674:7676 transaction failed 29201/-22, size 112-24 line 3475 [ 194.309463] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.316416] binder: BINDER_SET_CONTEXT_MGR already set [ 194.316425] binder: 7674:7684 ioctl 40046207 0 returned -16 [ 194.333645] ip6_tunnel: xmit: Local address not yet configured! [ 194.372495] binder: 7687:7690 got transaction with invalid offset (65536, min 0 max 112) or object. [ 194.372525] binder: 7687:7690 transaction failed 29201/-22, size 112-24 line 3379 [ 194.372710] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.390990] binder: 7696:7700 ioctl c0306201 20000140 returned -14 [ 194.393642] ip6_tunnel: xmit: Local address not yet configured! [ 194.399141] binder: 7696:7702 ioctl c0306201 20000140 returned -14 [ 194.437485] binder_alloc: 7705: binder_alloc_buf size 54766956644925576 failed, no address space [ 194.437492] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) 03:35:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/414], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x8, 0x8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000100)="44799d467a07b31bff1b263e14de6dbe74d91e7e82ef6df5a08990879f1b", &(0x7f0000000180)=""/59}, 0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x10000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 194.437513] binder: 7705:7706 transaction failed 29201/-28, size 112-24 line 3284 [ 194.437697] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.445381] binder_alloc: 7705: binder_alloc_buf size 54766956644925576 failed, no address space [ 194.445389] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 194.445409] binder: 7705:7709 transaction failed 29201/-28, size 112-24 line 3284 [ 194.445674] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.465843] binder: 7708:7711 got transaction with out-of-order buffer fixup [ 194.465872] binder: 7708:7711 transaction failed 29201/-22, size 112-24 line 3467 [ 194.466042] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.469500] binder: 7708:7714 got transaction with out-of-order buffer fixup [ 194.469529] binder: 7708:7714 transaction failed 29201/-22, size 112-24 line 3467 [ 194.469882] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.615320] binder: 7721:7723 not enough space to store 1 fds in buffer [ 194.615348] binder: 7721:7723 transaction failed 29201/-22, size 112-24 line 3475 [ 194.615499] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.689767] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 194.704088] binder: 7670:7672 transaction failed 29201/-28, size 112-24 line 3284 03:35:26 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xfc, 0x0, &(0x7f0000000440)=[@increfs={0x40046304, 0x1}, @increfs_done={0x40106308, 0x3}, @exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x7, 0x2, 0x32}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/154, 0x9a, 0x2, 0x2e}, @fda={0x66646185, 0x6, 0x1, 0xa}}, &(0x7f0000000240)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x6, 0x1, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/24, 0x18, 0x1, 0x2d}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x1, 0x2, 0x21}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x1, 0x0, 0x4}}, &(0x7f0000000400)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, &(0x7f0000000540)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:26 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:26 executing program 4: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0xfffffd42, &(0x7f0000009ff0), 0x2da}, 0x40) recvmmsg(r1, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @descriptor="aa9b08708d69ceb4"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0x8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) fchmod(r2, 0x20) [ 194.714876] binder: undelivered TRANSACTION_ERROR: 29201 03:35:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r1, 0x0) keyctl$update(0x2, r1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:26 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:26 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 194.751045] binder: 7732:7738 not enough space to store 1 fds in buffer [ 194.760991] binder: 7735:7739 IncRefs 0 refcount change on invalid ref 1 ret -22 03:35:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0xffffffa7, 0x0, 0x0}) 03:35:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, @ptr={0x70742a85, 0x0, 0x0, 0x19d, 0x0, 0x8}, @fda}, &(0x7f0000000040)={0xfffffffffffffe88, 0x28, 0x50}}, 0x1400}], 0x0, 0x0, 0x0}) r2 = socket$inet(0x10, 0x2000000003, 0x0) prctl$PR_GET_KEEPCAPS(0x7) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) getpeername$inet(r2, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) 03:35:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000020000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="4e6c54f3ff016e46"], 0x0, 0x0, 0x0}) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 194.761001] binder: 7735:7739 BC_INCREFS_DONE u0000000000000003 no match [ 194.761009] binder: 7735:7739 got reply transaction with no transaction stack 03:35:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f0000000000)=[@exit_looper, @release={0x40046306, 0x1}], 0x45, 0x0, &(0x7f00000000c0)="82ee9df74a53beffaa3d660f1627b7350b1512a5f9a2e327984ee3140824abb8bc892f87b2a49d62270b593d6fe75b0a8613e23acda5fea0b3c00c170cab2751295f3c50dc"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00`\t\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00.*\x00'], @ANYBLOB="83000000309748f722d0bac4124acb052d48dfbb1a7eb2597245c675b5700a7668676dea21e7c03c3ccae64c62e3f61146e28a00bea6f3782529fb64ee92a53d8f55f18e20c7d6af6406e6250403dd8459c4dca7863408f33a5bae62302a0d72b73e4883bb4acaafcb5457e82108161c0a14e76537a7e7e87c"], 0x0, 0x0, 0x0}) [ 194.761017] binder: 7735:7739 transaction failed 29201/-71, size 104-24 line 3046 [ 194.761629] binder: 7735:7739 got transaction with out-of-order buffer fixup [ 194.761657] binder: 7735:7739 transaction failed 29201/-22, size 112-24 line 3467 [ 194.761809] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.762000] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.776557] binder: 7735:7739 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 194.776565] binder: 7735:7739 BC_INCREFS_DONE u0000000000000003 no match [ 194.776573] binder: 7735:7739 got reply transaction with no transaction stack [ 194.776580] binder: 7735:7739 transaction failed 29201/-71, size 104-24 line 3046 [ 194.776868] binder: 7735:7745 got transaction with out-of-order buffer fixup 03:35:26 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:26 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 194.776894] binder: 7735:7745 transaction failed 29201/-22, size 112-24 line 3467 [ 194.777229] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.777251] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.803631] ip6_tunnel: xmit: Local address not yet configured! [ 194.833431] binder: 7754:7759 got transaction with out-of-order buffer fixup [ 194.833460] binder: 7754:7759 transaction failed 29201/-22, size 112-24 line 3467 03:35:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$peek(0x5, r2, &(0x7f0000000000)) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 194.841250] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.866505] binder: 7765:7767 ioctl c0306201 20000140 returned -14 [ 194.866637] binder: release 7765:7767 transaction 401 out, still active [ 194.866641] binder: undelivered TRANSACTION_COMPLETE [ 194.867294] binder: send failed reply for transaction 401, target dead [ 194.867739] binder: 7765:7768 ioctl c0306201 20000140 returned -14 [ 194.868015] binder: release 7765:7768 transaction 403 out, still active [ 194.868019] binder: undelivered TRANSACTION_COMPLETE [ 194.877716] binder: send failed reply for transaction 403, target dead [ 194.906624] binder: 7771:7775 got transaction to invalid handle [ 194.906633] binder: 7771:7775 transaction failed 29201/-22, size 112-24 line 3138 03:35:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a7470000000000004000000000000000000000000000000090000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600000000010000000000000001000000000000000000000000000000f123e25ca7a8d36fc5a874cc08b4bee8d834"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:26 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:26 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 194.907218] binder: undelivered TRANSACTION_ERROR: 29201 [ 194.908376] binder: 7771:7777 got transaction to invalid handle [ 194.908386] binder: 7771:7777 transaction failed 29201/-22, size 112-24 line 3138 [ 194.909126] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.174877] binder: 7732:7738 transaction failed 29201/-22, size 112-24 line 3475 [ 195.184709] binder: undelivered TRANSACTION_ERROR: 29201 03:35:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 195.205077] binder: 7803:7804 not enough space to store 1 fds in buffer [ 195.213621] binder: 7803:7804 transaction failed 29201/-22, size 112-24 line 3475 [ 195.234169] binder: undelivered TRANSACTION_ERROR: 29201 03:35:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000680)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x94, 0x0, &(0x7f0000000200)=[@exit_looper, @register_looper, @register_looper, @acquire_done={0x40106309, 0x1}, @dead_binder_done, @increfs_done={0x40106308, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20, 0xfffffffffffffe8d, &(0x7f0000000180)={@fda={0x66646185, 0x4, 0x2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/58, 0x3a, 0x2, 0xb}, @ptr={0x70742a85, 0x1, &(0x7f0000001680)=""/4096, 0x1000, 0x0, 0x23}}, &(0x7f0000000100)={0x0, 0x20, 0x48}}, 0x1020}, @release], 0x0, 0x0, 0x0}) [ 195.260970] binder: 7814:7815 not enough space to store 1 fds in buffer [ 195.271856] binder: 7814:7815 transaction failed 29201/-22, size 112-24 line 3475 [ 195.281606] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.289385] binder: 7814:7817 not enough space to store 1 fds in buffer [ 195.296581] binder: 7814:7817 transaction failed 29201/-22, size 112-24 line 3475 [ 195.305091] binder: undelivered TRANSACTION_ERROR: 29201 03:35:26 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:26 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 195.331053] binder: 7820:7821 ERROR: BC_REGISTER_LOOPER called without request [ 195.340917] binder: 7820:7821 ERROR: BC_REGISTER_LOOPER called without request [ 195.348628] binder: 7820:7821 BC_ACQUIRE_DONE u0000000000000001 no match [ 195.355974] binder: 7820:7821 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 195.369580] binder: 7820:7821 BC_INCREFS_DONE u0000000000000002 no match [ 195.379224] binder: 7820:7821 got transaction to invalid handle [ 195.387376] binder: 7820:7821 transaction failed 29201/-22, size 32--371 line 3138 [ 195.400192] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.406287] binder: BINDER_SET_CONTEXT_MGR already set [ 195.411731] binder: 7820:7828 ioctl 40046207 0 returned -16 03:35:27 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0)='devlink\x00') r5 = getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3080000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd8, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x4}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r5}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x3}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x3}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r6}}]}, 0xd8}}, 0x3ed36f4f005e4261) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="ac1414c3ac1414aa0000000001000000e0000002"], 0x14) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)={0x2}) r7 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000540)=""/43, 0x2b}, {&(0x7f0000001680)=""/211, 0xd3}, {&(0x7f0000001780)=""/18, 0x12}, {&(0x7f00000017c0)=""/64, 0x40}], 0x6, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') dup3(r8, r2, 0x100000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000170000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x34, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000000)=""/123, 0x7b}, {&(0x7f00000000c0)=""/123, 0x7b}], 0x4, 0x1) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = gettid() sched_setaffinity(r2, 0x8, &(0x7f0000000400)=0x80000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) [ 195.760970] binder: 7840:7844 not enough space to store 1 fds in buffer [ 195.768050] binder: 7840:7844 transaction failed 29201/-22, size 112-24 line 3475 [ 195.768119] binder: 7839:7843 got transaction with invalid offset (863288426496, min 0 max 112) or object. [ 195.769473] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.770530] binder: 7840:7846 not enough space to store 1 fds in buffer [ 195.770556] binder: 7840:7846 transaction failed 29201/-22, size 112-24 line 3475 [ 195.770810] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.812404] binder: 7839:7843 transaction failed 29201/-22, size 112-24 line 3379 [ 195.813720] ip6_tunnel: xmit: Local address not yet configured! [ 195.828376] binder: undelivered TRANSACTION_ERROR: 29201 [ 195.831915] binder: BINDER_SET_CONTEXT_MGR already set [ 195.831923] binder: 7839:7849 ioctl 40046207 0 returned -16 [ 195.843129] binder: 7842:7848 got transaction with out-of-order buffer fixup [ 195.843159] binder: 7842:7848 transaction failed 29201/-22, size 112-24 line 3467 [ 196.561240] binder: undelivered TRANSACTION_ERROR: 29201 03:35:29 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:29 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/426], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:29 executing program 0: delete_module(&(0x7f0000000000)='\x00', 0x800) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='.dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="11075a85fa341e2c4b3b1a681c430fde5c42a2334b06f0fbe51cede8b45c8016dc", 0x21) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast2}, {0x6, @dev={[], 0x19}}, 0x8, {0x2, 0x4e22, @loopback}, 'rose0\x00'}) 03:35:29 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x1) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000180)={0x20000, {{0xa, 0x4e24, 0x10001, @mcast2, 0x2}}}, 0x88) 03:35:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee01) prctl$PR_SET_SECUREBITS(0x1c, 0x1b) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 198.068764] binder: 7855:7857 not enough space to store 1 fds in buffer [ 198.079975] binder: 7858:7861 got transaction with out-of-order buffer fixup [ 198.080008] binder: 7858:7861 transaction failed 29201/-22, size 112-24 line 3467 [ 198.080634] binder: undelivered TRANSACTION_ERROR: 29201 03:35:29 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 198.124839] binder: 7855:7857 transaction failed 29201/-22, size 112-24 line 3475 [ 198.144053] binder: 7874:7875 got transaction with out-of-order buffer fixup 03:35:29 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x43e) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="232130c5d90100d64aeeeb2b3307fc698f5fab00d9cf60e11d0a"], 0x7d) close(r0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffffffffffb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000180)="d90a21acf5f2d036da9d528e441702255248e6e6eb56d89867c9a1b92152cbbd2860fe30d3d45e0a67d2a9ba45d5d56a03a830490e4a14530f45cebfcf00259ee41567a51c52257dc5b11b217f2e6bf4a3f588e74d5b0db8cb6e06e44afcad3dc04a64daf659d8defb2129d44c4efcb3800b23d95d6fd22f0e4ff8254f356e11d0d1b6728d0949bb13ac85b338ab7d61695ac9", &(0x7f0000000000)="3947834cdda9cd1b31edab1337cec6479e0ddb9c34496438b4a22724df6e81d5659aa9d4ef77df487c9fea165f4f8cc79b0b9d32773489b429f2997c5447", 0x4}, 0x20) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000001b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000a40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'], &(0x7f0000001ac0)=[&(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000840)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000001440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000000440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xe6,\xf9\xec\x84R\xc2\x02\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=f\xf3\xca\'\xa8\x1b\xae\xff\xbe\xf9\xe7\xed34\x1c\xd1\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xffffffffffffff8b, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x1de, 0xfffffffffffffe37, &(0x7f0000000580)={@fda={0x66646185, 0x1, 0x0, 0x20}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0xa}}, &(0x7f0000000040)={0x0, 0x28, 0x410}}}], 0x32b, 0x0, 0x0}) 03:35:29 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = accept4$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c, 0x800) getsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = socket(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000380)=""/145) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', r6}) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req={0x3, 0x8, 0x265d, 0x8}, 0x10) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) [ 198.144084] binder: 7874:7875 transaction failed 29201/-22, size 112-24 line 3467 [ 198.146343] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.160629] binder: 7874:7878 got transaction with out-of-order buffer fixup [ 198.160658] binder: 7874:7878 transaction failed 29201/-22, size 112-24 line 3467 [ 198.161410] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.161875] binder: release 7873:7876 transaction 439 out, still active [ 198.161879] binder: undelivered TRANSACTION_COMPLETE 03:35:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003d80), 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004340)=[{{&(0x7f00000000c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/198, 0xffffffffffffffc6}, {&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000400)=""/131, 0x83}], 0x4, &(0x7f00000004c0)=""/31, 0x1f}, 0x8}, {{&(0x7f0000000500)=@pppoe, 0x80, &(0x7f0000004700)=[{&(0x7f0000000680)=""/18, 0x12}, {&(0x7f00000006c0)=""/155, 0x9b}, {&(0x7f0000004580)=""/156, 0x9c}, {&(0x7f0000000840)=""/251, 0xfb}, {&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000000a40)=""/179, 0xb3}], 0x6}, 0x10000009}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/137, 0x89}, {&(0x7f0000000c40)=""/130, 0x82}, {&(0x7f0000000d00)=""/250, 0xfa}, {&(0x7f00000046c0)=""/44, 0x22}], 0x4, &(0x7f0000000e80)=""/23, 0x17}, 0x1}, {{&(0x7f0000000ec0)=@vsock, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f40)=""/30, 0x1e}, {&(0x7f0000000f80)=""/217, 0xd9}], 0x2, 0x0, 0xd1}, 0x2}, {{&(0x7f00000010c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002540)=[{&(0x7f0000001140)=""/247, 0xf7}, {&(0x7f0000001240)=""/67, 0x43}, {&(0x7f00000012c0)=""/210, 0xd2}, {&(0x7f0000004640)=""/82, 0x52}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/152, 0x98}, {&(0x7f0000002500)=""/13, 0xd}], 0x7, &(0x7f00000025c0)=""/106, 0x6a}, 0xffff}, {{&(0x7f0000002640)=@isdn, 0x80, &(0x7f0000003b80)=[{&(0x7f00000026c0)=""/164, 0xa4}, {&(0x7f0000002780)=""/8, 0x8}, {&(0x7f00000027c0)=""/95, 0x5f}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/35, 0x23}, {&(0x7f0000003880)=""/58, 0x48}, {&(0x7f0000003900)=""/130, 0x82}, {&(0x7f00000039c0)=""/129, 0x81}, {&(0x7f0000003a80)=""/194, 0xc2}], 0xffffdf2}, 0x2}, {{&(0x7f0000003c40)=@caif=@dgm, 0x80, &(0x7f0000004280)=[{&(0x7f0000004540)=""/55, 0x37}, {&(0x7f0000003d00)=""/81, 0x51}, {&(0x7f0000003d80)=""/30, 0x1e}, {&(0x7f0000003dc0)=""/231, 0xe7}, {&(0x7f0000003ec0)=""/24, 0x349}, {&(0x7f0000003f00)=""/218, 0xda}, {&(0x7f0000004000)=""/145, 0x10b}, {&(0x7f00000040c0)=""/251, 0xfb}, {&(0x7f00000041c0)=""/169, 0xa9}], 0x9}, 0x1}], 0x7, 0xb3cb51d7c70c4272, &(0x7f0000004500)) [ 198.162602] binder: send failed reply for transaction 439, target dead [ 198.304488] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.362510] binder: 7885:7903 ioctl c0306201 20000140 returned -14 [ 198.365409] binder: 7902:7904 got transaction with invalid offset (0, min 40 max 112) or object. [ 198.365436] binder: 7902:7904 transaction failed 29201/-22, size 112-24 line 3379 03:35:29 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:30 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040), 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x183180, 0x1e5) openat$cgroup_ro(r3, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000800bd7000fddbdf250c0000000800040000000000b4000100080009000c0000000c0006006c626c637200000008000900230000000c00070004000000040000720800020005000000140001000800080000000000080008000000000008000459080000000800060000000000cec550c9a60a244286b4e2d5f6a9e065fc0ee2dec816c9fa617dd46b7720fab62a6ffc"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002abd7000fbdbdf250b0000004800010014000300fe800000000000000000000000000026080004004e210000c9fe0900650000000c0007003a0000001a000000080001000a0000000c0007000800000000000000080006000100000008000400c01200005c144e6aa095a4c61ac768b3df970505df7803f92e189f9d1f6578f8a7f53f01e4c02569640f06969fcc8eeb48e3bc25f7763a604baf77b8063a91e331c1e41432d026ef5f9b4341a0ff90830eb18fed7e5bf7dd71fa874a5dc5ebdfd7286d8a72cb4f60ef1aeb70edecbf6e9b6f497a0537a583"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r4, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2a, 0x22}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffff63}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r5 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @mcast1, 0xfffffffc}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r5, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:30 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) inotify_init1(0x80000) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_handle={0x77682a85, 0x1000}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/36, 0x24, 0x2}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) [ 198.448764] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.460142] binder: BINDER_SET_CONTEXT_MGR already set [ 198.460153] binder: 7902:7905 ioctl 40046207 0 returned -16 [ 198.460530] binder_alloc: 7902: binder_alloc_buf, no vma [ 198.460596] binder: 7902:7905 transaction failed 29189/-3, size 112-24 line 3284 [ 198.493998] binder: BINDER_SET_CONTEXT_MGR already set 03:35:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, 0x0, 0xfe4e}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1, 0x2}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000479b2ac6b4cea300150de644bb1e5d9c3100ff5c8c"], @ANYBLOB="000000080000000036fd56f2cfa6ada02c3604a6906745615f9355caca2597181a2db2f1471aa25947bd4c634fa03b5ab86a91678ebdacc338693f09ced06b519437889e953d690aec9c6319cbfc5b7d11ba75a76c945d36555cb5d33bd0e8862c5004100ef2e34c54386c90e1b93e17a1361eae2f1d8920c7b9e3c9a7046beaf01a670470baec31"], 0x0, 0x0, 0x0}) [ 198.494007] binder: 7889:7896 ioctl 40046207 0 returned -16 [ 198.572077] binder: BINDER_SET_CONTEXT_MGR already set [ 198.572085] binder: 7917:7930 ioctl 40046207 0 returned -16 03:35:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00'/16], 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x800, 0x80000001}, 0xc) 03:35:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0xffffffd3}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 198.580649] binder_alloc: 7902: binder_alloc_buf, no vma [ 198.580673] binder: 7917:7930 transaction failed 29189/-3, size 104-24 line 3284 [ 198.587605] binder: BINDER_SET_CONTEXT_MGR already set 03:35:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1802) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) read$FUSE(r1, &(0x7f0000001280), 0x1000) readv(r1, &(0x7f0000000580), 0x3c1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x141500, 0x0) ioctl$TCGETX(r3, 0x5432, &(0x7f00000000c0)) pause() ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000000)) write$binfmt_misc(r1, &(0x7f0000000180)={'syz0', "4cedb6ca8129dc5e0ba5ef4931a3de503a0d7d026c0af232cba8a353a599752352b1e439b096e4243f"}, 0x2d) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0xfffffffd, 0x0}, @ptr={0x70742a85, 0xfffffffd, 0x0}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 198.587612] binder: 7917:7933 ioctl 40046207 0 returned -16 [ 198.602418] binder: BINDER_SET_CONTEXT_MGR already set [ 198.602427] binder: 7932:7934 ioctl 40046207 0 returned -16 [ 198.602688] binder: 7932:7934 got transaction to invalid handle [ 198.602697] binder: 7932:7934 transaction failed 29201/-22, size 112-24 line 3138 [ 198.605745] binder: BINDER_SET_CONTEXT_MGR already set [ 198.605755] binder: 7932:7937 ioctl 40046207 0 returned -16 [ 198.609457] binder: 7932:7937 got transaction to invalid handle [ 198.609467] binder: 7932:7937 transaction failed 29201/-22, size 112-24 line 3138 [ 198.630235] binder: BINDER_SET_CONTEXT_MGR already set [ 198.630244] binder: 7936:7938 ioctl 40046207 0 returned -16 [ 198.630780] binder_alloc: 7902: binder_alloc_buf, no vma [ 198.630804] binder: 7936:7938 transaction failed 29189/-3, size 112-24 line 3284 [ 198.632562] binder: BINDER_SET_CONTEXT_MGR already set [ 198.632570] binder: 7940:7941 ioctl 40046207 0 returned -16 [ 198.633763] binder: BINDER_SET_CONTEXT_MGR already set [ 198.633771] binder: 7940:7943 ioctl 40046207 0 returned -16 [ 198.645632] binder: BINDER_SET_CONTEXT_MGR already set [ 198.645641] binder: 7936:7942 ioctl 40046207 0 returned -16 [ 198.645903] binder_alloc: 7902: binder_alloc_buf, no vma [ 198.645923] binder: 7936:7942 transaction failed 29189/-3, size 112-24 line 3284 [ 198.663157] binder: BINDER_SET_CONTEXT_MGR already set [ 198.663167] binder: 7944:7945 ioctl 40046207 0 returned -16 [ 198.664565] binder_alloc: 7885: binder_alloc_buf, no vma [ 198.664586] binder: 7944:7945 transaction failed 29189/-3, size 112-24 line 3284 [ 198.665392] binder: BINDER_SET_CONTEXT_MGR already set [ 198.665400] binder: 7944:7948 ioctl 40046207 0 returned -16 [ 198.665726] binder_alloc: 7885: binder_alloc_buf, no vma [ 198.665745] binder: 7944:7948 transaction failed 29189/-3, size 112-24 line 3284 [ 198.680886] binder: BINDER_SET_CONTEXT_MGR already set [ 198.680895] binder: 7947:7949 ioctl 40046207 0 returned -16 [ 198.681162] binder_alloc: 7902: binder_alloc_buf, no vma [ 198.681182] binder: 7947:7949 transaction failed 29189/-3, size 112-24 line 3284 [ 198.682174] binder: BINDER_SET_CONTEXT_MGR already set [ 198.682181] binder: 7947:7949 ioctl 40046207 0 returned -16 [ 198.821769] binder: BINDER_SET_CONTEXT_MGR already set [ 198.821777] binder: 7951:7957 ioctl 40046207 0 returned -16 [ 198.931613] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.937194] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.942708] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.948340] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.953921] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.959420] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.964937] binder: undelivered TRANSACTION_ERROR: 29201 [ 198.970480] binder: undelivered TRANSACTION_ERROR: 29189 [ 198.976122] binder: undelivered TRANSACTION_ERROR: 29189 03:35:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/95, 0x5f, 0x0, 0x25}, @fda={0x66646185, 0x4, 0x1, 0xc}, @flat=@binder={0x73622a85, 0x1004, 0x2}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0}) 03:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) accept$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) sendmmsg$sock(r0, &(0x7f0000001900)=[{{&(0x7f00000005c0)=@can={0x1d, r1}, 0x80, &(0x7f0000001800)=[{&(0x7f0000000640)="4b22cce647fbc8bb", 0x8}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="dc7a9fa9426994c038af726c8276617622f678471218cbbb6726b55d50803bff85e09e64944a8751a6b634c3", 0x2c}, {&(0x7f00000016c0)="f3bbba6772303541d41245bd32f4a746759198e5532152cf9be63eb53e227ee91e44f50fe047cc3f7f8af402012446e7cff2802a2c2cfe4027fff270707ba261ae", 0x41}, {&(0x7f0000001740)="e221606424d39f3c326298eb21bebd33fe0235c398bc02d412e6ba66f9ad4e8b43a5444044b0a8eec6ebf62470581ed2b36d7a416db609b0a65b77d71a272994c17c1f34782319713126714e3b7356b569b07841a1f01ac4c6b1b812cac0c01548b6f9e0a873a8d8f4fd29734cbafe849f691b8c86685caa6c4d76f830f9e64c497d", 0x82}], 0x5, &(0x7f0000001880)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xffff981c}}], 0x78}}], 0x1, 0x4000000) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) r3 = dup2(r2, r0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x2, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x10, 0x18, {0x764f, @bearer=@l2={'ib', 0x3a, 'nr0\x00'}}}}, ["", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x45000810}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4004048}, 0x40000) r5 = gettid() waitid(0x0, 0xffffffffffffffff, 0x0, 0x40000000, &(0x7f0000000480)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d3556900"/400], 0x190) ptrace$setopts(0x4206, r5, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:30 executing program 0: ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x19) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0xffffffffffffffda}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x36}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:30 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:30 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000000)={0x2, 0xff, 0x101, 0x6, 0x4, 0x9}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x361db7790b89cff3) ioctl$KDDISABIO(r3, 0x4b37) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000100)) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 199.045771] binder: 7962:7965 got transaction with too large buffer [ 199.054648] binder: 7962:7965 transaction failed 29201/-22, size 112-24 line 3493 [ 199.075092] binder: 7967:7968 got reply transaction with no transaction stack 03:35:30 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:30 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5) 03:35:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) restart_syscall() ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x105, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000dcedda7d80847ff23a788c21e7a88aa4b7e4e3d619a453b5e21454b4e98b60a7ee406f56676ffe194851b19c9a73d8e9b053cfd55c1b930f158b17f15b791eb816d1201db910680b3dbe40000000000000004562f12183a1e030fc0425204ae37e3d3b8f0e004d14b90536868598a2fd1ebd7fb18a26b0bb11b8050c84244209172817f2edf8d15ae5e31a314e3010caf87dc14b900e55bd886cea716a661bbeae17aa310290da9e124b56695fb1e7fbf405f721e8a51ef3aa", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYRESHEX=r2], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000030000000000000228300000000"], @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00'], 0x311, 0x0, 0x0}) [ 199.075150] binder: 7967:7968 transaction failed 29201/-71, size 96-24 line 3046 [ 199.075356] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.112204] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.156272] binder: 7985:7988 not enough space to store 1 fds in buffer [ 199.167475] binder_alloc: 7986: binder_alloc_buf size -5380776698891213504 failed, no address space [ 199.167657] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:35:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) ioctl$sock_inet_SIOCSIFPFLAGS(r6, 0x8934, &(0x7f00000001c0)={'bcsf0\x00', 0x7}) r7 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f00000006c0)=0xfffffffffffffec8) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000540)={@mcast2, 0x4e, r8}) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000180)='bridge0\x00') r9 = syz_open_dev$binderN(0x0, 0x0, 0x800) lseek(r9, 0x92, 0x2) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a62770a000000000000000000000000000000000000008561646600"/96], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00001a000000000000000000905d41a3cf68fca500000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 199.167679] binder: 7986:7989 transaction failed 29201/-28, size 112-24 line 3284 [ 199.167696] binder: 7986:7989 ioctl c0306201 20000140 returned -14 [ 199.167861] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.230394] binder: 7985:7988 transaction failed 29201/-22, size 112-24 line 3475 [ 199.241320] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.247363] binder: BINDER_SET_CONTEXT_MGR already set [ 199.247372] binder: 7985:7996 ioctl 40046207 0 returned -16 [ 199.323668] ip6_tunnel: xmit: Local address not yet configured! [ 199.413604] ip6_tunnel: xmit: Local address not yet configured! 03:35:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0xff0d}}}], 0x1a8, 0x0, 0x0}) 03:35:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1c}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x10000000}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:31 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r0, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000)=0x0) setfsuid(r2) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r3, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) tkill(r4, 0x25) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040), 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x2f}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:31 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 199.512350] binder: 8008:8012 got transaction with out-of-order buffer fixup [ 199.525021] binder: 8008:8012 transaction failed 29201/-22, size 112-24 line 3525 [ 199.534630] binder: undelivered TRANSACTION_ERROR: 29201 [ 199.541525] binder: 8013:8017 got transaction with invalid offset (65293, min 80 max 112) or object. 03:35:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8300000ddffe72262abfffa90b66d692b40eae75889745672e85ba25c3d2eea30414d41a56e320b25b18c081a4a1fd688266481d1899b0867734dc9d939f26375c6b14ec2b0574d670b2cb765f12d8dcfaa91464f621f9ed0d2a9bcf18522", @ANYRES16=r4, @ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0xdb1fed1f24f7388}, 0x80) pipe(&(0x7f0000000200)={0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r7 = getgid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000680)={0x158, 0x0, 0x5, [{{0x0, 0x3, 0x5, 0x3, 0xf175, 0x1, {0x3, 0x2, 0x4, 0x100000001, 0x1, 0x1000, 0x3, 0x2, 0x2, 0x10000, 0x2311, r6, r7, 0x4, 0x1}}, {0x0, 0x6, 0x7, 0x0, 'TIPCv2\x00'}}, {{0x0, 0x1, 0xb0, 0xffffffff, 0x5, 0x1, {0x6, 0x2, 0x1000, 0xffffffff, 0x28000000, 0x0, 0x3ff, 0x3, 0x7, 0x2, 0xf458, r8, r9, 0xfffffffb, 0x2}}, {0x5, 0x3f, 0xd, 0x0, '/dev/binder#\x00'}}]}, 0x158) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r4, 0x14, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x0) 03:35:31 executing program 4: mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x537010cec23216bc, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10) getsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000180)={@empty, @multicast1}, &(0x7f00000001c0)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) prlimit64(0xffffffffffffffff, 0x7, &(0x7f0000000240)={0xfe, 0x7fff}, &(0x7f0000000280)) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0x0, 0x6}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYPTR=&(0x7f0000000580)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20, 0x0, 0x0}) [ 199.541552] binder: 8013:8017 transaction failed 29201/-22, size 112-24 line 3379 [ 199.541566] binder: 8013:8017 ioctl c0306201 20000140 returned -14 [ 199.545966] binder: BINDER_SET_CONTEXT_MGR already set [ 199.545975] binder: 8013:8019 ioctl 40046207 0 returned -16 [ 199.552634] binder_alloc: 8013: binder_alloc_buf, no vma [ 199.552655] binder: 8013:8019 transaction failed 29189/-3, size 112-24 line 3284 [ 199.552672] binder: 8013:8019 ioctl c0306201 20000140 returned -14 [ 199.556759] binder: BINDER_SET_CONTEXT_MGR already set 03:35:31 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 199.556769] binder: 8008:8021 ioctl 40046207 0 returned -16 [ 199.601536] binder: BINDER_SET_CONTEXT_MGR already set [ 199.601544] binder: 8024:8028 ioctl 40046207 0 returned -16 [ 199.602190] binder_alloc: 8013: binder_alloc_buf, no vma [ 199.602210] binder: 8024:8028 transaction failed 29189/-3, size 112-24 line 3284 [ 199.613814] binder: BINDER_SET_CONTEXT_MGR already set [ 199.613828] binder: 8024:8028 ioctl 40046207 0 returned -16 [ 199.634271] binder: BINDER_SET_CONTEXT_MGR already set [ 199.634280] binder: 8034:8035 ioctl 40046207 0 returned -16 [ 199.634908] binder_alloc: 8008: binder_alloc_buf, no vma [ 199.634928] binder: 8034:8035 transaction failed 29189/-3, size 112-24 line 3284 [ 199.807944] binder: undelivered TRANSACTION_ERROR: 29189 [ 199.813747] binder: undelivered TRANSACTION_ERROR: 29189 [ 199.819234] binder: undelivered TRANSACTION_ERROR: 29201 03:35:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000000c0)=""/116) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x18, 0x0, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a747000000000000000000000000000000000000000000000000000000000010000852a747000000100000000000000000000000000000000000020000000000000000400000000000085616466000000000000000000000000000000000000000000000000ce9137ef6a32bfb580dbd158bdad39ce7f3408b001d3ff5a87843b643bfb8c478eca4d2940e90d88e27c09cee8e6b00d36e5c77f754676d3e8b010c1b5b68eef2f72c228e95140105729a8690210d4ae8d960dbaaa6eb40ca6545928d59a772449fc4140c9a3cd00d8675d195da5079c12aac4be56a8dfb3000000000000000000"], @ANYPTR64, @ANYRES32=r1], 0x0, 0x0, 0x0}) 03:35:31 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)={0x8000000, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:31 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x800, 0xc4, 0x1, 0x6}, {0x9, 0xf7, 0x0, 0x672}]}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a74700000000000000000000000000000000000000000000000000000000000001b3e0c444e1f2e44b412293651faf593000000000000852a74700000000000080000000000000000000000000000000000fd008561646600"/117], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:31 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:31 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 200.056115] binder: 8055:8058 unknown command 5 [ 200.058055] binder_alloc: 8060: binder_alloc_buf, no vma [ 200.058073] binder: 8060:8065 transaction failed 29189/-3, size 112-24 line 3284 [ 200.058247] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.095900] binder: 8070:8071 got transaction with invalid offset (40, min 40 max 112) or object. [ 200.095926] binder: 8070:8071 transaction failed 29201/-22, size 112-24 line 3379 [ 200.096088] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.191196] binder: 8055:8058 ioctl c0306201 20000140 returned -22 [ 200.219249] binder: 8055:8089 unknown command 5 [ 200.224841] binder: 8055:8089 ioctl c0306201 20000140 returned -22 [ 200.427981] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.430262] binder: 8034:8042 not enough space to store 1 fds in buffer [ 200.430288] binder: 8034:8042 transaction failed 29201/-22, size 112-24 line 3475 03:35:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xac, r1, 0x122, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}]}, 0xac}}, 0xd4fd9d266d4cf092) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) fcntl$getflags(r0, 0xc1b) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x8000) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:32 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:32 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) fchdir(r0) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x91, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRESHEX=r3, @ANYRES16=r0, @ANYBLOB="2c4cfc9e6b5aac61df748e86c466e236f608dd4038c01acd0addfdbfe34a1730ec03e31be6e485ef5a8fbfd299b36fa6ca9167a29465a7f084b32c52891c0e4b37616495f8dea0c3f7dc5921ef667cdf84be7da146d1c8e0f121915cfa6becae31e7e39435e5c316e250bbb63e44b114f85c23f8b72bc661308e71c3110879acef3b6b5e1ac95d093e24c6b18e27c2cc171d8667ff4730aeb4556b70731179d62a3f001927ee652f"]], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="0055e96c920ae211b2180000000000000028000000000000005000000200003413"], @ANYBLOB="0000000000000000403a2a6f55a91c3da302249bc3fe459a79b47f4e9d111d1a2833cd2c35a6b036b6cd99d2107f348a1ba43f05bb3ad229659ed10842100122ddd54d2397ec04e2b0165eb497"], 0x0, 0x0, 0x0}) 03:35:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc06776eba472253a, &(0x7f0000000000)=0x40000005, 0x21) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0xa, 0x2}, 0x10) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000100)={0x19, 0x3, 0x8001}) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6b8aac6c300"/400], 0x190) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 200.482142] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.513618] binder: 8098:8102 got transaction with invalid offset (1288604067390117120, min 0 max 112) or object. 03:35:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000008561646600"/97], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/r#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 200.518168] audit: type=1400 audit(1572838532.063:26): avc: denied { write } for pid=8100 comm="syz-executor.3" name="net" dev="proc" ino=23059 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 03:35:32 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:32 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = eventfd(0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000000)={0x0, @aes128}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x1) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000340)=0xaf2) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f0000000280)=[@acquire, @enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/21, 0x15, 0x2, 0x13}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000240)={0x0, 0x28, 0x40}}}], 0x59, 0x0, &(0x7f0000000400)="fd57b6493360a802fb52b35638dff77a97ad76ead3c56a4bd2480cbac54d3cc00315ff0fa55108d643c8f4c50f0cf26b1d316c3d7ef0dcb975fdc0d38c698e6a05524aeed81c6f516147bb5f1cd9c9bde64708eba768abed78"}) 03:35:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000380)={0x1, 0x2, 0x1000, 0xfd, &(0x7f0000000200)="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", 0x64, 0x0, &(0x7f0000000300)="a8f53c7f85d6c820f1db9bd085821ce949c101b3fb7c4565a004bc4284308e585e790a84146f8274ff5119125a079af16ff86994f2b7ae10ee5700241bc5325079a15abed2cd8b325b28bbe1f148e31df991a6aac77589ffaa15cc0012a7837c671b15dc"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000002000000000000000300000200000000852a74700000400000000000000000000000000000000000000000000000000000000000000000008561646600000000010000000000000001000000000000000800000000000000"], @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB="00000000001000005afeffffffffffff50000000000000005baee31092fe3e8654d5c4aa7c152d3592c31a972efd977ddfcb5fcd60484428c3105010d0f3a805957b7951ec8bd5d4f9288f9cc265f0567bf19b2c7f5fd32dc0647233b7776392646f78ed49cb7c14d5d687eb4cffa3e888133e5a0c10c1fa8f9a9ce8d698561c9d38177a02b2623a9bbe1e1c7a8470"], @ANYBLOB="0010000000000000"], 0x0, 0x0, 0x0}) [ 200.518540] audit: type=1400 audit(1572838532.063:28): avc: denied { add_name } for pid=8100 comm="syz-executor.3" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 200.520274] audit: type=1400 audit(1572838532.063:27): avc: denied { ioctl } for pid=8097 comm="syz-executor.2" path="socket:[23061]" dev="sockfs" ino=23061 ioctlcmd=0x5411 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:35:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0xc) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x9, 0x0) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000000c0)={{0x2e4cb47f290ef6a3, 0x0, @reserved="1b7894cba5f7d90ef20ce66cdaec5dc43a86707c8c1d9cb3df979cd94e7588e5"}, 0xd, [], "a4947bb07bae4c24c70ed5a862"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:32 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(0x0, 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 200.521096] audit: type=1400 audit(1572838532.063:29): avc: denied { create } for pid=8100 comm="syz-executor.3" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 200.544778] ip6_tunnel: xmit: Local address not yet configured! [ 200.549497] binder: 8097:8105 got transaction with out-of-order buffer fixup [ 200.549529] binder: 8097:8105 transaction failed 29201/-22, size 112-24 line 3467 [ 200.549812] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.567809] binder: 8101:8107 not enough space to store 1 fds in buffer [ 200.567836] binder: 8101:8107 transaction failed 29201/-22, size 112-24 line 3475 [ 200.568008] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.573651] ip6_tunnel: xmit: Local address not yet configured! [ 200.581480] audit: type=1400 audit(1572838532.123:30): avc: denied { ioctl } for pid=8097 comm="syz-executor.2" path="socket:[23079]" dev="sockfs" ino=23079 ioctlcmd=0x6201 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 200.625260] binder: 8128:8130 got transaction with invalid offset (80, min 80 max 112) or object. [ 200.625289] binder: 8128:8130 transaction failed 29201/-22, size 112-24 line 3379 [ 200.625455] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.639650] binder: BINDER_SET_CONTEXT_MGR already set [ 200.639659] binder: 8128:8134 ioctl 40046207 0 returned -16 [ 200.640171] binder: 8128:8134 transaction failed 29189/-22, size 112-24 line 3138 [ 200.640445] binder: undelivered TRANSACTION_ERROR: 29189 [ 200.687742] binder: 8145:8148 not enough space to store 1 fds in buffer [ 200.687770] binder: 8145:8148 transaction failed 29201/-22, size 112-24 line 3475 [ 200.687933] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.694032] binder: 8145:8153 not enough space to store 1 fds in buffer [ 200.694059] binder: 8145:8153 transaction failed 29201/-22, size 112-24 line 3475 [ 200.694324] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.756153] binder: 8151:8157 got transaction with out-of-order buffer fixup [ 200.756184] binder: 8151:8157 transaction failed 29201/-22, size 112-24 line 3467 [ 200.760893] binder: 8156:8160 ioctl 40806685 20000380 returned -22 [ 200.761011] binder: 8156:8160 got transaction with invalid offset (17592186044416, min 0 max 112) or object. [ 200.761039] binder: 8156:8160 transaction failed 29201/-22, size 112-24 line 3379 [ 200.761193] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.762401] binder: 8156:8161 ioctl 40806685 20000380 returned -22 [ 200.828194] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.828379] binder: BINDER_SET_CONTEXT_MGR already set [ 200.828387] binder: 8151:8163 ioctl 40046207 0 returned -16 [ 200.839912] binder: 8164:8165 not enough space to store 1 fds in buffer [ 200.839945] binder: 8164:8165 transaction failed 29201/-22, size 112-24 line 3475 [ 200.840216] binder: undelivered TRANSACTION_ERROR: 29201 [ 200.853670] ip6_tunnel: xmit: Local address not yet configured! [ 201.121600] binder: 8098:8102 transaction failed 29201/-22, size 112-24 line 3379 [ 201.131567] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.137844] binder: 8098:8102 got transaction with invalid offset (1288604067390117120, min 0 max 112) or object. [ 201.148313] binder: 8098:8102 transaction failed 29201/-22, size 112-24 line 3379 03:35:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:32 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(0x0, 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000700)=0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0xa0, 0x0, &(0x7f0000000440)=[@register_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/236, 0xec, 0x0, 0x36}, @fda={0x66646185, 0xa, 0x0, 0x23}, @flat=@handle={0x73682a85, 0xd6860fbd53322e6, 0x2}}, &(0x7f0000000280)={0x0, 0x28, 0x48}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/174, 0xae, 0x1, 0xf}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x180, 0x2}}, &(0x7f0000000400)={0x0, 0x28, 0x40}}, 0x40}, @enter_looper], 0x45, 0x0, &(0x7f0000000500)="7d5ba5821fe759a18a98d1bd9d29f9e2eeafb9c10db0578cb0f8a91678142b7b3d96b10bed2483ea5781532281de2a713ea9e77ceb9f882e1bf6e6db043e5a2cc260fe91ab"}) 03:35:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000003d80), 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040), 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES64=r3], @ANYPTR64=&(0x7f0000001b40)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64], @ANYRES32=r0, @ANYRES32=0x0], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r4, @ANYRESHEX=r5, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYPTR, @ANYRESOCT, @ANYRES16, @ANYPTR, @ANYRESHEX], @ANYRESHEX=r0], @ANYPTR], 0x4) r7 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, &(0x7f0000000000)) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040), 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0xffffff80, 0x4) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x1806) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:32 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(0x0, 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 201.156595] binder: undelivered TRANSACTION_ERROR: 29201 03:35:32 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(0x0, 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 201.188085] binder: 8182:8184 not enough space to store 1 fds in buffer [ 201.204562] binder_alloc: 8181: binder_alloc_buf, no vma [ 201.204584] binder: 8181:8188 transaction failed 29189/-3, size 112-24 line 3284 03:35:32 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(0x0, 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@flat=@weak_handle={0x77682a85, 0x1201}, @flat=@binder={0x73622a85, 0x100, 0x2}, @fda={0x66646185, 0x0, 0x1, 0x1}}}}], 0x0, 0x0, 0x0}) [ 201.206682] binder: release 8186:8191 transaction 513 out, still active [ 201.206687] binder: undelivered TRANSACTION_COMPLETE [ 201.207614] binder: send failed reply for transaction 513, target dead 03:35:32 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(0x0, 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="7ea0cabc19123010b40df1cee67cfabf1820b1f0d43153be60a0544eb4f63628706c5d00b82cc597f4c8d6f3d6dc17507106a8f7b026507e2ca37539cce09ae15f2310d64b53cfb608568bc53f22", 0x4e) r1 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x20) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000680)=""/4096) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x3d, 0x0, &(0x7f00000000c0)="5b5bd13052d5204e00ca7fae8023ff4616ad9a21ad5f3d158c3375b1137da8c82fd6e09cb000a7f9020301a3e06209f07af2f9d9019d092d98dd2bd472"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:32 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 201.221028] binder: release 8186:8193 transaction 515 out, still active [ 201.221033] binder: undelivered TRANSACTION_COMPLETE [ 201.253905] binder: send failed reply for transaction 515, target dead 03:35:32 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:32 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 201.282866] binder: 8202:8205 got reply transaction with no transaction stack [ 201.282875] binder: 8202:8205 transaction failed 29201/-71, size 0-0 line 3046 [ 201.283028] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.359108] binder_alloc: 8214: binder_alloc_buf, no vma [ 201.359128] binder: 8214:8217 transaction failed 29189/-3, size 112-24 line 3284 [ 201.359667] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.374836] binder_alloc: 8214: binder_alloc_buf, no vma [ 201.374854] binder: 8214:8221 transaction failed 29189/-3, size 112-24 line 3284 [ 201.375257] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.468728] binder: 8182:8184 transaction failed 29201/-22, size 112-24 line 3475 [ 201.482048] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.494323] binder: 8182:8184 not enough space to store 1 fds in buffer [ 201.501159] binder: 8182:8184 transaction failed 29201/-22, size 112-24 line 3475 [ 201.511758] binder: undelivered TRANSACTION_ERROR: 29201 [ 201.643615] ip6_tunnel: xmit: Local address not yet configured! 03:35:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @window={0x3, 0x1f, 0xce5}], 0x140054ac40dfec25) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1, 0x11, r0, 0x3) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) r3 = accept4$inet(r2, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r3) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xc37cfc1720875701) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000060024c8662b545bb772f03fe757c4d96f92bc0f3a06127d2fd29d2c7d9db26166f24a5a65044953477d30952b907ddb3d0bca0d000000000000c74bec00"/80], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) mmap$binder(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x22) 03:35:33 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:33 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1163480000000000000000003e0000000000000000000000000000000070000000000000001800"/49, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000005000000000000000050000000000000002fbcd895baceb8f2dfba8d3e1ff1f9cfa3021d1f503675fb21b312cbb09e6884f85c85b666a36eb6537845ac41b1c0d19b876bc8d07c52c65fd50c5d6b41a8baadbf4768db4c1fcaf891798751803096336ade37e655ca212297d5ec469ed98ec6000a2f0c0c7586888767df37ecb87f4741c1cc0b6ba5cd4fd1ac0f57036447dd15130d60ddbb3b9f"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x9, 0x1, 0x0, r3}) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000003d80), 0x0, 0x0, 0x0) getsockopt$inet_opts(r4, 0x0, 0x16, &(0x7f0000000240)=""/169, &(0x7f0000000100)=0xa9) 03:35:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000455875a3cc07c8d1a2353e2a4e88f2ca000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 201.985371] binder: undelivered TRANSACTION_ERROR: 29189 03:35:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'nlmon0\x00', {0x2, 0x4e23, @broadcast}}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 202.036672] binder_alloc: 8236: binder_alloc_buf size 1688849860264072 failed, no address space [ 202.049042] binder: 8240:8243 unknown command 4743953 [ 202.049049] binder: 8240:8243 ioctl c0306201 20000140 returned -22 [ 202.065212] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 202.067413] binder_alloc: 8245: binder_alloc_buf size -8624909789691667264 failed, no address space 03:35:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0x14}, 0x8}}, 0x0, 0xbc9, 0x0, "16a4de1b4f2163ba1809a5f7e12d111e78f5a053d3b70af7d12342ef23210af47ca04ceaa04e186dca932a83dc73d0d8be45c340c511d8c7b0a4df1234b74c4072cd17e5a258265eed64977fb8f45167"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d3556900"/400], 0x190) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:33 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 202.067420] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 202.067439] binder: 8245:8247 transaction failed 29201/-28, size -8624909789691719224-51954 line 3284 03:35:33 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x891a, &(0x7f0000000000)={'dummy0\x00', @ifru_map={0x64, 0x2, 0x3f, 0x2d, 0x1, 0x81}}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003d80), 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r3) r4 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r4, &(0x7f0000002340), 0x0) readv(r4, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r4, 0x5432, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r5, &(0x7f0000002340), 0x0) readv(r5, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r5, 0x5432, &(0x7f00000002c0)) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a8a61166020abf402f068cb399974700000000004000000000000000000000000000000000000000000000000000000000000008561646600"/125], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(+\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 202.067589] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.068968] binder_alloc: 8245: binder_alloc_buf size -8624909789691667264 failed, no address space [ 202.068976] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 202.068998] binder: 8245:8250 transaction failed 29201/-28, size -8624909789691719224-51954 line 3284 [ 202.069345] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.099482] binder: 8256:8257 got transaction with out-of-order buffer fixup [ 202.099510] binder: 8256:8257 transaction failed 29201/-22, size 112-24 line 3467 03:35:33 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:33 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 202.099749] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.119615] binder: 8256:8260 got transaction with out-of-order buffer fixup [ 202.119648] binder: 8256:8260 transaction failed 29201/-22, size 112-24 line 3467 [ 202.120051] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.287636] binder: 8236:8238 transaction failed 29201/-28, size 112-24 line 3284 03:35:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setgid(r3) 03:35:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, "e369c44ac15996f8"}) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x190) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:34 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 202.836303] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.855876] binder: 8240:8243 unknown command 4743953 [ 202.861102] binder: 8240:8243 ioctl c0306201 20000140 returned -22 [ 202.872521] binder: release 8296:8300 transaction 538 out, still active 03:35:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0xc02) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:34 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x200}) writev(r3, &(0x7f0000000040), 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x5) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x10280, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f00000003c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) splice(r8, &(0x7f0000000780)=0x3f, r9, &(0x7f00000007c0)=0x8f, 0xffffffffffffffff, 0xb) r10 = accept4$inet(0xffffffffffffffff, &(0x7f0000000b40)={0x2, 0x0, @local}, &(0x7f0000000b80)=0x10, 0x800) getsockopt$inet_buf(r10, 0x0, 0x11, &(0x7f0000000bc0)=""/184, &(0x7f0000000c80)=0xb8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000600)={0xd0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="04630440000000000b6300000f630c4000000000000000000000000012634840000000000000000000000000000000000000000000000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="852a62770001000003000000000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/245], @ANYBLOB="f50000000000000002000000000000001b00000000000000852a6277000100000200"/48], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000045630200"/24], @ANYBLOB="6010000000000000056304400100000007630440030000000d63000000634040010000000000000000000000000000000000000011000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="8561646600000000050000000000000002000000000000000800000000000000852a62770000000000000000000000000000000000000000852a646600000000", @ANYRES32=r7, @ANYBLOB='\x00'/12], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f630c400300"/16], 0x3b, 0x0, &(0x7f00000005c0)="a909efc5c3a2e39d5f53419c0cd055b6fcb32db5814b276848736e60ee5a8de3234a2749029b2ea48f265968e4742c13ce7d6cb243de625ad91768"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x1a, 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000100)=ANY=[], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESOCT], @ANYBLOB="000000000000000090ba20abbd2832a3c37a075dbe35496db7c85bcb4cbf6f21d30b165894fc4393dbb978609474fa76b86dc474e1b4436c4dadde1df5825de1ac4208b87a0fc45b26a0d25d47b0fa019787abb821c48f52a2a55c9ed164bc32fa20f74f4a"], 0x0, 0x0, 0x0}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000700)={'netdevsim0\x00', {0x2, 0x4e20, @multicast1}}) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000800)=""/77, &(0x7f0000000880)=0x4d) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x3000802}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)={0x1e4, r11, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc41}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10019}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3366}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffff81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xdad9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf27}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x18, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'nlmon0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x40}, 0x40) [ 202.883754] binder: undelivered TRANSACTION_COMPLETE [ 202.886185] binder: BINDER_SET_CONTEXT_MGR already set 03:35:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="40006e148269905366b39628de859142470e0100dad4a471bacabef3b20a8b178748965705f27ddd9dde7911f1ce10e75f91c769ba06870d54350ad068d34ed4c507d5b22e8d23364f8218901d1d3e5faa35716b709a9fd7e384503fb69ba18b33aebb3ad49ddc0a4edc413423898ba7f62b43d12e16bdadf06928874b0c944628fecbd3c1045f93fd5433c4e80f2c1cb85bd7876647889d77812d198211c4e903c191445b6bca13e5598370857bd1a5ef53ef1ea93a07110f40ea34c7b3bb7b23dc981720aa415605457b1d6419e8a7253e2fd98fc31c81a8d6"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@empty]}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 03:35:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="116348400000000000d3000000000000000000000000000000000000007000000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) [ 202.886199] binder: 8296:8302 ioctl 40046207 0 returned -16 [ 202.891134] binder_alloc: 8296: binder_alloc_buf, no vma [ 202.891154] binder: 8296:8302 transaction failed 29189/-3, size 112-24 line 3284 [ 202.922780] binder: BINDER_SET_CONTEXT_MGR already set [ 202.922788] binder: 8307:8309 ioctl 40046207 0 returned -16 [ 202.927237] binder_alloc: 8240: binder_alloc_buf, no vma [ 202.927259] binder: 8307:8309 transaction failed 29189/-3, size 112-24 line 3284 [ 202.935942] binder: BINDER_SET_CONTEXT_MGR already set [ 202.935952] binder: 8307:8313 ioctl 40046207 0 returned -16 03:35:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) ioctl$FICLONE(r2, 0x40049409, r3) 03:35:34 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:34 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 202.968378] binder: BINDER_SET_CONTEXT_MGR already set [ 202.968387] binder: 8316:8317 ioctl 40046207 0 returned -16 [ 203.002214] binder: BINDER_SET_CONTEXT_MGR already set [ 203.002222] binder: 8319:8321 ioctl 40046207 0 returned -16 [ 203.002544] binder_alloc: 8240: binder_alloc_buf, no vma [ 203.002563] binder: 8319:8321 transaction failed 29189/-3, size 103079215104-2305849056527646720 line 3284 03:35:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x84000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket(0x4, 0x3, 0x3f) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x170, 0x10, 0xb, 0x8eff71c8e2c96d1a, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0xa}, [@nested={0x15c, 0x55, [@typed={0x4, 0x16}, @generic="343fdd1bf04e0f7e0794236b7895b76e36a4cd7dc67ddeffc30b32ca144d3f33deb4c603e8390b25f36a180f2142dd68e189f23f66d14c43ea81415e39f996a793b8bc00c893993430149b62d38c2f2e538c6579d3372544f1e015d9ac2b62b5e13ce33d1983f59148bfee8727194d34be9e3792200967a093d9713ec3b79d0b44fec0b951b9c5815ab376faf052693d89736a750a33f70d00e4da8e31bc2fd6ad5ee8de96e04e66ca96bc73780e1b5c61e3f58a76deacabbe294f8ae8c91dc05e795fe624d2de261446d47f4e1642264ed51ac72bc88c6897d6f043af1dcb", @generic="b55f4e5fee0f32cd585af10babb206a7483bbacb4731ceea65052b7f72ed9b9815", @generic="e9cc3cebac9cc1abf45958ad645ceb9cf8d6c82f4d7372de32b1d4bf30a8564799d0e59dfef086dd6954e7256544eef3ccdad4ba", @generic="e30101afd89b253b035f4dc8134539944e0537", @typed={0xc, 0x5d, @u64=0xe55}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000000}, 0x4060890) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) eventfd2(0x6a7, 0x802) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040), 0x0) r6 = accept(r5, &(0x7f0000000440)=@x25, &(0x7f0000000040)=0x80) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000500)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r7, 0xa5228dfea950a615, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8}, {0x8, 0x1, r4}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r3, 0x0, 0xd, &(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x1, 0x1, 0x36}, @fda={0x66646185, 0x1, 0x1, 0x3c}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000400)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) [ 203.034783] binder_alloc: 8324: binder_alloc_buf size 274878283776 failed, no address space [ 203.034790] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 203.034811] binder: 8324:8325 transaction failed 29201/-28, size 137439313920-137438969856 line 3284 [ 203.035503] binder: 8316:8326 unknown command 16777219 [ 203.035511] binder: 8316:8326 ioctl c0306201 200000c0 returned -22 [ 203.041508] binder: BINDER_SET_CONTEXT_MGR already set [ 203.041518] binder: 8324:8328 ioctl 40046207 0 returned -16 [ 203.074890] binder: BINDER_SET_CONTEXT_MGR already set [ 203.074899] binder: 8330:8332 ioctl 40046207 0 returned -16 [ 203.075365] binder_alloc: 8324: binder_alloc_buf, no vma [ 203.075386] binder: 8330:8332 transaction failed 29189/-3, size 112-24 line 3284 [ 203.106917] binder: BINDER_SET_CONTEXT_MGR already set 03:35:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) write$P9_RAUTH(r1, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x81, 0x0, 0x2}}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x81) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000090000920dea9b1606b7ec5c46"], 0x0, 0x0, 0x0}) 03:35:34 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 203.106926] binder: 8316:8326 ioctl 40046207 0 returned -16 [ 203.110074] binder: BINDER_SET_CONTEXT_MGR already set [ 203.110087] binder: 8330:8336 ioctl 40046207 0 returned -16 [ 203.111204] binder_alloc: 8324: binder_alloc_buf, no vma [ 203.111233] binder: 8330:8336 transaction failed 29189/-3, size 112-24 line 3284 [ 203.133638] ip6_tunnel: xmit: Local address not yet configured! [ 203.176772] binder: BINDER_SET_CONTEXT_MGR already set 03:35:34 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:34 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 203.176781] binder: 8344:8349 ioctl 40046207 0 returned -16 [ 203.191113] binder_alloc: 8296: binder_alloc_buf, no vma [ 203.191134] binder: 8344:8349 transaction failed 29189/-3, size 112-24 line 3284 [ 203.197292] binder: BINDER_SET_CONTEXT_MGR already set [ 203.197303] binder: 8344:8353 ioctl 40046207 0 returned -16 [ 203.204004] binder: BINDER_SET_CONTEXT_MGR already set [ 203.204012] binder: 8346:8351 ioctl 40046207 0 returned -16 [ 203.273726] binder_alloc: 8324: binder_alloc_buf, no vma [ 203.273745] binder: 8346:8357 transaction failed 29189/-3, size 88-24 line 3284 [ 203.349698] binder: BINDER_SET_CONTEXT_MGR already set [ 203.349717] binder: 8359:8366 ioctl 40046207 0 returned -16 [ 203.350054] binder_alloc: 8296: binder_alloc_buf, no vma [ 203.350073] binder: 8359:8366 transaction failed 29189/-3, size 112-24 line 3284 [ 203.371772] binder: BINDER_SET_CONTEXT_MGR already set [ 203.371782] binder: 8359:8366 ioctl 40046207 0 returned -16 [ 203.487588] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.493257] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.498878] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.504526] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.510711] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.516425] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.526699] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.532570] binder: send failed reply for transaction 538, target dead [ 203.583682] ip6_tunnel: xmit: Local address not yet configured! 03:35:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000680)=""/4096) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:35 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x2}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe6c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000009000000000000000000000000000000000070000000000000001300000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7460000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000003400000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:35 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x0, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)="e8406a99f7ffd39efcbafcd77962da8a5c349778ff9aa70a76b385afd45397157457d6e36cda2e27ff208d6aaddd5a8e699ddb159a425247f87378678c14f0fb1aef38ef28fa2f5eb069707792e739fd9640df0ceaf9bba97978a6ee90574a4df9edd71f2888040c88fc910ddecc03c9cb4e9c93cc4d196b64f5a954068d18f49f32000e117011180d073a1bfa07be471254e55940c780667608129e59da4e6050125cf1955958940b0834130c4501d78e893d2ec5435d162208d1948d51fccd66f5c767c9352882aa4c27a29111e81415468fd4e8aa3b043bc5bf09ad78fbc18e538848b5c1ae70bf431bf81d", 0xed) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000180012f908000100767469000c00020008000100", @ANYRES32=r4], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000000c0)={@ipv4={[], [], @loopback}, r4}, 0x14) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r6, &(0x7f0000002340), 0x0) readv(r6, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r6, 0x5432, &(0x7f00000002c0)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000002c0)=r6, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r8 = dup(0xffffffffffffffff) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/context\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') [ 203.785046] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.821418] binder: 8396:8399 not enough space to store 1 fds in buffer [ 203.841244] binder: 8396:8399 transaction failed 29201/-22, size 112-24 line 3475 [ 203.862371] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.884025] binder: release 8403:8404 transaction 554 out, still active [ 203.890825] binder: undelivered TRANSACTION_COMPLETE [ 203.891429] binder: 8396:8409 not enough space to store 1 fds in buffer [ 203.891459] binder: 8396:8409 transaction failed 29201/-22, size 112-24 line 3475 [ 203.931544] binder: undelivered TRANSACTION_ERROR: 29201 03:35:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) fchdir(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/199, 0xc7}, {&(0x7f0000000400)=""/76, 0x4c}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000680)=""/133, 0x85}], 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0xffffffffffffff9d}, @fda}, &(0x7f0000000040)={0xfffffffffffffeda, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 03:35:35 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x34, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x2}], 0xda, 0x0, &(0x7f0000000280)="0cd025b673ec46ebff23bcec911fe8a0c47432f1d13c4418529febfefac663ec386b9638c444b7d579a05035d3700c8a823abaa27d516af50a2a882aa6a4f8cce9b975acc3e5d3f711affae9c4135363cadaa6164e183dbf69f1a10ddc1d37701d21ce5bae92e27acc61b155a13084e59cd87085f04f8f9991cedb953faa0a8910916f3c159fc0f552ef4ebe387ac4a21d6b9c110a0363ecf1f87c46e2689a91c2ee082101ef9ec8bbff47a71228b27abaa363d368364a951d35229c6e5a1068790cbc83f4e5f390f761c0046f213e3776ac7501039f2dfe4ebd"}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_POLL(r1, &(0x7f0000000200)={0x18, 0x0, 0x2, {0x3}}, 0x18) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0xffa0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000000000000000da010000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="8561646600000000080000000000000000000000000000002f00000000000000852a7470000000000000000000000000000000000000000000000000000000002c00000000000000856164660000000001000000000000000100"/104], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000280000000000000044fdffffff20ffff"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000180)=""/90, 0x5a) 03:35:35 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x0, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d3556900000000000000000000000000000000000000000000000000000000000000000000f100"/400], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 203.962872] binder: undelivered TRANSACTION_ERROR: 29189 [ 203.974661] binder: send failed reply for transaction 554, target dead 03:35:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000020000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:35 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x0, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:35 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x0, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 204.027123] binder: release 8403:8410 transaction 559 out, still active [ 204.042769] binder: undelivered TRANSACTION_COMPLETE 03:35:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000dbe910ca0000"], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003d80), 0x0, 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000380)=0x1000005e6) setresuid(r5, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={r4, r5, r6}, 0xc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x1000, 0x0, &(0x7f0000000680)="1c4a6dbe40be06f33ae8eb44e6f75445b0f3987ee486fe53a8c41f7b4c3190bb71cd39df675aa74a5aa242014de197a0d15f3cc3c01e2733bb89867c7a0c2945f58a665fefe8adb28a42a0a027fdacedc139279430ab803c58ebc10ece2ed6fc26945b2dd504bec462080acfa2f80cdec639bab2cf7fed886de0d7d6f9b2ee588209bf0929216bc685ad98af85d366809582dfe9a9b2719d2c2453a4ca1b228e5a0ddc74def997b10261f6011c7e0992a28d933cada19c8ed8a58582a635749bb748ba01095c6352976aa337f1e4ddd8e21d6f684e3b11c7438a1544fc75084c6e71f4e738196f73144b2389e53fe739bd4586e5000f2aca570d8ed827d57cd4f73b4dbf99b623eb9ab33b70654cc8f020b747d58977c3e14cb4ab20622fe11d8dd8fa2156f48a71ca252ada9049599dfb37b14a89c5f754d312921560b520bf30ba79caa9beb832e00900d30a6c23e78fcea45897a7011f79a9121ca4a9096b8d70a3cd9444c6a8613049d56e9bbe0ca3d644da9485b0563e0813cf0f63c3b20c4dc53834b3007da0feab4febbe4dbe28f64b77c16d8f1198501772476771015df008a8ff50a153249732c9f87a837083aa703cb02398b1a7150c84e4433b588fd19e12c10cb1e97bf6085704544c7fd88bd35f74fac1c847ca012b3dec092cea373dfe6ae839ceee20ec1652af224859ff66345647e55b59d353d8663131cbdc634216d4f1159d7f8bb0aa1f650871ca1d3aceeadb1e8b3886e1947f7aa999b514f7b420ab040c4e5e0dc235c3ad40c2a2f917e9449a85667655a29eb714a7181b70337c3de720c044610ad92b88cd566e96b6228c9dbbbcbd0a0cf281a23f32fd8de4179d9a3b0765eef914f8efba5f25ee885492986e6d81ac9506ff5630d9ddb5ac343cd00af8800961b1a6039412481186565be7bc07267a255b150342498e553b606e1f1a5339f03e70f454323b858538547f8df93fe5a501f7cf76a904ded846416ee8fbb9b1e5ae7df021029149836e92af951fca53cc010af3adcf889794fc81dfc14675df7a87fea36d9eafca20e6b1db8666f241c5b631753d7d563574452eeef8e8bd50d570576fc4d3586f9fefb77080ee42050d56e09300c0ba841f432a4e2db5f6dbbed3785c538cb7257c45ef3173489663a309383d101cb2b689313158b7afd08a003be186f1d2ec9e017142a7073f2d4f1c89df56008009a32e2f6d4578376ff72e7059bb71c3f679d2165cda7fe6f0b3855029f6167c925947457cde046294985b3cdf609c52678b283f712b90a31c8b966917d265334f8b13ba440f8ec7c608fa85917efc9311ede7ede2618d99c3665694e87960e1a2df52197c1a28ef2a88bb139cb6dc1a8049b96ccbf1c42603cd81f41140a32d505782b722922c361d76a2b8c057b1d5c5d40f556a10f05a968c51c1ee70a5cb8eb7722037522faafd250abd31b5e5c128c7712469c79fa0fec9d5bab393c854a4f78260fc695afce44b5d12ab2c13d84b8de3933eec167580f806fbbf82893ec3f423e62e29ff6168837af5b85a86691b19ebe07917b411832363666d1251ce352eb5d563584487caddf93beee8c8ca9d4372180a8cd1b0be508cadeb035426d7ed2df3c261e6cd45fe76ba14d637d81e8c71318917636bd9e93af9f4f407b56dd7bea57d594c51e77e9570959f9fbba2e5423546e2cb4b85d014ec0634be2f919ed2fe8a7c9d95ffb1606a8dd734bf079167a6ac15899670d61ec112f3e6b5f836f5eda89cfbbda70d2f329a15d5b57661ddd813094f345d989bfecdc49afa641a106fc4892a449386cbc2b543a2e05013f0c6a0c54c6e90a226028ca85feaa0000db29251c25951e37752abd495599d286614109188254fb14c670559fb9b70e089647300328c54fa7f059f2d213908e4dbd4c2b58ff2a22d3aac6bf6d8dc9e8f5e19ce72ff71625994bad631e6aa3dd51e6d45e346878cd834d9cfefa9824ebc879d673841c78b7c23050a3f8f0b4c53331d2536a97d30e807aef824f2e98fa8bea28941c733f5d9251b7fe6c7f4546e49014c849879a0030775c69520a85fd014b07bbf1a3a42b3416ea778f7b5a864b52ed80a638e4884018960a353c7184fd6e484b0771d2ecc13fe21af454d4120756619393f18483d774604004924408a1c22e8a1d0153c571d2d7dca57abe84b08f2d15223eeaaea1bb43c152445c0a32d6de0c9b576f64bb6c2b869c3df33596dd8a45778c627d3d889934e02e6b120e088a73dc7a69bf2690dbfb62ec0707f36f475635ac818a6bb6e7645f8b0f17b051327f15f8d17adea6c6150b700a310b4c7e16e12fe3a3713474d9e858ba1c0361ad7a0df2bd2eaeadf05e2c8f50f3250c6897dadc2c09278e387937d53006f3a624625981101abdec0087f8d0e027a8937b93e524b575940922ed1b4fc220a44ac5a900c63569a3ff65d8e60beebd1e91e3c4d6fd88ace612d71fb9ecea3d657788fbfd7a98cbe3f1660977c725389805ffbe71b510769c607f22964b32500c5f2bf658a2796dead0ce6a4bceb0983bf6304b4ec56e6514323613bf9e849ba49936f6ee7229f0b54a88c70d42cd62749d982695f254d140dc8b59e1ebb15284716759f151fd45606739f680479478ef8f391f671243e37f037d159b193db80eefb7da0a8ed4fe46871b1182649c3e142a6d8735ff02f3daf7714c03b5801b0c24719a4c764e2b289bf1ce3f723b307d446ac5fc52fdc1f51f039017d38d59997c3c6bc0901bc3f981810a8cc8637db44fc17d6173b3e3b5749b7e15c2b9e619458aab9afb4a4eb1316c4157bf2d141778990a118993c8a740ee50710af7a736f50577e15fb55aed36b6c0007eb22d6f37cae383d0892946c383a53810b1a122c0aa0c31b112a2c8546eeb91db9226f01127758df2b2b9e5374a2064c1bbc1e333b221fee2f0927bfea9b59f1a24cffe8229dd2fd30a7a194b54cdf37ed7bad0bce8afa878ef260132f78faec60dc8b8f614fb5b85e5d4b9d0a73e88c440364b1e195620bad7c5b646d01280599dee372bf4da18e53d76a99a486d65de6ecf14e236f8dea563ce50067e0d8a06eb26e89669e916aee37ba3c1d0d1ec9a94393907c8373056021452c11a668c1eeb80c8d0c27208422a777ad0e5d0958bd023dee6ced77632ee829a7b99a6fe1ff3c522975c6bdb8eaecb83361b44aa01cb2075b4e296fccea83266a7af0aefc20e1cb39f8ce0440d58ece915bffe953075b5c383aa1464a3eb3705575b7c7618386a34ae648f30e736b6bbeb317a2b640c3661b5ca383bc35c66a94b10303c538eda63d6f8891f879fe6a5430e63a279478a37778e2747c89eee7b7f54dc8528b77fc0c07b6a64b8ef7b8680558dcae1260a27e4ec7dadc4e3c0a5884af30d496c8c3c7b59582b8f1febf7fc5a9fb114f532876e22e34c32e5e2c1225145b02340d36cad18dcfb3386b4aaeb606ff93b697f985fe06b4b13e453e2ddb85119711373c862172f5984397127cfd6a57fb9d6ea6070baccf0ed4070fe85e2783521c9f44e4c7e04d68926c98a1bc7ad5c7e2b0fe9942198e219a9c75774f44ac6e5324874e07aeef9fa80ad516a37b6ee7d2b9788fffb4d705fc1427e6a203cb708be39f595010b982897a0bba0c5713f300e51afbf4a0f7a8b35e7f8182c9929488813befabfdbb1cf8c03a787ab813b23fab5df694ed9d8c4d27d2d6c130ed254a6b6c2025b1207c0e1e5b1ff248ced46d9da306adcbd2b776ba7cfe56bf7696d08162b5f5a7a60608ec8f7ffb8bfb4b90b4fbfee9d584b1c219beaa1b1f9a9d5d4e3c4a13b42b646bd0f3e15e044c487ee1190455cb145da5987e7926b1f3607041265bd4b4be120e89e349a1c412569b75e81e1c847ea3149ffc807e266ff1d980e16654ac3b22e63ea0b46f3584693f0dee675355cba3a4786dff82941a4479513a6538d4847c5955d993856e0e55b1e7b503d27bb450c1ee36e6bd0b3d5c9fdf4785b62039faad74c23543ab5c8972c9d10c46c773e76ab322c4547b39132f520e90c2b158e2946c92e035cc69af4790dd8a191bcaa6a01f2ab56928b434930be456c4982e731b1bb82dd5aa84f580a7a4a7c16cfb5f307e73d1d7b9aa525a10e7894fa1d94523e1783015f976b759369cbe587963dccc72814082fe50333936f26b877acdfdb02d6eee9056462f1601c5b42d8831b5535287e82f2757d7c07aed21bbfb17a2555e0084d2035f05c013c07522af900d4e19e267f8d198a91e5e3c9eb49e3c70a2d41ec2297a37be4401f7c395897069811251c5c9cb37b87775d8bff42309030eef2623068228d1db73d6396bec85c2c29782b41897061f8dee6ed676c714f8e8d36b34511506dacb45e65232862e0e01bd5c215dc7fe7829b7ad99ec942f06540254df3e2a431cc42eec50a950d3f27e0ae3e225e13abcd4cedee53809bb72b07535cd30d70f87ed0c9ae40a9c9e2a8742025a31a11b0fd82000f4b77bef85d93b397f29eaadaa37750cdc29464a8ca4a262faf9a88efe39952648bc13965b9c07ebfcf896b090df972d865925071a2582032f1f7e7b919a8322eb654d043fd3af727a30fdfbc47563819bec8db38d5cd25c574349992f8623c8b51cc9b598fadd98ddf3f31d285e1a5d25733850fe89607f39e1c417950d804c0a78c1eddb3974f4b0ca1514b69a917a2d8b0980af9c8d684dd4f9e2991202ceabed2aff934ca5e024782beda194760d8a5af56a2997e453ea5ac106df5badac3bfe6da9144ca271cc56e2313d86171e00efb837d37fc102d773596ebd6dfe9325242dcd2d48579d69513337eca489d2b060ed597c61e75bf3d86e34ae663492510444974c9e4a7846068d2b8dd8aa2d47bb2b625938fcff8efb62feddfd4505ce8d8228def8368298c66357d58e161f406486ba367ac6bc5424adca449bc3edf21f87982336deb0d8daa373fc383e2ae45861ac34be47814933da4f56d55dedd03dc5d2d66fd5037251ba00f36523e1202f80a6820b7c1e1adb4327575f5085e5a04036002bf84f108f28f42e97d2357a93a976412ec15c23d721edd43187b23528a3abd60d9d113b5033fea3add277f15b7e384dac2e0dd8f610d50c00d115c12897650cfeb6a67d64917f4be1527041c46fd72a279e673b978e9ba9b25ed71323f8bb46c3a6e409599c2a49304437ff11a9f08fc4cb0cb6005753c4db125f487875e5414fcd1bad08de4800f44d86c4d733529909fb6bd50d0405544585431adbea32b75c8cdb3eb83f7ec20cea96af1f6175a7e9dc19a87901202ba46dfb58491ff96aabb094ec2c3434b75136a8f88fbeb120653839e179f5b34b1d3932e25f47e7866ff7c7aa34e18587cbe139161787527678d1d0fc1adfb839888c6c9e34c5dc4289f67817b08cd306ee8cd7df0ba85b5b822f276e8e0bb98eb1b9be9bc797e94af0a13b8c21d3e56337b3239fc3dc3008a869f45584ea6285c6758894bb1117322b440c00cc143933275ef689f97896ef6c7def87427c268ccb2e5de902b24b119e1b4e3150ab45353a2d8c631ca4a757d32bf3b9023c363d4cfff0252a103d3d35a5ef85e2eef9e73ae89cba3de39e7d25a3b7756e0fbea3ada188853280479f3b7bc8c2b73f428b6c638632d213beb1795f644f9826fcecc09f0fbbdcec8ebdff86466adbb1edc4b4761e5c45a29b5a5207a46c5b60e39bece387ac3c260b506add7f3f6ea5838bf54a80ee0ec2a11f826f85c30d32bf83cdd1b0c79940664badfb69976072b44750"}) 03:35:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x448384, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 204.043206] binder: 8422:8429 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 204.043218] binder: 8422:8429 BC_INCREFS_DONE u0000000000000001 no match 03:35:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0xfffffffffffffffb) write$binfmt_elf64(r3, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x80, 0x28, 0x20, 0x2d4, 0x3, 0x6, 0x5, 0x27a, 0x40, 0x97, 0x3, 0x2, 0x38, 0x1, 0x2, 0xffff}, [{0x70000005, 0xfffffffa, 0xff, 0x9, 0x9b93, 0x8, 0x9, 0x8}, {0x2, 0x11b, 0x5, 0x3, 0x401, 0x7f, 0xfffffffffffffff9, 0x40}], "e94717f28be6f3c516dc35b33c82fefb9be46950793b654b95e8b84588f777dcaa3d243a721e2ae15bd9ee1d1d39dc97ea2131e5a9938b4e3b59ed3567705909dec93816c6cd73", [[], [], [], [], [], [], [], [], [], []]}, 0xaf7) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000f36a389c81728b1e8b5c6114d370428639b83093d60a57cbd882a84f633d362d411b276dc660e3951df7cba402b0a2fcd1d64a1b214eae09c830f2f6fc4712a852ded5aefd785cc5f40b630eb65042d91b73e05e61dbceabc8f5c7d3f08b02722ddfd1fd00a88848144fa1f6710dd1ad84bbf833070b4f4617cc112265d26b864ee5640e950ef54b3c30448df9475b7fb1144c93a69d8404baac89fd686510e20dc521c0ae11ab0e458883ad4bdac4be53094e", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 204.043229] binder: 8422:8429 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 204.061083] binder: 8422:8429 got transaction with invalid parent offset or type [ 204.061114] binder: 8422:8429 transaction failed 29201/-22, size 474-24 line 3454 [ 204.061987] binder: 8422:8429 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 [ 204.062000] binder: 8422:8429 BC_INCREFS_DONE u0000000000000001 no match 03:35:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @flat=@handle={0x73682a85, 0xa, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08941adf45b2df27d30000000000f5f6ae7849a1af0000e380000058f6eccbcfa9dfcec2be04050a042a9f618b14330615b78b57e4af1203000000000000f0f30bb353932a3136bd9d3e95782977311d75264832f929a9527e47d9e55619731fb9569e5dbd693103fb534c7adffc3875d697926dabca8f"], 0xa1, 0x0, &(0x7f0000000280)="ea26bc6a11addcb8c073480b5dddc7e9a0497ce5d11ac118908cf92a01c05a145f14ff6aa524ebf7a4b6da9a3ff83d1d9f796c6dea3f1b6a1b5d2b8c7db58e770447c637ada52297f6de454b4fba49b97e2527b447988fa0c59cbda0c61db379a95a3b91814c775d2c37ad63488c1aaae91cc311bfe1872af92fe1440a8ba528f66f8ce521f29b5432a312c71041c4202254a692df0d2df697327e00fb4bbcc412"}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x9, &(0x7f0000000380)=[{0xfff7, 0x0, 0x81, 0x7f}, {0x6, 0x9, 0x7, 0xfa1}, {0x5, 0x81, 0xa9, 0x9}, {0xaf, 0x8, 0xcb, 0x17}, {0x20, 0x1, 0x3, 0x4}, {0x2, 0xff, 0x1, 0x7}, {0x7, 0x33, 0xff, 0x1}, {0x0, 0x5, 0xff, 0xde}, {0x2, 0x1, 0x28, 0xfff}]}) r2 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0x6e) getsockname$unix(r2, &(0x7f0000000180), &(0x7f0000000200)=0x6e) fcntl$notify(r1, 0x402, 0x4) [ 204.062010] binder: 8422:8429 BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 204.072587] binder: BINDER_SET_CONTEXT_MGR already set [ 204.072596] binder: 8422:8429 ioctl 40046207 0 returned -16 [ 204.083670] ip6_tunnel: xmit: Local address not yet configured! [ 204.101297] binder: BINDER_SET_CONTEXT_MGR already set [ 204.101305] binder: 8434:8438 ioctl 40046207 0 returned -16 [ 204.101577] binder_alloc: 8403: binder_alloc_buf, no vma [ 204.101596] binder: 8434:8438 transaction failed 29189/-3, size 112-24 line 3284 [ 204.102852] binder: BINDER_SET_CONTEXT_MGR already set [ 204.102861] binder: 8434:8444 ioctl 40046207 0 returned -16 [ 204.103087] binder_alloc: 8403: binder_alloc_buf, no vma [ 204.103106] binder: 8434:8444 transaction failed 29189/-3, size 112-24 line 3284 [ 204.141614] binder: BINDER_SET_CONTEXT_MGR already set [ 204.141621] binder: 8452:8453 ioctl 40046207 0 returned -16 [ 204.141879] binder_alloc: 8403: binder_alloc_buf, no vma [ 204.141898] binder: 8452:8453 transaction failed 29189/-3, size 112-24 line 3284 [ 204.150440] binder: BINDER_SET_CONTEXT_MGR already set [ 204.150448] binder: 8452:8453 ioctl 40046207 0 returned -16 [ 204.151542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8447 comm=syz-executor.2 [ 204.167936] binder: BINDER_SET_CONTEXT_MGR already set [ 204.167945] binder: 8446:8454 ioctl 40046207 0 returned -16 [ 204.185201] binder_alloc: 8422: binder_alloc_buf, no vma [ 204.185222] binder: 8446:8454 transaction failed 29189/-3, size 112-24 line 3284 [ 204.193621] binder: BINDER_SET_CONTEXT_MGR already set [ 204.193630] binder: 8446:8459 ioctl 40046207 0 returned -16 [ 204.204523] binder: BINDER_SET_CONTEXT_MGR already set [ 204.204534] binder: 8457:8458 ioctl 40046207 0 returned -16 [ 204.235028] binder: BINDER_SET_CONTEXT_MGR already set [ 204.235039] binder: 8463:8465 ioctl 40046207 0 returned -16 [ 204.243426] binder_alloc: 8422: binder_alloc_buf, no vma [ 204.243448] binder: 8463:8465 transaction failed 29189/-3, size 104-24 line 3284 [ 204.272412] binder: BINDER_SET_CONTEXT_MGR already set [ 204.272422] binder: 8463:8467 ioctl 40046207 0 returned -16 [ 204.326317] binder_alloc: 8403: binder_alloc_buf, no vma [ 204.326338] binder: 8457:8471 transaction failed 29189/-3, size 112-24 line 3284 [ 204.451782] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.457388] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.462926] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.468493] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.473987] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.479532] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.485120] binder: send failed reply for transaction 559, target dead [ 204.523642] ip6_tunnel: xmit: Local address not yet configured! 03:35:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000200)=0x6, 0x4) 03:35:36 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x0, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:36 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x0, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:36 executing program 0: ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x140) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000100)=[{}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) 03:35:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x2dd) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000006a184c2200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a004e230000008100000000000000000000ffffac1414217f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000101000000000000000000000000000000010800"/404], 0x190) ptrace$setopts(0x4200, r1, 0xfffffffffffffffc, 0x40) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a00), &(0x7f0000001a40)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r5, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000001940)={[], 0x1ff, 0x4, 0x5d3, 0x9, 0x20, r4}) r6 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000019c0)={0x0, 0x3, 0xbc64, 0x10001}) getresuid(&(0x7f00000017c0), &(0x7f0000001800)=0x0, &(0x7f0000001840)) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x20, 0x8, &(0x7f0000001700)=[{&(0x7f0000000180)="94c89b5fba83391518fe1d8e9b6f092fe44eeec803d81165c3c23e37c5c00f874b8d34fe4a62fcc1db04fa42da7aaa49fc233a2a77b5ca74bd0cb496e9553b16eed8dad17b175622877fd8a5ffc153258b4a50e00506e0bd7cbaf28f3d0a20dcf05d56e311072549", 0x68, 0x10001}, {&(0x7f0000000200)="7aeef8b4391be467005899ca44ffd7077ff9bb09e9c032af41c0d5c9bc9fed824375167d3986bc2af63a64967e0dc0173350caf0bf2d3e161768dd416ee096429ad6b026d0b43dc68055087cb2da1735be17af445b1e674b8d8e201a4345a9497e781c659c7a0898d3310cba32d695130ea429bb75fd30a46ec861cc", 0x7c, 0xfffffffffffffffe}, {&(0x7f0000000480)="6a884134101c8472556772ed49cc006d224531223790ad8404c01348a0b2941a64fdb1bb068e74d8e868f607037676cd10600ef7d1a00a3b8f8b5e24df598217b6c6f16a300a885bcf1add4a0b34ab3b8fc2d2afd807bb5431688ffc4718a152e28d5f3526d9b3f3601166827ce0aa389a11e9f290c737901598aa1a1e239a41282a2e1a622e38ccd173485ee444242037e4680c0a916981de5a4666dc", 0x9d, 0x4}, {&(0x7f0000000540)="b8ef39d08b4bf375caf836c5edf8c9d72313c61e66731038c2b7436f9af45ef3e96a6ba6854552008690d33ec1d52947c5f11048053b13e59ead24c080c14dde7a4e7b5b56e614e4ded557f9fbdc051476f3580bf49a2654cf091bf7109c2d3728a4748a9e158f71a70329d60497bcc630b0e175491f8c929dba89221971fc45df774996f8b6c68cc95e44986e76210d7429abd71625932e5690c474dd28642a7b4314b8a6a7d781cf2a7c12e5736f80dab264d5df8473825048f840044182cf74230ee52799fc5897a6d3258bf8a65d53b47422fd8ff6b47045e3834a00d5ab30c78cf89f9ce4374e1d6efc3de9053215", 0xf1, 0x10000}, {&(0x7f0000000280)="bbd9eaaca174c0a07bbfbcf4481e", 0xe, 0xfffffffffffffff9}, {&(0x7f0000000640)="c95eeffa24b1", 0x6, 0x5}, {&(0x7f0000000680)="ab7584cab251d13e42636d8fa6c94b95e3c2ffdab96e79f91cc2ccef7e440c5aa63d299f5ebb5548dc4292df5ab70d81b2708e9e501837fb43685859f452907fb707fb4edb8ad719b5b15aa599fadb254fb2459f05e6e26a35572a475729fa8b415e3d1c392c945060554aaa4dfee54081bc89d400918ddca2004404e6c3e113770ff53f81e3deadab38a2d2804c3a710eccd2f3dd0f16d0ae9b393ebdc8e79a26a8809d5f24b93d5271bc4f51b61b863663b95f21a713a53ae19d0a2cc037223cb4adecc88c5d8bf497fa2be613f4e358f7a64c3b031c84fec0c491d13525c32e54363c9d01d8cc55667b9f44494b9bbc5b7a7b7bf5ac284bf18f36e2ffc649ac65d2e07d524f0c8a33531e71e3994e8f9e054b0143666ae95c829029e7f175c4fe242e128640ec417aa611139f7cf0c2b247bb09df9aaf8e431efa8350c43207a3297ed721a482eeb8335090b93f89498f2a0f15faf14a29ed7411e80994d083429caf0aac6b28bd36debb1b96ebcfb489242f2d8231cf6345f4f8cf0d7ea68d5f37d84f5be873f086df195cdfbebe188b86e9978dd778d40007aced785dd69f45f5766767ae2b5f1f423c6794cd7f57ecd9307fd56ed9c9e40f76d873d08c827b4330a9b8a0ca6bc7abfc4fc52fad444a28d6989fa2821f22ed8bf05af01c478373ea60f4a9c45c7f90ee0ee41a9832af2fe8a172e05c40d7b7c497854e8d1e8cd09d8a601c4525a489350a078abeef09b886549f50df033fa49902f42d99243acfcdd8fae2024e20ab9fff2625db7bf613ca37c5fe5c5cad13b4cded8a28923772e736c99c8ff7ad84ccde3e9df4de0e6d876dd24555592c7edd4fcd5febffce59dd60e63933ad977d1adb349e7792821c561e83a587ea8a255cff27f0910cde2983eb82ca0e11f5244eafdc8e30171cfe87f187572bdc48e0d36bec5f76c514da61736fa68c2a2ea5a1a6c99dac88e4e4fb5c4ad2e4838a679a66611f0ede9509135c1325ce2e148f5c75beb451490c4f43c2369442cbb0cb92c031d8a6bd3989aab9774d4ebbc1f56dd72accffe91a7650f977c4585f95bd4db7f57e4040b24d8e0d5baf32cefc26087ab20b84f0d7ecf2459d065727c2afb5f6412ac7729cf68013b22b4476fd6b8aacf6d78691cb860ad1f47ee0c312b27dd424e95330b133b0cb0f9153c3d84c57fe198947830cb3eedde2f1e88086e466cba488495ab1eeead9bcdfd089ac4af0c0e81cee89051a5b20c75022902f27a602cda96275b7b02edd5f70e701919b38fc7b18b344539a3363853159512ff0a79e740f96d4409bd6a8950946e31099708dab76a906f023ef5c64b9d07a9f408eaa3a9921ee2493efa7c7728f1a614582305131d49802c536958de38813230c5e6af46441b181e49f9faaaa85c9aaca27717ef0f1324322213791ef214ec26ee2e634006b44de90deb8a8a22477a2d225e28475d62d1ae3cc637b347917dd73ff7b4a3f8d00340895aae568721fd3bffe7b26ef6e119b738e20b6354a6763895be59d131f0905b5e6ff7bb8da605301c061eebd1c036099d523ac6bd12b7a9ce4dc4da6a7d354aa3e4ff928168c09bcee6d566377531338438a299be2102d464ce4ee82402858d2f25503ca9f433ccf27cd28a925598981e8f3dbbbcd941546682686a4aaebb73bd0fcff152906d5fbcee63b69eea442c708a9eeeb637262eee93eed9675775fcd84d695986767f8ba1bc248b22ca30a7bb2734d4f5d1a3fbe45aa20e33db2c185b0b8609cf57e3871bc3bf8257b5eb008d626f7d687cea97e3514d1f5b6050da59690de1e1a50f36314ac83e1894f29d9ed288a8c25afdf3c38870193536b362d3fe08949638da73ae9bd309c889a5077cbcc3e283322ea667f3054cdaca89b452c056d04f00c5cd16086b19cfc398055af5dc3d318701da1b9b6df2efdcf50eea730d2df39ce51821697e8d1977fc046efdc565150d93bbfb32f971ed61449944bf5b56e12e07bb7f243bc74140cae63a4e7d4e38eb1f5b9a34bb77cd9d68d394df7852f7ea5e16d4482afcd28b79fa618b3ede795b0ea3cc7736e85c39f922ca1c588be7410bd53afd15adc207a91bbed4c26b828968f9ebce96cab28e354395811e43450eeb578bac1c3d427914cf5e836eab9ed246ee010304a8ef9bbf986b16c303dba98671a0be18a7afba629fd01fb49ae99b990810e4f45a4cfaee31981b59a1aa686f4616c89b8d52c56316cc2cdc3115d869a05a4de22724d097fef177677c4f1ddec12d7fd204500efcbbc7dbef58f53b37a3fb895861de1dbca5e0d5700e84aba4243833d2bb65b18b21d5222644cf7174250fe61d776d1cb8755f0d544c87024983a3bda1e062f7188d7b4022affd57669d79d8f57dc7e19c195631fa0af44e2b3b61a9108d37f3970625cf962575af942c54a912856a07c62ddf512dc04739f6cd8aa1ed6e6d8d7d8d5b6cb616bcea1560a379d549b05794d8411f016c5fb6466b66ce5929105b1653c2c33cdb2c866341e9e40656ebfdecc1df1e84c13c0c3203dc64c9938323b83022fa05793b01d865058f97700f15b74aed39793b0159173ac4357027148d929968dce04f734e6453a0c8d6cf688eedce2252369b89096f856409d039ed0fd1255160e4cff929a5c2227a9f3d74a0d94614d5cdd10df46178eeb3b760f6d0bb5b88698e4259729f77bca85d17f229145f2fddb6cc8d99e512b0e2efd5f10224353222ffd78eb5b8a176b8fa7cbaecbb7b5dd21071b0c3148ca5d4f2c5315fe6f70f326f2b82061846c6cfac006a3d02817922fd89c25ac7b595d3263c0d560c252b94b642ddeaf5f2007423cacfb226b24cb6c39734b4a59484ef41269a7b4ddf16be5d4a477f11d090123616b6792ebb234b2634c57a9d379a14e0d8d255e84e5d1dfcfe1c3aa00e8b035d15dd8c56825c7b85fcca36d703522b3d5987b821661fafa4fbc47a4303096af022a559d1281a7710255e6ea5efffbcf629487d4e3c4180fdc57ddff7608878b2bfd59ca84c4c1464b0697fab56703b223ee7d740a955d970a76c970c825de31e045bd5024366e21b28bac8c8b6404835afdd553fe08bfc1edc94f73a3f60930a04b698f125bc99af4ef56d76e62158cd4a7ba7a883573d2b05ace8671005fe36c0d2fe05c7cc8f30f3d7363a507aa98b01c1e55ed7a3af77bcfb367fd7aba34a8358c5db6b327fe14d55177e99afa26486c1e83f92026f56c0fe9b421f7d8a5d09082694940110c9518872ba7389b0af7e0a5d8f547ac9609be459a6f1d0bc9a4ae09883b7af7ade443813083aa06871caa35b09b1ff029232e6dfa78a8d2774fda11c807275211bf4b21ad5b9c15284108dcbada3fb57423cbbb1b09fd3f613d217254f2d4ad64229c1afe3c3d5421c45e39ddcdb46419dafc231d4b0e607bb2144af122de2df04720083d1d0c7ce0a3291fe7e6b1057319e771f1c698f17179e2ebb135232b297a7e5f47c9e4930dce71497ce5286a159a868ab2fa950b09631fb54fdcd59150e290a0e6155c3cd6f3d918e499e315ac19a6676ade6f8d7c17d3ae6447eb56a6c0546e04930ba8b894b957d0b0d9e32577ff30dc8f5529a2f1f737d638d7422d117841317e7e4604f9e68ef1da3c6703c4b57a0b9814325b109ab1cdf0887784332e6ac0f3cc506e8a7a0fccdaf5c65cdbc2f3e0518bec433317cca1d5668b2a9c6e78c742c69ce5e0f78eeeba720d27b5373c3fb75dc07694a99bc76d0ef118c17b758f94aa4b4def637ff739c3b37d46e6471be7ed72267e9c24a102946dc3e57e6994536dc136132d9760531cd87cad8fc5386eb3bc7f0af8c632688e2308c800d2d0f1c267530501b7cf764e320880587dd64f516fbf0a283bcd41a66eb61c31803f1afd472ef8e093bfe5396c9cc7ac00690cf38d1c1cb12a3d1b0705c737c632f3cee2f3e779ed26ac6c07ad44700fc811fb9c3c4903fe48692b7974d714cdd79f3ea4e1fe4aac71c00caca9f387e0ffb232de62b21228c6eb6ea330764038181f1242ace3772ff09f482a7ff254e696683aad01f8a416d8c67f01f4da312c39dd7a4bb135af529bc5c1fb5cf83a86239abf1b6c6c756261d82fcb7ea33f3c62e4775267b7573981900f19a5fbd70615e5ac9f74f0fbf8ebbb72317197c0c716cac5ed748fd0b44dbfc1f3be90f25378e23c25e5111024f69e88a62d98c7ce3d20d584dbfd87e7b3a1711e0347d4841bdbcd3023a5757855a9a323b355a49b57ba13a472331d43050882a5c049b2404fcb4d7b78fa4342d2b59e122ab4bdcfea1e7588d330463b9911ef217a1eafa9b8f98bc0546dca659f5ccf973028c2cf5692f68eaa0aba4c7a2d92958f0e5d9e7fd1354aae441efffb4e959dfc8c8428c6140f6eb4568b2b0d60ce83504a1ca7a2f68fa0bfc4b62593388b9fd14047c2eb2973e36595b2fbe688a063276bd96209c832a4eea32ce729d39d04296d707bb8a2180520655204543b1596cf4358ba47faf8aaae785209077118869ed82a41c708b2fc0efe6b0bc5c5b1388d4c5ab4a86755b131a8a69c5522254d1d5bff6a1bbaa9d80bc5089f13b01196cde3cf040df47d95fb6fa622af20af6337c4c34914af86197d1209f5708f6d57a0f93becb63ea786caf1d042e5089def69a5c71cd4a2390fb18c27dba326d2768ed744830759d13208de290d6d019f1329431e8179a9bbf314596e813415aa02a0b18140a5a6e3664db433f61abcd4004bac40ddde99cf7d78a625b2bfe087023ac3398592d2079d8bd008b5692967d34b88104f9b70d9828839b1dcd2003f38e4414f10d4e6c6b02c6994fb651202143b3c39b001486d13a3384f9ea8357f46f8b14d6f2eea807bb8328d19f0c3df450d0f7b71d95a3da58d25a742a8509c9879f3bec0aa01b6b3f5b21543d245c7a612be79949123b307e6e1fa4162171e814557e12204dad5154480286977427c90390d2031e88447e54d52a928b3be3a555f0ecad92ec04efa0a790bf4b1e2c1deef61c152b77c2c1c159ba51e01a6fb5c7f5bf83ffe11c81e20c1b11e792cccff0e56a581a4dcddad3090c5dcaedf1fa35afdc8395d47dadf9989d2c42bd8395d57444dd8fbb94b569a6bf838ff9d62954afdec8fa92c144877bce8f7685df2b1b7f89324a3085bdbced10ca1c7584ae2f2fa31c84826312def529e5038a1987061a611a6a2cb7570bae6b60e29f7a8922398dbb88136921b57c2374aec3dd27cd37cd914843e5835d2445e9b79bf462f8f2ab71e6868fbfd69434b3b7a33ef6dd8c0b5aaea1ee51c49a7aefbcc72a8ef12ec20825dc3c7a2aa13c82315ff1b48efb6d39ac51ddff67a96857da58cd94bd492c7682ce12ef55d9f5bb09acb45d82e895092e2e1bd5df87585d0ba621a4e2b491569ba0c2d5dc4bc37fa4127f319b77fc614faa7e9d3e32960c4ce8bc299e2dd5ab2762272d81dd6b375fd5e4357671e47dce9e36057f1a27e4254992fda5793310317a24015476aaedd419d8ccb3a111ac131e23bc6d49f978b1d3ad38089fb7b9a7d753a63b9f7de7aa3666c7426117cab72041945875dd4d366e3a33822e3e7b74c8631c225edddd0cbfef8f43e6376b95251b30bc27c75f72a74400d400d016ce78bdbe406daf9c8c4e19392b7a079528e42eb83361b201d3cba6cd3af27d08a90b0ce1185dda2130ecf87e32b4b9c22cacad66bdafab27158944613f93c2602844599982908b0754084d2e65b5004a1c36a87bc1a05e204003764becbed49fa939894b20f0eb95716", 0x1000, 0x7ff}, {&(0x7f0000001680)="14143ebffd991160a8387198a2cbeed0bd2e540c93d8074a1bfca7030f4337bd07c02bc6ff663437b3a26532f7769d38dd6bd1fd97302515771e3c19e5e88043bf55b0ed89af833cf90c27335018d2fa005c8785bd11b7ea3ae2d62e7d1f775a226af47fd48d59c309c672ef4ad9", 0x6e, 0x2}], 0x1820, &(0x7f0000001880)={[{@nodots='nodots'}, {@nodots='nodots'}], [{@euid_lt={'euid<', r5}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x34, 0x0, 0x31, 0x63, 0x39, 0x34], 0x2d, [0x40, 0x5692fba2262084bd, 0x63, 0x39], 0x2d, [0x35, 0x65, 0x61, 0x33], 0x2d, [0x34, 0x65, 0x65, 0x35], 0x2d, [0x2, 0x33, 0x65, 0x38, 0x33, 0x6c, 0x75a593d94654f7a8, 0x39]}}}, {@measure='measure'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_lt={'fowner<', r7}}]}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x2001, 0x4) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 204.873672] ip6_tunnel: xmit: Local address not yet configured! [ 204.910556] binder: 8483:8485 not enough space to store 1 fds in buffer 03:35:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_RRENAMEAT(r2, &(0x7f00000000c0)={0x7, 0x4b, 0x1}, 0x7) 03:35:36 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x0, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:36 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x0, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) chown(&(0x7f0000000240)='./file1\x00', r2, r3) fcntl$lock(r0, 0x26, &(0x7f0000000200)={0xd5a55528eb4517df, 0x0, 0x7305, 0x6, r5}) setregid(r3, r4) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 204.920115] binder: 8483:8485 transaction failed 29201/-22, size 112-24 line 3475 [ 204.929406] binder: undelivered TRANSACTION_ERROR: 29201 03:35:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x3}) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_rr_get_interval(r2, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 204.983781] binder: 8489:8494 got transaction with out-of-order buffer fixup [ 204.991262] binder: undelivered TRANSACTION_ERROR: 29189 [ 204.997571] binder: 8498:8500 got transaction with invalid parent offset or type 03:35:36 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x0, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:36 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x0, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 204.997597] binder: 8498:8500 transaction failed 29201/-22, size 104-24 line 3525 [ 204.997961] binder: undelivered TRANSACTION_ERROR: 29201 [ 204.998913] binder: 8498:8501 got transaction with invalid parent offset or type [ 204.998937] binder: 8498:8501 transaction failed 29201/-22, size 104-24 line 3525 [ 204.999263] binder: undelivered TRANSACTION_ERROR: 29201 03:35:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000240)=""/86) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x6) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x80000, 0x0) sync_file_range(r4, 0x6, 0xf06, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000e1037784bd8b41034297e3ade716d2d30000000000008000000000f50004000000080000000100000200000000000000e900000000000000000094b20e0ac6654200"/81]) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) clock_nanosleep(0x0, 0x1, &(0x7f00000001c0)={0x77359400}, &(0x7f00000002c0)) 03:35:36 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x0, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:36 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00'}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) [ 205.162898] binder: 8489:8494 transaction failed 29201/-22, size 112-24 line 3467 [ 205.184274] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.190400] binder: BINDER_SET_CONTEXT_MGR already set [ 205.190409] binder: 8489:8507 ioctl 40046207 0 returned -16 perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TCSETXW(r2, 0x5435, &(0x7f0000000200)={0x4, 0x7, [0x1ff, 0x7, 0x1, 0xff, 0x1], 0x5}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:36 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00'}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:36 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x0, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:37 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00'}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) ptrace$getregset(0x4204, r1, 0x6, &(0x7f00000000c0)) 03:35:37 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00'}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600), 0xfc55, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nfsfs\x00') ioctl$VT_RELDISP(r2, 0x5605) 03:35:37 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:37 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00'}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 205.883707] ip6_tunnel: xmit: Local address not yet configured! [ 205.920901] binder: 8584:8586 unknown command 0 [ 205.925956] binder: 8584:8586 ioctl c0306201 20000140 returned -22 [ 205.939894] binder: 8584:8587 unknown command 0 [ 205.950223] binder: 8584:8587 ioctl c0306201 20000140 returned -22 03:35:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000600)=[@increfs_done], 0x0, 0x0, 0x0}) 03:35:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003d80), 0x0, 0x0, 0x0) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x3}, @free_buffer={0x40086303, r7}], 0xa4, 0x0, &(0x7f0000000440)="29444a61ab9a95682bcb4bcf42b6c90c1f8f59078e646cf413a68fd790f1cb6321b43e07ca3a90bfadf9737291c631bd944b567ddde6167de56861ca67cc5cdb63f771b8f4b5c19f9af1f142e69505f0e6d4e57adca8bbf1d4d995894594c133ee2c4e4d05c651eb5a155fa463eca684869a60c5f1d84fe05fe1674927fc6b2dee0cc2db586cee17f1f3c1104543d8aa3b9f6b52da38ea33ff2589837604464f27fcb11d"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r7}, @acquire={0x40046305, 0x1}, @release, @release, @exit_looper], 0xffffffffffffff41, 0x0, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r8, &(0x7f0000002340), 0x0) readv(r8, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r8, 0x5432, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r8, 0xc018620b, &(0x7f0000000000)={0x3}) 03:35:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:37 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00'}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:37 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x17}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000cb8e33790e4037f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a000000264844391f710000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d355690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/406], 0x190) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = fcntl$dupfd(r0, 0x2c2147c4de3a9aa7, 0xffffffffffffffff) write$P9_RXATTRWALK(r1, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x81}, 0xf) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) set_robust_list(&(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000000)}, 0x18) 03:35:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="008100000000000028000000000000fdffffff0000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10, 0x800) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000100)=0x78) [ 206.106007] binder: 8593:8595 BC_INCREFS_DONE u0000000000000000 no match 03:35:37 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:37 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)={0x2e, 0x3, 0x0, {0x2, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) ioctl$TIOCSCTTY(r2, 0x540e, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 206.190108] binder: release 8616:8621 transaction 589 out, still active [ 206.196309] binder: 8615:8620 got transaction with invalid offset (33024, min 0 max 112) or object. [ 206.196530] binder: 8615:8620 transaction failed 29201/-22, size 112-24 line 3379 [ 206.200943] binder: BINDER_SET_CONTEXT_MGR already set [ 206.200952] binder: 8615:8625 ioctl 40046207 0 returned -16 [ 206.201252] binder_alloc: 8615: binder_alloc_buf, no vma [ 206.201270] binder: 8615:8625 transaction failed 29189/-3, size 112-24 line 3284 03:35:37 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) [ 206.243022] binder: BINDER_SET_CONTEXT_MGR already set 03:35:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000800000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 206.249696] binder: BINDER_SET_CONTEXT_MGR already set [ 206.249707] binder: 8616:8630 ioctl 40046207 0 returned -16 [ 206.252582] binder_alloc: 8616: binder_alloc_buf, no vma [ 206.252603] binder: 8616:8630 transaction failed 29189/-3, size 112-24 line 3284 [ 206.285546] binder: BINDER_SET_CONTEXT_MGR already set [ 206.285554] binder: 8631:8636 ioctl 40046207 0 returned -16 [ 206.285808] binder_alloc: 8615: binder_alloc_buf, no vma [ 206.285827] binder: 8631:8636 transaction failed 29189/-3, size 112-24 line 3284 [ 206.307789] binder: BINDER_SET_CONTEXT_MGR already set [ 206.307798] binder: 8631:8636 ioctl 40046207 0 returned -16 [ 206.325108] binder: BINDER_SET_CONTEXT_MGR already set [ 206.325118] binder: 8641:8643 ioctl 40046207 0 returned -16 [ 206.326259] binder_alloc: 8616: binder_alloc_buf, no vma [ 206.326280] binder: 8641:8643 transaction failed 29189/-3, size 112-24 line 3284 [ 206.329410] binder: undelivered TRANSACTION_COMPLETE [ 206.329549] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.329672] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.329751] binder: undelivered TRANSACTION_ERROR: 29189 03:35:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:38 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x60d3, 0x8e1, 0x1}, 'syz0\x00', 0x2}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000f11700000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:38 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:38 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 206.338516] binder: BINDER_SET_CONTEXT_MGR already set [ 206.338525] binder: 8641:8646 ioctl 40046207 0 returned -16 [ 206.432118] binder: send failed reply for transaction 589, target dead [ 206.439977] binder: 8604:8628 ioctl 40046207 0 returned -16 [ 206.452107] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.461425] binder: undelivered TRANSACTION_ERROR: 29201 03:35:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff010000000000000000000000000001009db55f3700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d3556900"/404], 0x190) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux\x01\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000070000000000000001800000000006a64", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000900000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:38 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:38 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 206.520951] binder_alloc: 8650: binder_alloc_buf size -1080863910568918904 failed, no address space [ 206.530402] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 206.540748] binder: 8650:8663 transaction failed 29201/-28, size -1080863910568918928-23 line 3284 03:35:38 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:38 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 206.607805] binder_alloc: 8668: binder_alloc_buf size 70368773563504 failed, no address space [ 206.634404] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:35:38 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r3) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) setsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f0000000000)="fb6a812d080c52fb8a0a7f901d3c92dfa3e388d6967e3ac35c4c", 0x1a) [ 206.669079] binder: 8668:8674 transaction failed 29201/-28, size 35184397280362-35184376283136 line 3284 [ 206.695496] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.733351] binder: release 8693:8694 transaction 603 out, still active [ 206.741598] binder: undelivered TRANSACTION_COMPLETE [ 206.746830] binder: BINDER_SET_CONTEXT_MGR already set [ 206.746840] binder: 8693:8695 ioctl 40046207 0 returned -16 [ 206.769108] binder: send failed reply for transaction 603, target dead 03:35:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840a7231577cc24619c30f51032000400000800000000000000000000000000000000000000000000c3b7e47fa7000000000070000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x8}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="e0000002ac1414bb0000000005000000f965000200000017efed22d78900e000000100010000000000aafaebbfc459597a2ef4b1212a8a9d81c7f4c3c7c09037fbb8b58489107d78dd35c9068fedfb5c5782963d1666756fe1fa6a0ed71f25eab1c69a8378ab6b997b768a873252c4a5e27cfa4891decd4afaebeac099b434e8d548bad10b81d7a2aa37f41cac93341da2029657fcf3e09897341f81808d8511f1901a575498c2d40ec0705bdd46"], 0x1) getsockopt$inet_buf(r4, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000580)=@tipc, &(0x7f0000000240)=0x80) r5 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x426000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x2000, 0x3, 0x0, 0x0, 0xdf}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) 03:35:38 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:38 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 207.269863] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.275856] binder: BINDER_SET_CONTEXT_MGR already set [ 207.281152] binder: 8650:8663 ioctl 40046207 0 returned -16 [ 207.315423] binder: 8703:8706 got transaction to invalid handle [ 207.325978] binder: 8703:8706 transaction failed 29201/-22, size -4395513236313604096-2810176695 line 3138 [ 207.332463] binder: 8708:8711 got transaction with out-of-order buffer fixup [ 207.332490] binder: 8708:8711 transaction failed 29201/-22, size 112-24 line 3467 [ 207.332698] binder: undelivered TRANSACTION_ERROR: 29201 03:35:38 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r0, &(0x7f00000000c0)=@ethernet={0x0, @remote}, &(0x7f0000000000)=0x80) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x134) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x80000000002c00) 03:35:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x4080, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$inet(0x10, 0x2000000003, 0x0) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003d80), 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x9) sendmsg(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffcf0, &(0x7f00000000c0)=[{&(0x7f0000000280)="92f8d7b2f6604390d0c0fa457b8f6fab25a3331e7eb9e95d2b77133cbb53933e040b45efa054f30b9704ab544a55c7fa76e6fa39a6a218a524d92f0046bc18f410e017d28544e52c2ec83b7fe2ce9f032898d4c84931ccf97898b62175070590928c96f0d4d5b80db056986c35bdea2528b8392b32e484adbc1f48dffb8188140fb05b9452bc58ed4712", 0x8a}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001440)="fc7403f3aba294574ae9ac47bd110e9c90919ad19999f49be447ea40cdbc32be020ab58afebb9c6c36ef16d1cb86c045416e9d7d45301f3f4f8eb30cd7ee309c450f71088a8bb360f4ed7cf63876d684056e9fd52e26a22de90a488034543d03cfa349f780c04e344cc10778123e833b6980978f4198248c1b4eb9112f526d8311351099512c453f4b9a22e113974fa6414c93c28ac039b719330163d86b64f40d2199c3919c07e18d23ca258dacef121b5f13e80fd1006291491aa4864843d91e5566dff2b8bc093bebc44483522c8a374ad85067", 0xd5}], 0x3}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001380)=""/133, 0x85}, {&(0x7f0000001540)=""/28, 0x1c}], 0x2, &(0x7f00000015c0)=""/171, 0xab}, 0x800}], 0x1, 0x0, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000001340)=[@timestamp, @window={0x3, 0x0, 0xe5}, @window={0x3, 0x7, 0xffff}, @window={0x3, 0x8, 0xffff}, @timestamp, @timestamp], 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xee, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYBLOB="62d934907bfe496aede635b8a9d9b779d65cd2ffd0ffa9a495060203e60d9a900007738a18df38a653eca09ffa2037f94800"/61, @ANYBLOB="ac9d01d041d35c74521d77b658d1a6f48147ad9824e98493bba6cf4df916ed5dbdc91e146e77799088bd5858c79b476d857782508de9970d64170d0de09110c30f085565e81d495a694b2932c94d69ca7bede04cc8e79f9693377c21cc1b67fddd356b3c2344130a6f46b2516d5ebd799be05d53ecc2bd02df2254b0d1a669edff9edeb3b0b57b28d12b4ce991e5b532795c81978faf02077929"], 0x0, 0x0, 0x0}) 03:35:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xd7, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000403152a6a56ebd47c5158d149b6e13fe2a80f1a84790c621836a81258e7a7b39115975d75aea4dd95eb51fca7a64d9bb98937696cda73ae87db784b42a0e5a269cd2a9fe24e21fc335313ecb2b2b81e7b61a184349534967cf2051a527855ffc93e18c9d9a4618b5d4330753eb4cb3b372a72bda3f5f26f7ff5f2adc1cf3ea30981810cfef039ae8e3faf5", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:38 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r1) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:38 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 207.334247] binder: 8708:8711 got transaction with out-of-order buffer fixup [ 207.334271] binder: 8708:8711 transaction failed 29201/-22, size 112-24 line 3467 [ 207.334400] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.410055] binder: undelivered TRANSACTION_ERROR: 29201 03:35:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00000000e4a303417b231df04b841502fa2efd0000000007"], @ANYBLOB="0000489df5b4fc452ce70600000000d15215e62c5aad2e4d08d90000"], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000000)=""/45) [ 207.428553] binder_alloc: 8724: binder_alloc_buf size 2433791286091808928 failed, no address space [ 207.440509] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 207.447199] binder: 8722:8730 unknown command 808464432 [ 207.447206] binder: 8722:8730 ioctl c0306201 20000140 returned -22 03:35:39 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100)={0x10000000}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x80000000002c00) 03:35:39 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:39 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:39 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 207.482586] binder: 8724:8727 transaction failed 29201/-28, size 112-0 line 3284 03:35:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap$binder(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="116348400000000000000000000008000000000000000000000000000000000000000000700068682d13dfda30500898efd2de5e", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000e80), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0xc2995d446972f029, &(0x7f0000000f00)=0x8, 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x401, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="ba635f7cf9b3127c8883d0bd61131716d66ddbcd0a6f10b2370dd36356e1cbe3ee2ea7f45f00e995bc757bf850700a2449deb69a83e8bb6624c908ffed3428e907007902f487404687f14c981f9d62b9491e4f2febc419109bd59f6513ebc21b425ca6d2d3ba8943bc691eee826f1a1a4c246f891ef4235c725f7a44addaef7c82d474c8b8dc80454aebdba2ff2e6b7845d945d85b882e198d1c4568747ba6492cbb79a89e07", 0xa6}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000200)="1c0712e310b29928aaa756d67238ef454f4bd41f12b19390958bafc631e59dd7aac843f5a10666ae19ef84f69021d4183d7fd667ac556934e8b9f9ac1db308611c7315b0d4b22af8d29af8f8022fcb66f47f84157fb453bcd346128f730fd9c46f5f92b713ad73ceefc63382237e8784719c4c4baa72e47fc597f0ad8512a5e118ff2d3a0352ce226dc6d0ee237a3b8694cbea47612f79a81f3feef6e6d7ced75311d3a82ee477f17f4222881b8fc0adb5e7732c808e26b9548d175e018cfc37", 0xc0}], 0x1, &(0x7f00000004c0)=[@rthdr={{0x88, 0x29, 0x39, {0x8, 0xe, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr="2e9bbd38aa576c8b5734df561808095f", @empty, @ipv4={[], [], @broadcast}, @mcast1, @remote, @dev={0xfe, 0x80, [], 0x18}]}}}], 0x88}}, {{&(0x7f0000000580)={0xa, 0x4e23, 0x7, @loopback, 0x1}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f00000005c0)="67e9b9451655eb664dddc57ea4d92936bc20868f59ba43d4bc74a652e1109f72f7bda13c7ad8a99986c9748ac0fd075586a5d2eb21b9af057ec781968a254c97d7047c4d0d50b47b80e4cba502a61b8cfc98cfdd9acba8a67edb18baa80e57beb2a71f555f36d6f973c604242137b3f82add26e09ab123fa18dfb3b6a1a3815b21f6e9f348e3fa74ab012bf0fc500afdeea4442fdede183f97affe52a5786ae773aedc5cdbd32d6923e32ed08568ce0bb0461631e9db84c4545d5c8fe23e0b0e1b0d1cecc0804a18d0ee399ad0f2620d18c2d168e81a60d748452c0bf06b20a2715a64b032a51761a28f5962bcad43", 0xef}, {&(0x7f00000006c0)="baea3f88c14ba5a5db0b853e2391649b65b53b5fcbe87e8a70d111a6971467acc3ff1e72dd197fdbf90ae61954cf80e8db0038f8c2bc3395efefc3a979c4da985f0ba6bc6575f042f5bcc85f40be15a2ace5cf316b492e296fd86cfc5d3cdc2650516c1f01470c156f7a6b338cb963a76113d33cd20f5497ca9cb138302cd7ef26f6bd0b8c402e5b7ffed03feabc5947503b906e644df3ea79abafa4d34cc215756e08c7984e307f483e80705fe3c25d04d7e6f18c8b0d877532d5c8f7f16be44b28a8864611e9", 0xc7}, {&(0x7f00000007c0)="7d0b7b74edc946436ced2d53e7c1232c7d05b94795afd9063322afc4c1ef2e", 0x1f}, {&(0x7f0000000800)="ca31e56cd3a51117fed7c9c8874f930cfbe04f2742d7dcb2333e1af61d70c0bd3a403c671712854876fade2b882ce16c7029acd759f07914e93330ccc24496bc050fc88065f19bdbaa8871ec66513fc56f6cd78948ac5d0f5695ac77631ac2ae7bf45a544fc8d9ce0598f2818386066a475a4f571653d4376aabce2497164015ecc426966c66a657864f24d1931454956a49d9e936bacd16108e84fbeaacad51aa27e9792ca0cf67a51209a2e63ffcd89470612b3271", 0xb6}, {&(0x7f00000008c0)="e315748003d1fc3caa513e6283bebc431933fc254ae59bfc5c7c923a9fa38f980b6625411e412c87a9998b3aaa5e7f80bad7ee0c9c563003a55113a9e0f58fe745329a78c5d0fe61da3d7ea221ea2e965bc6eddf2a789cb4b8d52a9cb18329569586c81b2dc8fef36e8f2c841eab091c562149c6", 0x9a11412eb5992758}, {&(0x7f0000000940)="c9eb86529800ed090ccb583bbb6b6aed7a8c37c8c41a70c42cb92269669237f9ca1ed299e94e0bfbb3f3cd9ef757bd6067e1c73b397a517471f82505d920c705b267bc153f8e519b19aa3ecd8c09c52afbacf6b40d51b2a01fe8353ff6a9bdd82a5371e9968ad88471062b1edc7a2da865ea31b5e96fb28fd3442473eaae55271585c04984d25d35dc9554ff5faf9f", 0x8f}, {&(0x7f0000000a00)="130e1001a36189a30c854dec002e3818d1a190cfa2c0034f2fa376917e71555f03dda60ddb759feda231c2f35671585e99bf81f7b6ebbfae1656ecdddb40ec5deca14e3a4f59dddb30ab46276aa34b23f0b3ecabe9837cc7da0e2b5f9ad87f7716da0182a30fb5631cfcfbf0f5bff05e53da542ca5f11a053f9c6843ae5403b6b4cd9604ed1b5df48d7b6838712434103b10cff73c1f89eea85091f848012ab08ba53efb650ad37dbb55", 0xaa}, {&(0x7f0000000ac0)="b941b7080913162d85b28bef427699de0145eeced327c4d7c796f8d6c7f96e753553a7834fa587669bd34fb5f7838d65c2e7f2d4d6db3166820de3f291701c3f9d153c747a62467f09257fbb888dad5cd01b70da0f125da162cdce17d8856519e797e5", 0x63}, {&(0x7f0000000b40)="e5380e0c57c7a39c8e01ecf35eaf3d08372629102821c3b7cb26e9ba2e493a987324ec0423e88ddd7044019942d7c560515e5bfdc950fc96e8b56fb14e891f12447ac33df350b0ae1723a64e9c625236ab672c9cafc3ff5911fb9735fc0a5179a5", 0x61}], 0x9, &(0x7f0000000c80)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @rand_addr=0x9}}}}], 0x28}}, {{&(0x7f0000000cc0)={0xa, 0x4e22, 0x1, @rand_addr="8e05413936d2fe718ede32ba25d37a4f", 0x3}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000000d00)="2757c225bca05945d682b5895627d0e38c27bf1f49dbd4d5b5e54f29a7eccc4167d414cee492ee349132645bf0c18a704869154c9354f5b81b8abb8630e0b98bbe25e62d1975da81eae92e7ca77edc78aef5b4bbf0024a8594a855b20f37d885199e63f9bb0d0c9ca4e14a8f14938d9a0f7b138558f74297be4c59662b3f644845c7e1bc982f3b46fd3de5738bd4ece433a94a03f7302896d33c33975a86598b5c98bd863af152c9afac36254c1ac45c9a21b6a5036649789d9dae465cbf203ef222d86c6b7ccb523a90d78350f639d9b05f541ab129bd4d4c51", 0xda}, {&(0x7f0000000e00)="db03486b843c9e6bd3c148e02915ff600fe6f61897fde572b1913ad52dacdc82f6ee247b891b3da29a555d07e715e21474d0dadcaafbd1da1fbd5641c7787579b57bab38b9ccb03a4f1b713df994a32c5ea099d76cc22f2bd8206a9ccaa3888f00fd9b3f3fa635d581fd464914d3bcb1e16b5fcab9", 0x75}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)="6f754ce7bd5f86e58cc422396e7cf18dfb2e8756f8fe06acacde752b8fb3e4d396125780e3bc17dd3f97e1ae58a7ac39", 0x30}, {&(0x7f0000002540)="1b4e1e143a23772e63c97b21cdb7197d8288c84867467a29542976ecb024809803b3ca60699dba3a2054bd336ce9a7df0c739abbe4539a09092a4e15c51dbc321bedbd7f5ac4b25b2eed142b9f9b39bb6e5e462a49017d939e8f0905b7c13d7f4074722483411ed5124b2abc967247b7b3c8a9bde3989b3523bedfc8df85b1ae9805095c12c122650142e9ed51522b1e58415a27f148da515e54b618dfac18107f215381bc37ecf5a91b707de4f5de029e0831eb65f15c2c4367aafc6d469d", 0xb2}, {&(0x7f0000000fc0)="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", 0xfe}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f00000020c0)="a8b44688e766e3679be8339f31148a9fa31186ddfe3506b02091182da6e77c39b68bdf4a954bc87b2ed76913dff1b5182a4fa27fbbabfe4d45f6daaf1d4d7182e257bb58d486a11d52b7dd76a95141b45a65f17b0952d646fa2fc0e00ff0e59e67b8a93fc5fd2f4eb6d8a8f3d887a959ce1b42edeb566489124e36c58529e6474c165fc473b0ed0dd45af1336a0df3d86d381712", 0x94}, {&(0x7f0000002180)="613a3303386be37c1751424b7f4ed2381650ff924ef5fff3ab061076ee76a1f859bdd2e3bdc689c5fcce8c9b7ca5c4b11b46748f95a5e9374b6523605a0e9854497ec3b6b02a85f6c33efb6a11a7ba1e9f663d40fb5882ff5925a54cc6b067fc496b39133919b0f4c9052b48e2589b59c26457fdb53befa4d737fd21ed6f69c118492a7bf412ef28d4942eda3f82bf70ea37ffe4bb1f8ce6292904cd9fc5570dbda9dcfa5c292c8702f4a32efa9ad17a7d851be9d3f3409694a9b92cdbd4f0949cebf21642278bbcb3b2b569fc", 0xcd}, {&(0x7f0000002280)="8b09bc73ce81f592bccae98dfc1b31ac937acbac1ba11ff42e431d0593410acddc8a10f7bc89c3d322f03dc931296d92a4d23bc57326a3f3b7f781e3f1363363281b0c8b6562200cd071c28cd80b7e14d195b1d05f393f5637dfcec34f9db8a76eba990c1a8cd5c5a3cd940e5ba742ae7df05b5556ce22dd6d4438239befb010c2eca976710aedf745e47c331eb9b1389f27b3f33a80b919fadbfbd3569cfe2801adb9b1d91b5e9f6e56d7", 0xab}], 0xa, &(0x7f0000002400)=[@dstopts={{0x18, 0x29, 0x37, {0x11}}}], 0x18}}], 0x4, 0x40000) [ 207.523396] binder_alloc: 8741: binder_alloc_buf size 5043104649746841736 failed, no address space [ 207.523403] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:35:39 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 207.523422] binder: 8741:8743 transaction failed 29201/-28, size 112-24 line 3284 03:35:39 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 207.524786] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.527194] binder_alloc: 8741: binder_alloc_buf size 5043104649746841736 failed, no address space [ 207.527202] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 207.527223] binder: 8741:8751 transaction failed 29201/-28, size 112-24 line 3284 [ 207.527893] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.679982] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.693979] binder_alloc: 8724: binder_alloc_buf size 2433791286091808928 failed, no address space [ 207.703080] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 207.711953] binder: 8724:8779 transaction failed 29201/-28, size 112-0 line 3284 03:35:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x10d2c0, 0x8) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 03:35:39 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 207.720125] binder: undelivered TRANSACTION_ERROR: 29201 03:35:39 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:39 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:39 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:39 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:39 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000001000"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x3, 0x9e7, 0x8}) [ 208.343057] binder: release 8750:8767 transaction 620 out, still active [ 208.350383] binder: undelivered TRANSACTION_COMPLETE [ 208.350391] binder: BINDER_SET_CONTEXT_MGR already set [ 208.350399] binder: 8750:8767 ioctl 40046207 0 returned -16 [ 208.367435] binder: send failed reply for transaction 620, target dead [ 208.378826] binder_alloc: 8810: binder_alloc_buf size 4503599627370632 failed, no address space 03:35:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a747000000000000000000000000000000000000000003a00000000000000f80000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/113], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="5f4e2967ef88cd6f5edcbc03db257d"], 0x0, 0x0, 0x0}) r2 = socket(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000200)={0x101, 0x486, 0x40, 0x3, 0x7}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x4000a106, &(0x7f00000005c0)={0x77359400}) bind$unix(0xffffffffffffffff, &(0x7f0000001700)=@file={0x28321892917400cd, './file0\x00'}, 0x5f) [ 208.387958] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 208.396860] binder: 8810:8811 transaction failed 29201/-28, size 112-24 line 3284 [ 208.405615] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.411290] binder: BINDER_SET_CONTEXT_MGR already set [ 208.416945] binder: 8810:8813 ioctl 40046207 0 returned -16 [ 208.423118] binder: 8810:8813 transaction failed 29189/-22, size 112-24 line 3138 [ 208.431190] binder: undelivered TRANSACTION_ERROR: 29189 [ 208.463112] binder_alloc: 8816: binder_alloc_buf size 8056245870245007080 failed, no address space [ 208.472451] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 208.481852] binder: 8816:8817 transaction failed 29201/-28, size 112-24 line 3284 [ 208.491707] binder: undelivered TRANSACTION_ERROR: 29201 [ 208.498587] binder_alloc: 8816: binder_alloc_buf size 8056245870245007080 failed, no address space [ 208.507772] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 208.516653] binder: 8816:8818 transaction failed 29201/-28, size 112-24 line 3284 [ 208.525228] binder: undelivered TRANSACTION_ERROR: 29201 03:35:42 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:42 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00@:\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000180)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xcb) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x1}, @sack_perm, @sack_perm, @window={0x3, 0xa6, 0xb1}, @mss={0x2, 0x1}], 0x5) 03:35:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000001c000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000099e928d6bfcee2a93dd041ececfda4ba50d1502f368eb764dcf7ed5f474c8e09bb317a9b8e9e93ff7a91a5125fe05a6fd467f1ff89f37253960d0ea3c060414219ef755786"], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') r3 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r3, &(0x7f0000002340), 0x0) readv(r3, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r3, 0x5432, &(0x7f00000002c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000300)={0x20, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x3}, @free_buffer={0x40086303, r9}], 0xa4, 0x0, &(0x7f0000000440)="29444a61ab9a95682bcb4bcf42b6c90c1f8f59078e646cf413a68fd790f1cb6321b43e07ca3a90bfadf9737291c631bd944b567ddde6167de56861ca67cc5cdb63f771b8f4b5c19f9af1f142e69505f0e6d4e57adca8bbf1d4d995894594c133ee2c4e4d05c651eb5a155fa463eca684869a60c5f1d84fe05fe1674927fc6b2dee0cc2db586cee17f1f3c1104543d8aa3b9f6b52da38ea33ff2589837604464f27fcb11d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x90, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@handle={0x73682a85, 0x1080, 0x1}, @fda={0x66646185, 0x7, 0x0, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/248, 0xf8, 0x2, 0x3a}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}, @enter_looper, @increfs_done={0x40106308, 0x1}, @register_looper, @free_buffer={0x40086303, r9}, @acquire_done={0x40106309, 0x1}, @release], 0x0, 0x0, &(0x7f0000000240)}) readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) ioctl$RTC_VL_CLR(r2, 0x7014) r10 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r10, &(0x7f0000003d80), 0x0, 0x0, 0x0) bind$inet(r10, 0x0, 0x0) 03:35:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1ff, 0x638601) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) wait4(r2, &(0x7f00000004c0), 0x8, &(0x7f0000000500)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) mlockall(0x7) writev(r4, &(0x7f0000000040), 0x0) getsockname$netlink(r4, &(0x7f0000000100), &(0x7f0000000140)=0xc) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r6, 0x0) keyctl$instantiate_iov(0x14, r5, &(0x7f0000000480)=[{&(0x7f0000000240)="e642020e3816f38acdb96c49cda151d4fa61da28f1a6ddb3f9939f7dd3d67f8b0a9781bb95d8776d21263d3a1cf18ed27b12acc361e7477505e5fa69fa96cf363fc0cbfec4172f373d1831b0d43bbb307cb84e1721fda497d2c5068c0de80bbc1aa57c999146e480fb5c237067f483174158f6bea7065e42cbd24fc2e553", 0x7e}], 0x1, r6) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x5, 0x5, 0x100, 0x400, 0xa, 0xad, 0x4, 0x80, 0x7, 0x1}) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) 03:35:42 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 210.615985] binder: 8825:8829 transaction failed 29189/-22, size 112-24 line 3138 [ 210.620847] binder: 8827:8831 got transaction with out-of-order buffer fixup 03:35:42 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, 0x0}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @fda={0x66646185, 0x6, 0x1}}, &(0x7f0000000040)={0x0, 0xfffffffffffffe43, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x880000b4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x88000}, 0x95e3c68774c3046d) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) r4 = dup(r2) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f00000000c0)={0x1, 0x46, "c36a97f42de86199777cc277340b9c5f6c30cdf890d1f5dc685073d5ccd632c200e043752330214fd1b3c05f9e2aae4d7dbe9d727f423457cc712d654bd6e8980c9daf824158"}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 03:35:42 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair(0x9, 0x3, 0x20, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000240)=0x6cf) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1c, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @register_looper], 0x1a, 0x0, &(0x7f00000001c0)="d27211465b77ce9bf214641b1621ddc6f24ed77bcc107f414164"}) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r7}]]}}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r10, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x13}, @in=@loopback, 0x4e21, 0x8000, 0x4e22, 0x100, 0xa, 0x40, 0x80, 0x2f, r7, r10}, {0x1, 0x5, 0xa7db, 0x3, 0x81, 0x2ba, 0x6, 0x1f}, {0x4, 0x8000, 0x8, 0x40}, 0x1000, 0x6e6bb7, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d5, 0xb0002df6eeb6bcac}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3502, 0x3, 0x2, 0x7, 0x3, 0x7fffffff, 0x4d1a}}, 0xe8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000380)={0x4f7, 0x7fff, 0x5}) r11 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r11, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000000280)) [ 210.620881] binder: 8827:8831 transaction failed 29201/-22, size 112-24 line 3467 [ 210.621005] binder: 8826:8832 not enough space to store 1 fds in buffer 03:35:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000eba8011b01ecc887e01a9fd3d06cac5445896d902bcda6e8391a5c9762a4c0606f10af97046dc27823a6bf55724fde22481cf404437f03961f9b8ec21ce928c42ca966ad86606a2f1e8e770df254e22f3bed0f470e80bf564f8f9603894494bfe1e3dd9d51055856a34e127823708616cad0dea106d57612bfe37a46"], 0x0, 0x0, 0x0}) [ 210.621026] binder: 8826:8832 transaction failed 29201/-22, size 112-24 line 3475 [ 210.622277] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.626447] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.630281] binder: 8826:8833 not enough space to store 1 fds in buffer 03:35:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) uname(&(0x7f0000000000)=""/42) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05630440020000000d6300000b6300000d63000001634040030000000000000000000000000000000000000011000000000000000000000060000000000000001800000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000776b0002000000000000000000ed8dd6ccc0e5d3dbc6de63eaa900000000000000000000000000000000000000000000000000ccfc3c83728a8fae0000000000000000000000000000c8e6a3000800000000000000000000000000000000000000000000000000000000010000000000000000000000000000100000000000d03fa2738a95d4852425d59ed87472b3e7ae233e80f50c2895d85776f41fad6a9c7dd748bc6196ece1"], @ANYBLOB="ac0000000000000009000000000000003b00000000000000852a68770a000000000000000000000000000000000000008561646600000000030000000000000002000000000000002d00000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000004000000000000004000000000000000"], @ANYBLOB="0763044003000000"], 0x0, 0x0, 0x0}) [ 210.630317] binder: 8826:8833 transaction failed 29201/-22, size 112-24 line 3475 [ 210.631894] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.653664] ip6_tunnel: xmit: Local address not yet configured! [ 210.738283] binder: 8849:8852 got transaction with invalid offset (-445, min 40 max 96) or object. [ 210.738310] binder: 8849:8852 transaction failed 29201/-22, size 96-24 line 3379 [ 210.764009] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.772592] binder: 8849:8861 got transaction with invalid offset (-445, min 40 max 96) or object. [ 210.772624] binder: 8849:8861 transaction failed 29201/-22, size 96-24 line 3379 [ 210.783049] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.811114] binder: 8865:8867 not enough space to store 1 fds in buffer [ 210.811142] binder: 8865:8867 transaction failed 29201/-22, size 112-24 line 3475 [ 210.811286] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.918390] binder: undelivered TRANSACTION_ERROR: 29189 03:35:42 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x5600000000000000, 0x3}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = accept$inet6(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x1c) ioctl$sock_ifreq(r3, 0x15603, &(0x7f0000000200)={'syzkaller0\x00', @ifru_mtu=0x7}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x402) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:42 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:42 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 210.944988] binder: 8854:8873 got transaction with out-of-order buffer fixup [ 210.965574] binder: 8854:8873 transaction failed 29201/-22, size 112-24 line 3467 [ 210.975609] binder: release 8882:8886 transaction 654 out, still active [ 210.975613] binder: undelivered TRANSACTION_COMPLETE [ 210.981218] binder: send failed reply for transaction 654, target dead [ 211.323680] ip6_tunnel: xmit: Local address not yet configured! [ 211.542671] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.548224] binder: BINDER_SET_CONTEXT_MGR already set [ 211.548234] binder: 8854:8873 ioctl 40046207 0 returned -16 [ 211.645708] binder: BINDER_SET_CONTEXT_MGR already set [ 211.651109] binder: 8874:8878 ioctl 40046207 0 returned -16 03:35:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) read$FUSE(r2, &(0x7f0000000480), 0x1000) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x1}, 0xf) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:45 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x28, &(0x7f0000000100)}, 0x10) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="116348400000000000000000bfd5eca70000000000ff000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000180)=""/174) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000240)=""/214) 03:35:45 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x0, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xa) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:45 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x0, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:45 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:45 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x0, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:45 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000000)={0x7, 0x6d, 0x2}, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x80000000002c00) 03:35:45 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:45 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:45 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000280)="665bcb19dfecf4b9ba7252ad18bd656ff52318fa013ffd00a5871b58ff9ebb7b85aa5c7d8bcec6947bae0acf146c1937d9473f354a4557135db1ca711ee43d4e4195ba4e370d1c944be3f3ec98018d810729aa3220bbf73e72a2b579680e7016403e03d9710ce414cdbcf485149c9a4fbf38506ab5486dac750e54dc072804e8dde3549d05147298b08ee1c4b48bc05a8c30a60c4e4f6149ce573b8fb651b296e694c9b147019e999e22d99f97e5e5de0e396222a8c58a47e6e3310771d89369f2c1477907c8add5658c6941d4721af2", 0xd0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000780)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {}], 0xa, "adfc8aadd01e6edc1d4c4896b4734c284f2983e252fa"}, 0x30) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r1, 0xac, 0xf9}, &(0x7f0000000380)={'enc=', 'pkcs1', ' hash=', {'rmd256-generic\x00'}}, &(0x7f0000000400)="bb49552be3cede7e3f0b0deafc62cae2805d473cedbdbc48489d7fcd1748084e2f0381d2de20622b4e50d575b1a4f162a271e32611dfb3ebae2b31cab409b728ca29fac4c7fb0206435dce041f46934de16d4088585f41d8413e6c3daa742d607d90f5cb0fda7daedb791ad09456cd983015f1bafe31bc710c41e6f445c6cc00e1f32b8d7380e2f610475e5f5f6784e29f60216f3ab7d1535c82e7d607867dc10fa7922e5726240a8b05fb00", &(0x7f00000004c0)=""/249) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000086a5000000000000001f00000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a74700000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600000012f700000000000000005cf3f6cb34c8f6599694e64d60c95521a8e5ed167bdc9d2638a590f636ed60b32a26ba71fdaa52fc907632ae8916bc7ca68b420ef447ea7bbd2a940e96d580aa0695b250fae26480321a8eb1d2caea4b70cc38dc3a1dd496c975b0fb2e4991815d"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/zero\x00', 0x10001, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000005c0)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @multicast2}, @in=@remote, 0x4e24, 0x7fff, 0x4e22, 0x75b4, 0x2, 0x20, 0x80, 0x2b, 0x0, r5}, {0xfffffffffffffffe, 0x3ff, 0x4, 0x6, 0x3, 0x2, 0xffffffffffffffc0, 0x9}, {0x101, 0x0, 0x59e}, 0x7, 0x6e6bb9, 0x2, 0x1, 0x2, 0xd56141d63af4630f}, {{@in6=@mcast2, 0x4d5, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3503, 0x0, 0x0, 0x9, 0x4a89, 0x1f, 0x29b3}}, 0xe8) 03:35:46 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:46 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x0, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000010000000000"], 0x0, 0x0, 0x0}) [ 214.450462] binder_alloc: 8901: binder_alloc_buf, no vma [ 214.456278] binder: 8901:8906 transaction failed 29189/-3, size 112-24 line 3284 [ 214.464018] binder: undelivered TRANSACTION_ERROR: 29189 03:35:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) write(r1, &(0x7f0000000180)="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", 0xfd) write$UHID_CREATE2(r1, &(0x7f0000000680)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1000, 0x4, 0x7, 0x0, 0xac4, 0x6, "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"}, 0x1118) set_robust_list(&(0x7f0000000300)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x9328, &(0x7f00000002c0)={&(0x7f0000000280)}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:46 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 214.515545] binder_alloc: 8953: binder_alloc_buf size 65672 failed, no address space [ 214.534967] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:35:46 executing program 4: alarm(0x2) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 214.551447] binder: 8958:8961 not enough space to store 1 fds in buffer [ 214.551478] binder: 8958:8961 transaction failed 29201/-22, size 112-24 line 3475 [ 214.551639] binder: undelivered TRANSACTION_ERROR: 29201 03:35:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d3556900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f1da567bff65e63ef"], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x431681, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/44) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x68) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040), 0x0) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r4, 0x0) keyctl$setperm(0x5, r4, 0x8) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000180)=0x0) ptrace$cont(0xad14ba28498be6b2, r5, 0x475, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040), 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) fallocate(r0, 0xc, 0xffff, 0x21) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000040), 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000500)='/dev/full\x00', 0x101000, 0x0) dup3(r9, r10, 0x180000) r11 = socket$nl_route(0x10, 0x3, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r2, 0x400454ce, r12) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000017000028000000000000005000000000000000"], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="74a24e0a17d12dfe828af9fd592b90413a5403124a26d327079e3b7920fad10085b583bcf27efd6095ce70688b364764e201aff1271971aadcca7dcb28dd566704a74e3749963bb3fe9400f0b9def9afa198f05b245b0e9e9a94dd04693d96b7c2b725c95dca0bc8af384c58734cfdaf02cfed8d195a1cfee423b9ebe1e211e15a2dbada842875d035276a0fc79661cd3e9dfe5579483669f044c2b208abebe68257c359d56dd0171c109e735caa859a75316b4313860e70305e8d61", @ANYRESHEX=r7, @ANYRESDEC=0x0], @ANYRES32=r8, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT=r9, @ANYPTR64, @ANYPTR, @ANYBLOB="782df4407ad090355940b1658676524f7d2d5eed330b3bb9dfe4df8bbed6377bc6d8e71bd1066d3d32eeb19aa0969af828295f543dc1ac2ee159c8343f0d75b3f0865fef2497bb20163c9bb157efe483ab2b436c85b5412287b5f37eaddf4353e9780f74450b1b883d16733ebbee4edfb3ed5be89ef4e412411b46da7ed9cc46960753272d37cb805505c943f5cd1157a87b0d297233956dfad862443e137099e519e3b35ce9e87e556cf2", @ANYRESHEX=r3, @ANYPTR64], @ANYRESHEX=r11]], 0x0, 0x0, 0x0}) 03:35:46 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x0, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600), 0xffa6, 0x0, 0x0}) 03:35:46 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 214.555584] binder: 8960:8962 got transaction with invalid offset (40, min 40 max 112) or object. 03:35:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000240)={0x3, 0x4, 0x4, 0x1000, 0x100, 0x35b7}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000180)=""/108, 0x6c}], 0x2, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="a38f7c4d8b3079ba69703d00000c610a5f5776bd20efae09fbe9db2051c468494b54e6369cfb865e4f1601213762f9865d25bf"], 0x0, 0x0, 0x0}) 03:35:46 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x0, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x1806) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x404) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) write$nbd(r3, &(0x7f0000000000)={0x67446698, 0x1, 0x1, 0x3, 0x2, "ac6544886139deced62c633df666bca11c5b3e234fa3f67e579b65125eeb1dea"}, 0x30) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 214.555614] binder: 8960:8962 transaction failed 29201/-22, size 112-24 line 3379 [ 214.556507] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.560518] binder: 8958:8963 not enough space to store 1 fds in buffer [ 214.560547] binder: 8958:8963 transaction failed 29201/-22, size 112-24 line 3475 [ 214.560962] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.618225] binder_alloc: 8970: binder_alloc_buf, no vma [ 214.618247] binder: 8970:8971 transaction failed 29189/-3, size 112-24 line 3284 [ 214.618656] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.687694] binder: 8982:8986 unknown command 0 [ 214.687702] binder: 8982:8986 ioctl c0306201 20000140 returned -22 [ 214.696699] binder_alloc: 8979: binder_alloc_buf size 536872008 failed, no address space [ 214.696707] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 214.696725] binder: 8979:8987 transaction failed 29201/-28, size 112-24 line 3284 [ 214.696946] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.700602] binder: 8982:8990 unknown command 0 [ 214.700611] binder: 8982:8990 ioctl c0306201 20000140 returned -22 [ 214.762527] binder: 8993:9001 ioctl 40286608 20000240 returned -22 [ 214.762677] binder_alloc: 8993: binder_alloc_buf size -5009919735614369744 failed, no address space [ 214.762684] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 214.762702] binder: 8993:9001 transaction failed 29201/-28, size 112-24 line 3284 [ 214.762850] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.769457] binder: 8993:9004 ioctl 40286608 20000240 returned -22 [ 214.769861] binder_alloc: 8993: binder_alloc_buf size -5009919735614369744 failed, no address space [ 214.769869] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 214.769890] binder: 8993:9004 transaction failed 29201/-28, size 112-24 line 3284 [ 214.770206] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.989279] binder: 8953:8954 transaction failed 29201/-28, size 112-24 line 3284 [ 214.999175] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.004719] binder: BINDER_SET_CONTEXT_MGR already set 03:35:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x2, 0x2, 0x2a}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000000c0)={0x10}) writev(r2, &(0x7f0000000040), 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) 03:35:46 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="02000000000000007f2e3a426a1a3272bc6a5b7ca1d624d7f007cb451ee3501cd0231dd8e08deae22be8827d3dfcecf12a6d0ab8f65c5f053749e5648e9162fc"], 0x0, 0x0, 0x0}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x4) 03:35:46 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/460], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) 03:35:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x79, 0x0, &(0x7f0000000240)="965d41d7b4218f185c92f33b3348c0f5f89e485e30ebcd162f5186a9bbe3b5023130b8e0c9c73ec9884e83ad136513b0f8472c6540bc0e6e39688c9b9297f46d5da292f7148f9b6d3fda8fa9a8ee75e2b3ac63544e8beaf6ac6e0f28b7ece294efee72957d10467372f357a49c8e7297bfa20bd0b190b0df7b"}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000800000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffffffffffe71}], 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000000)=[@enter_looper, @enter_looper, @register_looper, @register_looper, @acquire={0x40046305, 0x3}], 0x1000, 0x0, &(0x7f0000000680)="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"}) [ 215.010021] binder: 8953:9014 ioctl 40046207 0 returned -16 03:35:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000100000000000000070000000000000001800000000000000261bdf1293b8247d07f19cf9a2ccda81173735c6427b4cab6238719c8090cf98a7468f1314320dd69b688377639d9b2ab15898caea3218f354df4973a7c1dcaae9e47ef7934e36ab22a9009d44b0843e8a35d294e37da924ea3e8a98f659cea7bdab44d30bc9ce9745e9ff630e02fc388a1364f91c255d9c7d9cfeb6b976cf4fbb36c91c4b7203bda564081e3000"/205, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fchmod(0xffffffffffffffff, 0x80) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0}) [ 215.046861] binder: 9015:9026 got transaction to invalid handle [ 215.047960] binder: 9017:9025 got transaction with unaligned buffers size, 2 [ 215.047986] binder: 9017:9025 transaction failed 29201/-22, size 112-24 line 3347 [ 215.054259] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.058317] binder: 9017:9028 got transaction with unaligned buffers size, 2 [ 215.058344] binder: 9017:9028 transaction failed 29201/-22, size 112-24 line 3347 [ 215.058619] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.066560] device vti0 entered promiscuous mode [ 215.067649] binder: 9022:9027 got transaction with out-of-order buffer fixup [ 215.067675] binder: 9022:9027 transaction failed 29201/-22, size 112-24 line 3467 [ 215.068108] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.070367] binder: 9022:9027 got transaction with out-of-order buffer fixup [ 215.070391] binder: 9022:9027 transaction failed 29201/-22, size 112-24 line 3467 [ 215.070944] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.093668] ip6_tunnel: xmit: Local address not yet configured! 03:35:46 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:46 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 215.148547] binder: 9015:9026 transaction failed 29201/-22, size 104-24 line 3138 [ 215.186709] binder_alloc: 9038: binder_alloc_buf size -6103367868270430304 failed, no address space 03:35:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r0, &(0x7f0000002340), 0x0) readv(r0, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r0, 0x5432, &(0x7f00000002c0)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000032f100000000000000000000000000000200000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00u\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_persistent(0x16, r1, r2) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000400)=""/186) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000050cc39592c086f67cfb544b458eec9de01ee37f8682e0754f20cd83e39e0177e88416736d8341e193198918c9b859c6dadc8cf9fb30c9b578874c8c5eca2020fdba74737043a000323c13571b6b0c07e9c8968970b6cf8b18fd9c1f127d268551a3d49f60f50185901e9df86ca2794b355258c6e098ac8a897248c8d14820ec954bb18b08bd9017ec21889b2ed820f82c4b0302f606456b1cd8726979663f52f7ce01ee6d75dd13808be2f25087c5c4f7a2f9a950000000000000003d2f9f01034ee014b9b"], 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r6}]]}}}]}, 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) connect$packet(r0, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x4, 0x6, @broadcast}, 0x14) [ 215.217372] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 215.226867] binder: 9038:9040 transaction failed 29201/-28, size 112-24 line 3284 [ 215.241135] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.253180] binder_alloc: 9050: binder_alloc_buf size 128642869362688 failed, no address space [ 215.281028] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 215.295555] binder: 9050:9052 transaction failed 29201/-28, size 7340032-1572864 line 3284 [ 215.299469] binder: 9057:9058 not enough space to store 1 fds in buffer [ 215.299495] binder: 9057:9058 transaction failed 29201/-22, size 112-24 line 3475 [ 215.339724] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.351818] binder: BINDER_SET_CONTEXT_MGR already set [ 215.357801] binder: 9050:9061 ioctl 40046207 0 returned -16 [ 215.384292] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.389973] binder: BINDER_SET_CONTEXT_MGR already set [ 215.395545] binder: 9057:9064 ioctl 40046207 0 returned -16 [ 215.623629] ip6_tunnel: xmit: Local address not yet configured! 03:35:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f00000002c0)={@initdev, @empty}, &(0x7f0000000300)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, r2}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1a}, r2}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) exit_group(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:47 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:47 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffc5c7b1e238977b40ee7c95e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000feffffff00000000000000ee45252e87d1aec8498a5214a6d35569000000000000000000000000000000000000000000000000000000000000000040c398fb996620a31c00000000000000000000000000000000000000000000000000000000000000000000000000001000"/409], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:47 executing program 2: ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x48) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x609449bacae42333, 0x6) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x110001) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000f6600590028000000000000005000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a74700000000000000000000000000000000000000000000000000000000000000e0000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 215.841163] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.879686] binder: 9068:9077 not enough space to store 1 fds in buffer 03:35:47 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000000)={{0x4, 0x0, @reserved="d4e1d489ce3791a88f3e61e0b3550c7debfd8660380604e8e355895a93d5088a"}}) 03:35:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xb5cc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000040)=0x3) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @fda={0x66646185, 0x8, 0x1, 0x35}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}}}], 0x0, 0x0, 0x0}) [ 215.903180] binder: 9068:9077 transaction failed 29201/-22, size 112-24 line 3475 03:35:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0xd060}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000040), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r6 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000003d80), 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040), 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r9 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r9, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000180)={0x3e, 0x5, 0x9, 0x0, 0x0, [{r0, 0x0, 0x80000000}, {r5, 0x0, 0x80000000}, {r6, 0x0, 0xcd25}, {r2, 0x0, 0x8}, {r7, 0x0, 0x606}, {r8, 0x0, 0x8}, {r9, 0x0, 0xffff}, {r1, 0x0, 0x400}, {r3, 0x0, 0x9}]}) r10 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 215.904016] binder: 9071:9075 got transaction with invalid offset (25051711265570816, min 0 max 112) or object. [ 215.904042] binder: 9071:9075 transaction failed 29201/-22, size 112-24 line 3379 [ 215.904219] binder: undelivered TRANSACTION_ERROR: 29201 [ 215.935482] binder: release 9087:9090 transaction 710 out, still active [ 215.935487] binder: undelivered TRANSACTION_COMPLETE [ 215.936962] binder: send failed reply for transaction 710, target dead [ 215.938334] binder: release 9087:9093 transaction 712 out, still active [ 215.938338] binder: undelivered TRANSACTION_COMPLETE [ 215.950737] binder: send failed reply for transaction 712, target dead [ 215.984973] binder: release 9096:9098 transaction 714 out, still active 03:35:47 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:47 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 215.984979] binder: undelivered TRANSACTION_COMPLETE [ 215.985538] binder: send failed reply for transaction 714, target dead [ 216.045064] binder: 9099:9106 got reply transaction with no transaction stack [ 216.045074] binder: 9099:9106 transaction failed 29201/-71, size 0-0 line 3046 [ 216.093745] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.100314] binder: 9068:9108 not enough space to store 1 fds in buffer 03:35:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ab72000000000008"], 0x0, 0x0, 0x0}) 03:35:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) dup(r2) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$setopts(0x4200, r3, 0x401, 0x10004a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$FICLONE(r4, 0x40049409, r5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x8, 0x2, 0xf}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x18, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3}, @acquire={0x40046305, 0x3}], 0xc0, 0x0, &(0x7f0000000240)="fc6d43dc440d54dbad9428ea975040a1e75764ee2ba21abe516cef778b740f7bf803c927cf18b87eb3375ce38591cfe7bcea03a7747110a49a1e6f09ff92f6201e3b95d6abfe7fcf52c78b38a89671a12ada6c58e911e235aed51b8770e41f5c12580c74b3c39363765a8adb4672fbb8aeb0c948e4b44bbc8807de21784ba4b9e57c3cd101a06a220ad1324004b9b8ee4cbb809f93cef9c5b21d242acacab48724722aa0191c83dd24dd51e3ae910b23f4fc6f90aae07ffdc7cb73141cc04611"}) [ 216.129226] binder: 9068:9108 transaction failed 29201/-22, size 112-24 line 3475 [ 216.138592] binder: undelivered TRANSACTION_ERROR: 29201 03:35:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff010000000000000000000003ed000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d355690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000c36c3a6f07f0e1c6e7e595373a24dc6aad3af29a035bd250e0e5e8afbdfd4a3279b70d0166eda44c2389ad61918f746d7536f809704d35f93ba3546c8b5d7fb7033b577fa5dec448385826cd5f3dd4cc720a13dcb883608b8e"], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:47 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:47 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 216.251319] binder: 9122:9128 got transaction with invalid parent offset or type [ 216.270457] binder: 9122:9128 transaction failed 29201/-22, size 104-24 line 3454 [ 216.287537] binder: 9122:9123 BC_REQUEST_DEATH_NOTIFICATION invalid ref 3 03:35:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0, 0xffffff90}, @fda={0x66646185, 0x1, 0x1, 0x5}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:47 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:47 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 216.298122] binder: 9122:9123 Acquire 1 refcount change on invalid ref 3 ret -22 [ 216.307581] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.314389] binder: BINDER_SET_CONTEXT_MGR already set [ 216.314399] binder: 9122:9128 ioctl 40046207 0 returned -16 [ 216.373206] binder: 9143:9146 got transaction to invalid handle [ 216.391905] binder: 9143:9146 transaction failed 29201/-22, size 112-24 line 3138 [ 216.401170] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.408563] binder: 9143:9152 got transaction to invalid handle [ 216.415886] binder: 9143:9152 transaction failed 29201/-22, size 112-24 line 3138 [ 216.424609] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.782721] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.783464] binder: BINDER_SET_CONTEXT_MGR already set [ 216.783472] binder: 9099:9100 ioctl 40046207 0 returned -16 03:35:48 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) waitid(0x2, r2, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="116348400000000000000000000000eeffffffffffff6f0000000000000018000000000000005c6243b23787501cabc205652408ba1cf849e2c80000000000005fbcf9a54dce90582845dad7b6a0a66630806dccfee29da991ba78e547b8814a7c229fab8e8a73845df5dfd2d07b", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) signalfd4(r1, &(0x7f0000000000)={0x844e}, 0x8, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000250000000000000050000000000000009ea6917bd478c2b3e2183f58386ef7df358b524bbd41216e3199ac5161f8e3fe2b6cde137e9cc65b9a787db49a3a04e49943baf1edca5a8ae4c04e2e08c98ba54047801aa3ea6733ba740fc988e6d124d720c529a560a5fa5b17064316ee016c4dbe1dc782"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:48 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:48 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 216.829932] binder: 9099:9161 got reply transaction with no transaction stack [ 216.837426] binder: 9099:9161 transaction failed 29201/-71, size 0-0 line 3046 [ 216.845347] binder: undelivered TRANSACTION_ERROR: 29201 [ 216.873864] binder_alloc: 9162: binder_alloc_buf, no vma [ 216.880029] binder: 9162:9169 transaction failed 29189/-3, size 112-24 line 3284 [ 216.888880] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.895938] binder_alloc: 9162: binder_alloc_buf, no vma [ 216.901526] binder: 9162:9172 transaction failed 29189/-3, size 112-24 line 3284 [ 216.909747] binder: undelivered TRANSACTION_ERROR: 29189 03:35:48 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0xffffffbd) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) fgetxattr(r2, &(0x7f00000000c0)=@random={'osx.', 'lo\x00'}, &(0x7f0000000100)=""/122, 0x7a) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000001000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000ac47"], 0x0, 0x0, 0x0}) 03:35:48 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="0000aa3b72b815e0035ec0e99196000000000000000000000000000000000005000000000000000000000000b48600000000000000000000000000000000000000000000000000000000000000000000ff0fe1ffffffffffffff0000b58c000000000000000000000000000006000000000000000000000000005792c1c5c0699d9600000000000000000000ff0f0000050000000200000000000000018000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000"]) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = accept$inet6(r1, &(0x7f00000006c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000700)=0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x79c6ec29f4fad3e9, &(0x7f0000000740)=0x1ff, 0x4) signalfd4(r0, &(0x7f0000000040)={0x6}, 0x8, 0x80000) syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x7fffffff, 0x1, &(0x7f0000000300)=[{&(0x7f0000000600)="b50c58af05ebc9c2b65d89472aeb5dab53dd4e109a48336fc03c84a5c46839541586519835bd8b28d51fd05dc0d57365e0b11376c44109c83051fbbbfde0141ff9c6652f557ba565fc32c0ac61cfd92128ff2714a8d8ecba24c1b6e64845d77d2a4343c47ec1077f692074917943f35cf9c81d599a84a5e84797f06c5242b2653f5b8c578dbf", 0x86, 0x333}], 0x80000, &(0x7f0000000500)={[{@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@nodots='nodots'}], [{@measure='measure'}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r3, &(0x7f0000000240)="b4abcfc2997595e8f77ec89ce46c1f66c541fe46fba6d8701dac2dd6cbdd57e7365bc36510521b022000d8aface246603f8c4e2b6ac2ec34bb4ef57c3f790bcd5b75c976690e0745410942a8e18f40825981d7d0211139623b6a9ab23edaa0e1434fafb8aef8690ed7528af1c5bf3fa5cee9986d1c440055cd17bcb85d47f7152b02ea78a814d83aa61f4197724706", &(0x7f0000000380)=""/119, 0x4}, 0xfffffec2) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040), 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000940)={0x238, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcde7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x402}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f1}]}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x5081}, 0x20002001) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000780)="bf8f1aea1b3228a21bd2dbefc5f57b1ebb1f31a0fd2a6f83d4d2a0aa15ccd9edc43e75234301816796dfa21cbbe044cfefe763f7fb5083b6300aff5b76641f78b2ff3f4d5164cd2b3db0850a6c6fdcb04883d086015b5ba3f34d68ea253b0d4d0650dc65a9ce927dcf85f1964171106281f57d562e2db7d4291c9dbc976ba82b45457cdb3d47c56c72f154ec295f5fd90b6b1014e639ba8c238a5f3bd07527b55e179a34", 0xa4, 0x800, &(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e) r9 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000164000000863857f90000000000000000000000000000ffff0f00000000700000000000000018001283bda6fa87c7588d75000000000000b946ad292327542fd03f767d", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="6a010000000000002800000030b7df1c7d6767d348309e362d99000000005000000000000000"], @ANYBLOB="0000f7fc6ab6a0c3d84e4071ebdb69f7d940b25b4def5f7288ae24d71f09cf52553627eb"], 0xfffffffffffffdc6, 0x0, 0x0}) 03:35:48 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:48 executing program 3: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000023165135000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d35569000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900"/400], 0x190) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(r0, 0x0, 0x41000000, &(0x7f00000000c0)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x80000000002c00) [ 216.998913] binder_alloc: 9181: binder_alloc_buf size 5164502872687116424 failed, no address space [ 217.011290] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 03:35:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 217.043698] binder: 9181:9185 transaction failed 29201/-28, size 112-24 line 3284 [ 217.080331] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.092323] binder_alloc: 9181: binder_alloc_buf size 5164502872687116424 failed, no address space [ 217.106437] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 217.115614] binder: 9181:9210 transaction failed 29201/-28, size 112-24 line 3284 [ 217.125005] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.682377] binder: BINDER_SET_CONTEXT_MGR already set [ 217.687734] binder: 9166:9177 ioctl 40046207 0 returned -16 03:35:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x2000000}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}, 0x3440}], 0x0, 0x0, 0x0}) 03:35:49 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:49 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:49 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 03:35:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/413], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000040), 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x200040, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r5 = gettid() fcntl$setownex(r4, 0xf, &(0x7f0000000280)={0x2, r5}) fcntl$setlease(r4, 0x400, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x2, 0x3}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) r10 = syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ee9e47f5", @ANYRES16=r10, @ANYBLOB="ba7c040d2fc6666edf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_STATUS(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42595117194974d9}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4600000051a0973138da93651c72e2ec3712d0c019c3c844fe823ba3a70a3922c5c687cf7cdb26b923c5fc5ad4ed5eb2b0352326c5a84418091cffbabfe2c24b2b2f24e5c02818a2a0cd97d5e1dcd51dcf123112ab64fe7b6a2455ad1b2bad43961114b86c78411dfdf35d41cb412a7567b90b67884b21a784418a57ae83a0af04076f2cd971b6c7f764813b881633dc9b92539c2a74477729e9e7b4f55995ff9ea046ed337a0ab0873ffb13c043d4e4ae7522e1667b14c7dc1a220764912ceb74f7ccf54f3ede0707310779bb3bce4332615a3484cedba893", @ANYRES16=r10, @ANYRESDEC=0x0], 0x3}, 0x1, 0x0, 0x0, 0x40091}, 0x40d8012) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r10, 0x800, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x40801) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r10, 0xee1646c1bd9deb84, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3c80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x984efc2917936c42}, 0x1) r11 = socket(0xa, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r13 = socket$netlink(0x10, 0x3, 0x0) r14 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r15}]]}}}]}, 0x38}}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', r15}) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) r18 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000000)={'lo\x00'}) r19 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000000)={'lo\x00'}) r20 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000000)={'lo\x00'}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = accept4(r0, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000380)=0x80, 0x800) r23 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r23, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r10, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r11}, {0x8}, {0x8, 0x1, r17}, {0x8, 0x1, r18}, {0x8, 0x1, r19}, {0x8, 0x1, r20}, {0x8, 0x1, r0}, {0x8, 0x1, r21}, {0x8, 0x1, r22}, {0x8, 0x1, r23}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1f}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x8044) 03:35:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) ptrace$getenv(0x4201, r4, 0x3, &(0x7f00000000c0)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d3556900"/400], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:49 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) mkdirat(r1, &(0x7f0000000000)='./file0\x00', 0x9c6e99cba6812131) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000002800000000000000500000000000000027c312871c14e4db7aed1edbaee76440a38e510a37ed38b25bfb1b1f9d68e1797b7b20eac47b0b14962d591b6403b5a335c015336b32a994ecf14f5b210a1420c0bcaf18296193e55eb8c66b6a75f554cf60fe09151772bc864c21c0a2b6cddea440fda4e36a13db4dc59f4b1395ea21bc01316242fb9e126f9300000000000000007fa85567b201030aa544054029000000000000000000000000003b57133b1f287fd9026596d742e36726a24e944a362920b3f1fef721d7835b2d25b6053d50edee17ec2d2f35542358429074e9ed395d73c1384c1f096e9c88dea156c1cb007f51000150f94c35abd190f083717a224ebba83495c1eab6988a6f0245e495685e60ea58a22152cadd0b62daaf331f48f5c66ccb3a4c7179561590c842669ec46274fa97322857e691defaf45c97"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) listen(r3, 0x9) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) [ 217.775925] binder: 9230:9234 got transaction to invalid handle [ 217.808035] binder: 9230:9234 transaction failed 29201/-22, size 112-24 line 3138 03:35:49 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 217.823446] binder: undelivered TRANSACTION_ERROR: 29201 03:35:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @broadcast}}) 03:35:49 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 217.850902] binder: 9230:9247 got transaction to invalid handle [ 217.861799] binder: 9244:9250 ioctl 81009431 20000180 returned -22 03:35:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x401, 0x3f, 0x0, 0x8}]}) [ 217.883084] binder: 9230:9247 transaction failed 29201/-22, size 112-24 line 3138 [ 217.883381] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.931213] binder: 9261:9263 got transaction with out-of-order buffer fixup [ 217.931242] binder: 9261:9263 transaction failed 29201/-22, size 112-24 line 3467 03:35:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000001c0)={0xffffffffffffffef, 0x100000001, 0x3, 0xffffffff, 0x100000001}) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000200)={0x7, 0x4d, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000070000004000000001800150000000000000000000000001a0000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 217.959939] binder: release 9244:9250 transaction 743 out, still active [ 217.968147] binder: undelivered TRANSACTION_COMPLETE [ 217.970786] binder: BINDER_SET_CONTEXT_MGR already set 03:35:49 executing program 0: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000018c0)={0x0, 0x0, 0x8}, 0xc) 03:35:49 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 217.970796] binder: 9244:9266 ioctl 40046207 0 returned -16 [ 218.038898] binder: BINDER_SET_CONTEXT_MGR already set 03:35:49 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 218.038908] binder: 9272:9273 ioctl 40046207 0 returned -16 [ 218.040018] binder: 9272:9273 ioctl c018620c 20000000 returned -1 [ 218.062777] binder_alloc: 9244: binder_alloc_buf, no vma [ 218.062829] binder: 9272:9273 transaction failed 29189/-3, size 0-1703936 line 3284 [ 218.070373] binder: BINDER_SET_CONTEXT_MGR already set 03:35:49 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:49 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x282, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:49 executing program 0: [ 218.070382] binder: 9272:9276 ioctl 40046207 0 returned -16 [ 218.070459] binder: 9272:9273 ioctl c018620c 20000000 returned -1 [ 218.143013] binder: BINDER_SET_CONTEXT_MGR already set 03:35:49 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 218.143022] binder: 9285:9288 ioctl 40046207 0 returned -16 [ 218.149515] binder_alloc: 9244: binder_alloc_buf, no vma [ 218.149533] binder: 9285:9288 transaction failed 29189/-3, size 112-24 line 3284 [ 218.154764] binder: BINDER_SET_CONTEXT_MGR already set [ 218.154774] binder: 9285:9292 ioctl 40046207 0 returned -16 [ 218.155011] binder_alloc: 9244: binder_alloc_buf, no vma [ 218.155029] binder: 9285:9292 transaction failed 29189/-3, size 112-24 line 3284 [ 218.225038] binder: BINDER_SET_CONTEXT_MGR already set [ 218.225046] binder: 9299:9301 ioctl 40046207 0 returned -16 [ 218.225317] binder_alloc: 9244: binder_alloc_buf, no vma [ 218.225336] binder: 9299:9301 transaction failed 29189/-3, size 112-24 line 3284 [ 218.232899] binder: BINDER_SET_CONTEXT_MGR already set [ 218.232907] binder: 9299:9301 ioctl 40046207 0 returned -16 [ 218.449291] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.454929] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.460555] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.467480] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.478681] binder: send failed reply for transaction 743, target dead 03:35:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r2, &(0x7f0000002340), 0x0) readv(r2, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r2, 0x5432, &(0x7f00000002c0)) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000000)) 03:35:50 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r1 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000040)) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) tkill(r1, 0x1000000000016) 03:35:50 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) accept$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xedEl\xd0\xd2L\xf177\xdb\x02np\x18\"\xc0ma\x00\x80\xab\x9d\xd5\x8a\x9a\x14\xe4P\xf1\xc9\x18\b\xf5\a\xf9O\xfe\xdb\xa3\x030x0}, &(0x7f0000000280)=0x5) setresuid(r6, 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5b, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$cont(0x11, r10, 0x9, 0x80) close(r9) r11 = socket(0x840000000002, 0x3, 0x6) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='lo\x00', 0x0, 0x2, 0x6}) 03:35:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000f97575196a6f5391d913be6dc0397a6c5ceef89b6e6e82800bbda84e75eec1184a9d44119976ae200b7e81560f235ed466edbf4652a68b651a0571d24cf73c5a0ad50286941c0c976514e6507d5773dfedc1750e02", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 218.729533] binder: undelivered TRANSACTION_ERROR: 29201 03:35:50 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty}, &(0x7f0000000100)=0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80000, 0x19) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@newlink={0x1bc, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x800, 0xe533ea6ca49cae70}, [@IFLA_VF_PORTS={0x130, 0x18, [{0x7c, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xeceb}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "7c6eea1bfc3670d993410d90b818b391"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1919a2116854e6d377aef9fd35ac1ac9"}, @IFLA_PORT_REQUEST={0x8}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x7f}, @IFLA_PORT_PROFILE={0x24, 0x2, 'md5sumppp0]-%bdev-!trustedGPL\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ba9bc6cdb860d21978614dee185ad9b5"}]}, {0x2c, 0x1, [@IFLA_PORT_PROFILE={0x14, 0x2, '/dev/binder#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c5747054cacfc62fea7b11b9fa5a594b"}]}, {0x58, 0x1, [@IFLA_PORT_PROFILE={0x14, 0x2, '/dev/binder#\x00'}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bd195fbd0e3ee57d0dd43e54903a15b0"}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x2}, @IFLA_PORT_REQUEST={0x8, 0x6, 0x7f}, @IFLA_PORT_PROFILE={0x14, 0x2, '/dev/binder#\x00'}]}, {0x2c, 0x1, [@IFLA_PORT_PROFILE={0x14, 0x2, '/dev/binder#\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ef859d6de301c31c18678792c7b8927f"}]}]}, @IFLA_PHYS_SWITCH_ID={0x18, 0x24, "086ae855fe56b4238a002ccf8e5a91d4a7f9a9"}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'rose0\x00'}, @IFLA_LINKMODE={0x8, 0x11, 0x4}, @IFLA_LINKMODE={0x8, 0x11, 0x8}, @IFLA_PHYS_PORT_ID={0x18, 0x22, "beeb367a048861455457aa388cc7e81d8b2d6d"}, @IFLA_TXQLEN={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164000000000000000000000100"/109], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:50 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 218.771467] binder: release 9314:9323 transaction 751 out, still active [ 218.779036] binder: undelivered TRANSACTION_COMPLETE [ 218.784638] binder: BINDER_SET_CONTEXT_MGR already set 03:35:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000028000000000000025000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000000)=0x3ff, 0x4) 03:35:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) accept$packet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xedEl\xd0\xd2L\xf177\xdb\x02np\x18\"\xc0ma\x00\x80\xab\x9d\xd5\x8a\x9a\x14\xe4P\xf1\xc9\x18\b\xf5\a\xf9O\xfe\xdb\xa3\x030x0}, &(0x7f0000000280)=0x5) setresuid(r6, 0x0, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5b, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$cont(0x11, r10, 0x9, 0x80) close(r9) r11 = socket(0x840000000002, 0x3, 0x6) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e22}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='lo\x00', 0x0, 0x2, 0x6}) 03:35:50 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 218.784648] binder: 9314:9328 ioctl 40046207 0 returned -16 [ 218.784913] binder_alloc: 9314: binder_alloc_buf, no vma 03:35:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00#\x00'/24], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) [ 218.784933] binder: 9314:9328 transaction failed 29189/-3, size 112-24 line 3284 03:35:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000000)=0x1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:50 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:50 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r2 = dup2(r0, r0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f00000000c0)=""/105) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000003d80), 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x21, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYPTR], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00271f000000ff67"], 0x0, 0x0, 0x0}) [ 218.788556] binder_alloc: 9324: binder_alloc_buf size -9186658868540150040 failed, no address space 03:35:50 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000080800000000000000000000000852a747000000000000000000000000000000000000000000000000000000000000000000000000085616466000000000000000000004000010000000000000000a91d0084dd4d6b65316f9de693c4b77b0c3ab98b55cbcb2a618b38c24b44aa6bbdad91d973fdbf851294046530c889c2c962049e0d19ee3b2345cf747b8bc2dba6"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x101, 0x5, 0xfffffffffffffffd, 0x3, 0x4, 0x80000001}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 218.788563] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 218.788579] binder: 9324:9327 transaction failed 29201/-28, size 112-24 line 3284 [ 218.827667] binder: BINDER_SET_CONTEXT_MGR already set [ 218.827679] binder: 9324:9329 ioctl 40046207 0 returned -16 03:35:50 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 218.828025] binder_alloc: 9324: binder_alloc_buf, no vma 03:35:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d3556900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700907240109264100"/400], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f00000001c0)={0xffffffffffffffef, 0x100000001, 0x3, 0xffffffff, 0x100000001}) r2 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000003d80), 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000200)={0x7, 0x4d, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000070000004000000001800150000000000000000000000001a0000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:50 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:50 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 218.828048] binder: 9324:9329 transaction failed 29189/-3, size 112-24 line 3284 [ 218.856490] binder: BINDER_SET_CONTEXT_MGR already set [ 218.856499] binder: 9335:9340 ioctl 40046207 0 returned -16 [ 218.856745] binder_alloc: 9314: binder_alloc_buf, no vma [ 218.856764] binder: 9335:9340 transaction failed 29189/-3, size 112-24 line 3284 [ 218.870608] binder: BINDER_SET_CONTEXT_MGR already set [ 218.870617] binder: 9335:9340 ioctl 40046207 0 returned -16 [ 218.924085] binder: BINDER_SET_CONTEXT_MGR already set [ 218.924092] binder: 9343:9348 ioctl 40046207 0 returned -16 03:35:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840a7231577cc24619c30f51032000400000800000000000000000000000000000000000000000000c3b7e47fa7000000000070000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x8}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000008000)=""/144, &(0x7f0000004000)=0x90) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000008000)=""/144, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x40000000000027, &(0x7f0000000000)={@multicast2, @remote, @dev}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000480)=ANY=[@ANYBLOB="e0000002ac1414bb0000000005000000f965000200000017efed22d78900e000000100010000000000aafaebbfc459597a2ef4b1212a8a9d81c7f4c3c7c09037fbb8b58489107d78dd35c9068fedfb5c5782963d1666756fe1fa6a0ed71f25eab1c69a8378ab6b997b768a873252c4a5e27cfa4891decd4afaebeac099b434e8d548bad10b81d7a2aa37f41cac93341da2029657fcf3e09897341f81808d8511f1901a575498c2d40ec0705bdd46"], 0x1) getsockopt$inet_buf(r4, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000580)=@tipc, &(0x7f0000000240)=0x80) r5 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000480)="b0a3cdef47f59ec515de0fcb5dfc761cf7120c4312b2054efdc0cf574f65329a05d03a24674b1d94d072b4bd702c576dc1d6e4fef97bdd899d359dadcfe32ba24fb1e152533e4df2c20324dda85d95c102000000d81d2b9bea7f9e468b3da19d62e9913b2f7cd488de25886811470818af91afd3bce1422670d6f2d054d8b16374e3617a22b1c70e7e3104b814e24e6e7b62256ae8faaae5f59f840c029418a34c", 0xffffff47) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x426000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x2000, 0x3, 0x0, 0x0, 0xdf}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') read(r6, &(0x7f0000000380)=""/233, 0xffbe) 03:35:50 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 218.924611] binder_alloc: 9324: binder_alloc_buf, no vma [ 218.924629] binder: 9343:9348 transaction failed 29189/-3, size 112-24 line 3284 [ 218.936658] binder: BINDER_SET_CONTEXT_MGR already set 03:35:50 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 218.936667] binder: 9343:9358 ioctl 40046207 0 returned -16 [ 218.940986] binder_alloc: 9324: binder_alloc_buf, no vma [ 218.941006] binder: 9343:9358 transaction failed 29189/-3, size 112-24 line 3284 03:35:51 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:51 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 218.941399] binder: BINDER_SET_CONTEXT_MGR already set [ 218.941406] binder: 9354:9359 ioctl 40046207 0 returned -16 [ 218.942933] binder_alloc: 9314: binder_alloc_buf, no vma [ 218.942951] binder: 9354:9359 transaction failed 29189/-3, size 112-24 line 3284 [ 218.960183] binder: BINDER_SET_CONTEXT_MGR already set 03:35:51 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 218.960192] binder: 9354:9362 ioctl 40046207 0 returned -16 [ 219.017144] binder: BINDER_SET_CONTEXT_MGR already set [ 219.017154] binder: 9365:9367 ioctl 40046207 0 returned -16 [ 219.017441] binder_alloc: 9324: binder_alloc_buf, no vma [ 219.017462] binder: 9365:9367 transaction failed 29189/-3, size 112-24 line 3284 [ 219.019436] binder: BINDER_SET_CONTEXT_MGR already set [ 219.019444] binder: 9365:9376 ioctl 40046207 0 returned -16 [ 219.020210] binder: 9372:9375 ioctl 80404521 200000c0 returned -22 [ 219.020268] binder: BINDER_SET_CONTEXT_MGR already set [ 219.020275] binder: 9372:9375 ioctl 40046207 0 returned -16 [ 219.025374] binder_alloc: 9314: binder_alloc_buf, no vma [ 219.025396] binder: 9372:9375 transaction failed 29189/-3, size 112-2533278582046744 line 3284 [ 219.029460] binder: 9372:9375 ioctl 80404521 200000c0 returned -22 [ 219.029489] binder: BINDER_SET_CONTEXT_MGR already set [ 219.029497] binder: 9372:9379 ioctl 40046207 0 returned -16 [ 219.084802] binder: BINDER_SET_CONTEXT_MGR already set [ 219.084812] binder: 9385:9388 ioctl 40046207 0 returned -16 [ 219.086460] binder_alloc: 9314: binder_alloc_buf, no vma [ 219.086480] binder: 9385:9388 transaction failed 29189/-3, size 112-24 line 3284 [ 219.096367] binder: BINDER_SET_CONTEXT_MGR already set [ 219.096378] binder: 9385:9391 ioctl 40046207 0 returned -16 [ 219.108767] binder_alloc: 9314: binder_alloc_buf, no vma [ 219.108789] binder: 9385:9391 transaction failed 29189/-3, size 112-24 line 3284 [ 219.134720] binder: BINDER_SET_CONTEXT_MGR already set [ 219.134731] binder: 9384:9394 ioctl 40046207 0 returned -16 [ 219.334833] binder: 9404:9407 ioctl c018620c 20000000 returned -22 [ 219.336191] binder_alloc: 9404: binder_alloc_buf size 1703936 failed, no address space [ 219.336198] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 219.336217] binder: 9404:9407 transaction failed 29201/-28, size 0-1703936 line 3284 [ 219.403701] binder: BINDER_SET_CONTEXT_MGR already set [ 219.403711] binder: 9410:9414 ioctl 40046207 0 returned -16 [ 219.405216] binder: 9410:9414 got transaction to invalid handle [ 219.405225] binder: 9410:9414 transaction failed 29201/-22, size -4395513236313604096-2810176695 line 3138 [ 219.830449] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.836053] binder: undelivered TRANSACTION_ERROR: 29201 03:35:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000000000008561646600"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="00005daf3343000000000000280000000000000050000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 03:35:51 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 219.841584] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.847129] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.852699] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.858271] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.863924] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.869426] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.874979] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.878557] binder: BINDER_SET_CONTEXT_MGR already set [ 219.878565] binder: 9384:9394 ioctl 40046207 0 returned -16 [ 219.896078] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.901651] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.903609] binder: BINDER_SET_CONTEXT_MGR already set [ 219.903617] binder: 9448:9450 ioctl 40046207 0 returned -16 [ 219.903855] binder_alloc: 9324: binder_alloc_buf, no vma [ 219.903873] binder: 9448:9450 transaction failed 29189/-3, size 112-24 line 3284 [ 219.904601] binder: BINDER_SET_CONTEXT_MGR already set [ 219.904609] binder: 9448:9451 ioctl 40046207 0 returned -16 [ 219.904800] binder_alloc: 9324: binder_alloc_buf, no vma [ 219.904816] binder: 9448:9451 transaction failed 29189/-3, size 112-24 line 3284 [ 219.960379] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.966063] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.971625] binder: undelivered TRANSACTION_ERROR: 29201 [ 219.977247] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.982809] binder: send failed reply for transaction 751, target dead 03:35:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005e0000000a0000000000000000000000000000000000ffffe000000200000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000ee45252e87d1aec8498a5214a6d355690000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee5323dc0c60a8d50e060ccc627f9d77450a332d3ace2ac2fd8b1a1087f368cac6c1e192d5b46f63016a9187b8e6fcd5aeb5481f640473623a0a3919c9877a565cb0c26bd08f32c1aebe5b67a88920ae7f41990de6fc34909215efb298327adbcdd27f1812f407929d4050ed1ae96d244f461774865c559e972fabb6d50c8c2c2e53"], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:53 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:53 executing program 0: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000a7feffffffffffff000000000000000001000000000000008561646600000000000000000000000001000000000000000300000000000000"], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000280000000000000077fcffffffffffff"], @ANYBLOB="12c074e900000000"], 0x0, 0x0, 0x0}) ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) r2 = gettid() r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xc0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x100000001}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000140)='threaded\x04', r4}, 0xd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001980)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001940)='wlan1\x00', r4}, 0x30) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000180)) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r5}, 0x10) 03:35:53 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1a1200, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x8000, 0xe30}) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)={@random="ded149858be4", @random="4b9c257cf03c", [], {@canfd={0xd, {{0x2, 0x1}, 0x2f, 0x1, 0x0, 0x0, "72df01c2dd7bf7f4a8a6f7a69a92eee4064cf1be2ca1969f3da5cf6b75affdd6a80872308a354e80bca677ca65928bff80f84c33adc4a9a0fc26af8b03f53518"}}}}, &(0x7f0000000100)={0x1, 0x2, [0xeea, 0xd47, 0xaf9, 0x35]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:53 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 222.335684] binder_alloc: 9455: binder_alloc_buf size 3916742816 failed, no address space [ 222.351882] binder: 9456:9465 got transaction with out-of-order buffer fixup 03:35:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="00fb640000cbb41b75de3ea79e328445eb74324b43608d3adea8c537022fb9d7ef92337cc133a5d5d3a4974bcd84732ae584a4fba660b071f6b4e7c85b4bec436c5d541d7b8ca0ad4f3c5037c0180a56c6813caacb73b6f61efc59b0f3d17a776f11f238"], 0x64, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:53 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 222.351911] binder: 9456:9465 transaction failed 29201/-22, size 112-24 line 3467 03:35:53 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r2 = dup2(r0, r1) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x5) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 222.352319] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.392635] binder: 9455:9473 ioctl 5441 0 returned -22 [ 222.431580] binder: 9474:9477 got transaction with out-of-order buffer fixup 03:35:54 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 222.431633] binder: 9474:9477 transaction failed 29201/-22, size 112-24 line 3467 [ 222.431943] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.432795] binder: 9474:9477 got transaction with out-of-order buffer fixup [ 222.432817] binder: 9474:9477 transaction failed 29201/-22, size 112-24 line 3467 [ 222.433139] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.558961] binder: 9486:9494 ioctl 541a 20000000 returned -22 [ 222.578842] binder: 9495:9497 got transaction with out-of-order buffer fixup [ 222.578873] binder: 9495:9497 transaction failed 29201/-22, size 112-24 line 3467 [ 222.579209] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.623185] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 222.632186] binder: 9455:9459 transaction failed 29201/-28, size 112-24 line 3284 03:35:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0xc98) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:54 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:54 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[@ANYBLOB="2800000010000108021400000000000000000000db6c106fbcf583aa94882eb06fbd2863e1a83450eeeb9b16f9427cd6698e3ca42ef82ced02acc5ae7850c58622c23da3931b8ae996c3df93f8c956fccb2d54c0d95ca5a63f7623cb213e998d396e4347e022fdb87151179eb7258059ce9dbf3a1e27be2710e29b588beb7b3a522d0ddab0047a9814a2795c37706e73811f101ce2e547b299edb89caeb9eaedd7415497828edd2f8c6e2303548a7a437e41f7d3d77302074cf6205cc3f4373da32171263bbe0513991b0f7e5e08070a9663763111900ee7532ebed1b6", @ANYRES32=0x0, @ANYBLOB="214104000000000008001b0000000000"], 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44121}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, [], [{0x0, 0xfff, 0x0, 0x8cb5, 0x0, 0x6}, {0xfff, 0x5, 0x2, 0x8001}]}) r4 = dup3(r2, r3, 0x80000) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1050, 0x39, 0x200, 0x70bd2b, 0x25dfdbfc, {0x58}, [@typed={0x8, 0x8b, @pid=r5}, @generic="791fb695f2146bf5f9c62cd4ef24c37a02edf9d0fabc9a76708976d72a28dc199ba4", @generic="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", @nested={0x10, 0x82, [@generic="cc", @typed={0x8, 0x8, @u32=0x1}]}]}, 0x1050}, 0x1, 0x0, 0x0, 0x400401c}, 0x4000001) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000040), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x70, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x14, 0x2}, @fda={0x66646185, 0x2, 0x1, 0x27}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000180)}}], 0x106, 0x0, 0x0}) [ 222.642450] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.648434] binder: BINDER_SET_CONTEXT_MGR already set [ 222.648442] binder: 9455:9473 ioctl 40046207 0 returned -16 [ 222.673696] binder: 9486:9488 ioctl 541a 20000000 returned -22 [ 222.683671] ip6_tunnel: xmit: Local address not yet configured! 03:35:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:54 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:54 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 222.706613] binder: 9505:9511 got transaction with out-of-order buffer fixup [ 222.706643] binder: 9505:9511 transaction failed 29201/-22, size 112-24 line 3467 [ 222.708336] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.708589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.716477] binder: 9506:9513 got transaction to invalid handle [ 222.716486] binder: 9506:9513 transaction failed 29201/-22, size 0-0 line 3138 [ 222.716502] binder: 9506:9513 ioctl c0306201 20000140 returned -14 [ 222.716643] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.721037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.722244] binder: 9506:9516 got transaction to invalid handle [ 222.722252] binder: 9506:9516 transaction failed 29201/-22, size 0-0 line 3138 [ 222.722267] binder: 9506:9516 ioctl c0306201 20000140 returned -14 [ 222.722599] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.787800] binder: 9520:9523 got transaction with out-of-order buffer fixup [ 222.787828] binder: 9520:9523 transaction failed 29201/-22, size 112-24 line 3467 [ 222.788215] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.788998] binder: release 9522:9524 transaction 791 out, still active 03:35:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='fdinfo\x00') 03:35:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:54 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r5 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r6, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r5, r6, 0x0, 0xfffffffd) connect$unix(r5, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x1, 0xffffffffffffff4d) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x3, @mcast1}}, 0x0, 0x1fffffffffffe8a, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x4e23, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:54 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) [ 222.789003] binder: undelivered TRANSACTION_COMPLETE [ 222.792384] binder: send failed reply for transaction 791, target dead 03:35:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240), 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') open(&(0x7f0000000240)='./file0\x00', 0x200, 0x2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80820200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r3, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xcba}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x515e9faf}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000000) [ 222.997194] binder: release 9542:9549 transaction 794 out, still active [ 223.003227] binder: 9543:9554 got transaction with out-of-order buffer fixup [ 223.003254] binder: 9543:9554 transaction failed 29201/-22, size 112-24 line 3467 [ 223.019224] binder: BINDER_SET_CONTEXT_MGR already set 03:35:54 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:54 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 223.054459] binder: 9542:9557 ioctl 40046207 0 returned -16 03:35:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) write$P9_RRENAMEAT(r1, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) connect$inet6(r0, &(0x7f0000000080), 0x1c) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x2}, @timestamp, @mss={0x2, 0x1d2}, @mss={0x2, 0x80}, @timestamp, @mss={0x2, 0x200}, @mss={0x2, 0x8}], 0x7) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 223.067618] binder: undelivered TRANSACTION_COMPLETE 03:35:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 223.067669] binder: send failed reply for transaction 794, target dead 03:35:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000070000000000000001800000000000000", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a7470000000000000000000000000000000000000000000000000000000000000000000000000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000acda2baf0d000000"], 0x0, 0x0, 0x0}) 03:35:54 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:54 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x1, [@multicast2]}, 0x14) write$smack_current(r2, &(0x7f00000000c0)='\x00', 0x1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20000000000005e, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, {{0xa, 0x0, 0x0, @rand_addr="ee45252e87d1aec8498a5214a6d35569"}}]}, 0x190) ptrace$setopts(0x4206, r3, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80000000002c00) [ 223.067709] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.248266] binder: 9598:9600 transaction failed 29189/-22, size 112-24 line 3138 03:35:54 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:54 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) writev(r2, &(0x7f0000000040), 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r3 = socket$inet(0x10, 0x2000000003, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{0x0}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000003d80), 0x0, 0x0, 0x0) r4 = dup3(r1, r3, 0x80000) write$P9_RVERSION(r4, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x9, 0x8, '9P2000.L'}, 0x15) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x1}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 223.263152] binder_alloc: 9601: binder_alloc_buf size 3160027204553801864 failed, no address space [ 223.263159] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 223.263177] binder: 9601:9605 transaction failed 29201/-28, size 112-24 line 3284 03:35:54 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 223.263326] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.280566] binder_alloc: 9601: binder_alloc_buf size 3160027204553801864 failed, no address space 03:35:54 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001240)='Wtat\x00') readv(r1, &(0x7f0000002340), 0x0) readv(r1, &(0x7f0000000580), 0x3c1) ioctl$TCGETX(r1, 0x5432, &(0x7f00000002c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600), 0xfffffffffffffe45, 0x0, 0x0}) [ 223.280575] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 223.280594] binder: 9601:9606 transaction failed 29201/-28, size 112-24 line 3284 [ 223.280764] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.355087] binder: release 9612:9615 transaction 806 out, still active 03:35:55 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 223.355092] binder: undelivered TRANSACTION_COMPLETE [ 223.355700] binder: send failed reply for transaction 806, target dead [ 223.478636] binder: undelivered TRANSACTION_ERROR: 29189 03:35:55 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1163484000000000000000e55a8aa90000000000000000000000000000000000000000000000000000d02631c376d9e06fa08f143567e13517e056d1f7e71bb663ce4cd029eecebc7c7b0505fda5568eed6c9875bd12c17cdbbf533893027e047be73d523851bd5780e07ce90fe21c4829b8d330bcd3cfbacb5553c862acd84ecafa257015d764db5f8277587802dd4c5a7691c8cc3f4664", @ANYPTR=&(0x7f0000000580)=ANY=[@ANYBLOB="852a7470000000000000000000000000000000000000000000000000000000000000000000000000852a74700000000000000000000000000000000000000000000000000000000000000000f14c0000856164660000000000000000000000000100"/112], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 03:35:55 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 223.541067] binder: 9636:9638 transaction failed 29189/-22, size 112-24 line 3138 [ 223.556154] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.580098] binder_alloc: 9643: binder_alloc_buf size 5385157180941427960 failed, no address space [ 223.605647] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 223.628121] binder: 9643:9644 transaction failed 29201/-28, size 3541746855392051200-1481579204802344643 line 3284 [ 223.658202] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.666382] binder_alloc: 9643: binder_alloc_buf size 5385157180941427960 failed, no address space [ 223.683253] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 223.702136] binder: 9643:9644 transaction failed 29201/-28, size 3541746855392051200-1481579204802344643 line 3284 [ 223.712894] binder: undelivered TRANSACTION_ERROR: 29201 [ 223.723715] ip6_tunnel: xmit: Local address not yet configured! 03:35:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:55 executing program 1: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) 03:35:55 executing program 5: accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) syncfs(r2) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000280)={0x7e, @multicast2, 0x4e24, 0x0, 'wrr\x00', 0x10}, 0x2c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x3, 0x70, 0x79, 0x0, 0x0, 0x3, 0x0, 0x1ff, 0x88500, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) fsync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0xfffffe9f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r6 = dup(r0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x80) ftruncate(r7, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x1005}]}, 0x10) sendfile(r6, r7, 0x0, 0xfffffffd) connect$unix(r6, &(0x7f0000006780)=@file={0x0, './bus\x00'}, 0x6e) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:35:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f0000000600)=[@free_buffer], 0x0, 0x0, 0x0}) 03:35:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r2 = socket(0xcd1bf8a2c913952e, 0x2, 0x7f) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x4) syslog(0x4, &(0x7f0000000280)=""/245, 0xfffffffffffffedc) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x2002) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = pkey_alloc(0x0, 0x6) pkey_free(r4) pkey_free(r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, 0x0}, @fda={0x66646185, 0x0, 0x3}}, &(0x7f0000000040)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 03:35:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) ptrace$poke(0x91bff9bdea256cf4, r2, &(0x7f0000000000), 0x5ea) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/400], 0x190) ptrace$setopts(0x4206, r1, 0x0, 0x0) clock_settime(0x2, &(0x7f00000000c0)={0x0, 0x1c9c380}) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 03:35:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000600), 0xffffffffffffff15, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000440)='./bus\x00', 0x161) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000002000290f00000500e6000000020000000000000000000000040000000c001400afd698c3d3f3f8cd27e6", @ANYRES32, @ANYRES32=0x0], 0x2c}}, 0x0) io_setup(0x1ff, &(0x7f00000003c0)=0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) fcntl$setstatus(r3, 0x4, 0x44800) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r6 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000000040)) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xffffff78) syz_open_pts(r7, 0x0) ioctl$TIOCSLCKTRMIOS(r6, 0x5457, &(0x7f00000002c0)) r8 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$nbd(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="674466981ee8ffffffffffffff6517a42ac4cb7a63d1a97a7e5a31524e892eac4023b714a3202f99f16d06589e03469637a7267592938766010a35efd21affe2009e107e5ce4fc5948"], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x440042, 0x0) sendfile(r8, r8, &(0x7f0000000200), 0xa198) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r9, &(0x7f0000000280), 0x1033b) fdatasync(r9) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r9}) [ 224.064522] binder: 9653:9658 transaction failed 29189/-22, size 112-24 line 3138 [ 224.076989] binder: 9655:9657 BC_FREE_BUFFER u0000000000000000 no match [ 224.099753] audit: type=1400 audit(1572838555.633:31): avc: denied { syslog } for pid=9660 comm="syz-executor.2" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 224.108716] ------------[ cut here ]------------ [ 224.108721] kernel BUG at drivers/android/binder_alloc.c:1108! [ 224.108729] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 224.108734] Modules linked in: [ 224.108743] CPU: 1 PID: 9667 Comm: syz-executor.2 Not tainted 4.9.194+ #0 [ 224.108748] task: 00000000e1c50ea3 task.stack: 00000000a702f947 [ 224.108766] RIP: 0010:[] [<00000000d5e49247>] binder_alloc_do_buffer_copy+0xcb/0x500 [ 224.108771] RSP: 0018:ffff8801ca9174a8 EFLAGS: 00010216 [ 224.108776] RAX: 0000000000040000 RBX: 0000000020ffc000 RCX: ffffc9000017a000 [ 224.108782] RDX: 00000000000003fb RSI: ffffffff8223a8fb RDI: ffff8801c686a1d8 [ 224.108787] RBP: ffff8801ca917528 R08: ffff8801ca9175a8 R09: 0000000000000008 [ 224.108793] R10: ffffed0039522f11 R11: ffff8801ca91788f R12: 0000000000000080 [ 224.108798] R13: 0000000000000088 R14: 0000000000000008 R15: ffff8801ca9175a8 [ 224.108810] FS: 00007f9c03d0f700(0000) GS:ffff8801db700000(0000) knlGS:0000000000000000 [ 224.108815] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.108820] CR2: 0000001b2eb21000 CR3: 00000001cab3a000 CR4: 00000000001606b0 [ 224.108829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 224.108834] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 224.108835] Stack: [ 224.108849] ffffffff81249811 ffff8801ca917568 0000000000000246 0000000020000040 [ 224.108861] ffff8801d3d16050 ffff8801c8c9ca58 00ff8801ca917870 ffff8801c8c9ca00 [ 224.108873] ffffffff814fdcb6 ffff8801c53e5400 0000000000000088 ffff8801ca9175a8 [ 224.108875] Call Trace: [ 224.108887] [<00000000d3a52b85>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 224.108897] [<000000005c95d2a3>] ? memcpy+0x46/0x50 [ 224.108906] [<000000002bfbd14e>] binder_alloc_copy_from_buffer+0x37/0x42 [ 224.108915] [<000000006a52314e>] binder_validate_ptr+0xc5/0x1b0 [ 224.108924] [<000000001e23a2b3>] ? binder_get_object+0x1b0/0x1b0 [ 224.108932] [<000000002bfbd14e>] ? binder_alloc_copy_from_buffer+0x37/0x42 [ 224.108941] [<0000000004c5d581>] ? binder_get_object+0x12f/0x1b0 [ 224.108949] [<000000000c3df209>] binder_transaction+0x20a4/0x5890 [ 224.108958] [<000000000eadbc39>] ? binder_inc_ref_for_node+0xba0/0xba0 [ 224.108967] [<0000000045f6c34e>] ? perf_trace_lock_acquire+0x530/0x530 [ 224.108977] [<0000000004df56b9>] ? depot_save_stack+0x13c/0x4a0 [ 224.108986] [<00000000e0980599>] ? __might_fault+0x114/0x1d0 [ 224.108994] [<00000000d3a52b85>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 224.109002] [<00000000e0980599>] ? __might_fault+0x114/0x1d0 [ 224.109010] [<00000000f6c60f58>] binder_thread_write+0x730/0x20e0 [ 224.109021] [<0000000089226901>] ? debug_smp_processor_id+0x1c/0x20 [ 224.109028] [<0000000040fd67e5>] ? perf_trace_lock+0x11e/0x540 [ 224.109036] [<000000002ac57224>] ? binder_transaction+0x5890/0x5890 [ 224.109044] [<00000000e0980599>] ? __might_fault+0x114/0x1d0 [ 224.109052] [<00000000d3a52b85>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 224.109061] [<00000000ae8eb97b>] binder_ioctl+0xecd/0x1720 [ 224.109069] [<00000000d3a52b85>] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 224.109076] [<00000000dfad69dd>] ? binder_poll+0x240/0x240 [ 224.109085] [<00000000126e45c5>] ? __lock_acquire+0x5e0/0x4390 [ 224.109094] [<0000000061756f78>] ? check_preemption_disabled+0x3c/0x200 [ 224.109102] [<00000000cd907e65>] ? __might_sleep+0x95/0x1a0 [ 224.109110] [<00000000dfad69dd>] ? binder_poll+0x240/0x240 [ 224.109119] [<000000004774dcf9>] do_vfs_ioctl+0xb87/0x11d0 [ 224.109129] [<00000000a7a69ac7>] ? selinux_file_ioctl+0x103/0x550 [ 224.109138] [<000000001e13d73c>] ? ioctl_preallocate+0x210/0x210 [ 224.109147] [<000000004553f6c7>] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 224.109156] [<00000000f7c86ab4>] ? __fget+0x208/0x370 [ 224.109164] [<000000007ccd588d>] ? __fget+0x22f/0x370 [ 224.109172] [<0000000019cc9756>] ? __fget+0x47/0x370 [ 224.109181] [<000000001e85e445>] ? security_file_ioctl+0x8f/0xc0 [ 224.109190] [<000000009839d678>] SyS_ioctl+0x8f/0xc0 [ 224.109199] [<00000000d048184b>] ? do_vfs_ioctl+0x11d0/0x11d0 [ 224.109207] [<00000000d08ed266>] do_syscall_64+0x1ad/0x5c0 [ 224.109217] [<00000000aaa84cd2>] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 224.109348] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 0a 04 00 00 4d 8b 64 24 58 49 29 dc e8 0f 7e 0e ff 4d 39 e6 76 07 e8 05 7e 0e ff <0f> 0b e8 fe 7d 0e ff 4c 8b 6d d0 4d 29 f4 4d 39 e5 77 e8 e8 ed [ 224.109357] RIP [<00000000d5e49247>] binder_alloc_do_buffer_copy+0xcb/0x500 [ 224.109359] RSP [ 224.109365] ---[ end trace 3fff2e5fb11df647 ]--- [ 224.109370] Kernel panic - not syncing: Fatal exception [ 224.109813] Kernel Offset: disabled [ 224.563752] Rebooting in 86400 seconds..