fffff}) write(r11, &(0x7f00000001c0), 0xfffffef3) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r11, 0x4, 0x8d264d94b88cc547) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r13, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) sendfile64(r12, r13, &(0x7f0000000380), 0x20001) setsockopt$inet6_opts(r10, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x87, 0x0, 0x6, 0x9, 0x0, 0x8, 0x65}, 0x8) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="20062dbd7000000000000c0000000800df00040004007c0001002c0004001400010002004e227f00000100000000000000001400020002004e20ac1414aa0000000000000000080003000180000008000300ff0300003c00020008000100020000000800010011000000080003004a000000080004000000000008000200010000000800030081000000080001001f000000"], 0x2}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2041090c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="80070000", @ANYRES16=r14, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 22:33:10 executing program 1: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'veth0_to_bridge\x00', 0x1fd}) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000380)=0x2) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000000)={0x80fd, 0x2}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x15) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r5 = openat(r4, &(0x7f0000000040)='./bus\x00', 0x111801, 0xc8) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00'}) 22:33:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, 0x0) pipe(0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) stat(0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000200)=@v3={0x3000000, [{0x3f, 0x9a}, {0x200, 0xc9}], 0xee00}, 0x373, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="d57b2726d40d"], 0x6) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {0x800000000020, 0x8, 0x0, 0x0, 0x1, 0x0, 0x2}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000340)=""/78, 0x7fffffff}) read(r4, &(0x7f00000004c0)=""/238, 0xffffffffffffff34) fchdir(r4) creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='.0\x00\x00\x03\x00\x00\x00\x00\x00\x89M\xa3~\xfa\xb2\xc3\xb1\xcb\xcd}\x80\xcb\xa3\xac\b\x00\x00\x00\x80\xb4\xfc\xe4Z\xbc\tl\x92\x93\xcb\xe5\xfe\x8bn\xb5\xe8\x8d \x10x\xcc\xc0xu\xbe\xcb\xcf\"\xd0\x1cS\x00'/79, 0x1ff) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r8, &(0x7f0000000080), 0x1c) r9 = dup2(r8, r8) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000440), 0x132224) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r11 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r11, 0x208200) getuid() lstat(&(0x7f0000000bc0)='./file1\x00', &(0x7f0000000c00)) fstat(r10, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000e40)) getgid() getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000001040), &(0x7f0000001080)=0xc) getgroups(0x5, &(0x7f00000010c0)=[0xffffffffffffffff, 0xee00, 0xee01, 0x0, 0xee01]) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r7, r12, &(0x7f0000000040), 0x8000fffffffe) dup3(0xffffffffffffffff, r3, 0x0) 22:33:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/ip_mr\x01vif\x00') read$FUSE(r2, &(0x7f0000001100), 0x11e5) r3 = openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x0, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000380), 0x369) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = open(&(0x7f00000003c0)='./file0\x00', 0x700c4, 0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/s\x87linux/s\xea\xbctus\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r6, &(0x7f00000001c0), 0xbab230cf) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r7, 0x2) flock(r7, 0x1) ioctl$EVIOCGBITKEY(r7, 0x80404521, &(0x7f0000000e80)=""/214) read(r5, &(0x7f0000000480)=""/250, 0xe70df9a) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = gettid() rt_tgsigqueueinfo(0x0, r9, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="9267b3701dd5d9c2bd8b36c56d6a7d32", 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x1}) ioctl$TIOCGPGRP(r5, 0x540f, 0x0) syncfs(r4) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') getuid() 22:33:10 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) 22:33:11 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) 22:33:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) 22:33:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x70) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) remap_file_pages(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000a, 0x1b2b8000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x1c3842, 0x0) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syncfs(r1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = dup(r8) sendmmsg$inet6(r9, &(0x7f0000008040)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000007f80)=[{&(0x7f0000004bc0)="411009edc4898299be7bfdf4827696e9d06334ddde71c2816ab401180bdfc34593736ab7f91748f23f", 0x29}, {&(0x7f0000005d40)="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", 0x41f}], 0x2, &(0x7f0000000000)=[@dstopts_2292={{0x14}}], 0x14}}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r10 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r10, 0x280080) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000100)={0x0, r7}) [ 480.071319] binder_alloc: 21694: binder_alloc_buf, no vma [ 480.135197] binder: 21694:21697 transaction failed 29189/-3, size 16384-0 line 3137 22:33:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) [ 480.191608] binder: undelivered TRANSACTION_ERROR: 29189 [ 480.306260] binder_alloc: 21712: binder_alloc_buf, no vma [ 480.347689] binder: 21712:21714 transaction failed 29189/-3, size 16384-0 line 3137 22:33:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) [ 480.428145] binder: undelivered TRANSACTION_ERROR: 29189 [ 480.564890] binder_alloc: 21721: binder_alloc_buf, no vma [ 480.601963] binder: 21721:21722 transaction failed 29189/-3, size 16384-0 line 3137 [ 480.624474] binder: undelivered TRANSACTION_ERROR: 29189 22:33:11 executing program 5: syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc001084}, 0xc, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[]}, 0x1, 0x0, 0x0, 0x84}, 0x8004) fchdir(0xffffffffffffffff) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x200) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = dup(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="200000001400010400000000000000000d0000000c00000008000200ac1414bbc36661ba6a66a8edd1962b5a92f9d26fe612a27f5b8ba4dd289ead5d6f2865a9d302279009bf24d18e7a4711d3f813d3491c02c4cb2bd7bd7e5607e7f7fe2a017cddd70ddc9667ec27a8458e7fa727edfe49aa906c427fe4ace868910ad68a203e8e76f3370868c14d000000000000000039ed9e5ba591aa30e1cea096a956b446543e83c09b833b3ac85c791cad1eec2360f19dcb700188d24933ca041780abfcc90d21d2b544e8a9cdb208fa"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x189) r6 = getegid() r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r7, &(0x7f0000000780)=[{&(0x7f0000000580)=""/121, 0x79}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000700)=""/30, 0x1e}], 0x3, 0x0) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) bind$inet(r9, &(0x7f0000000200)={0x2, 0x0, @local}, 0xfffffffffffffff2) connect$inet(r9, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) dup3(r9, r10, 0x0) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x1, 0x80010, r10, 0x0) write$P9_RATTACH(r8, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x80, 0x1}}, 0x14) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000bcefe4)={0xa, 0x4e20}, 0x1c) setregid(r5, r6) 22:33:11 executing program 4: clone(0x27fffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r0, 0x409, 0x9) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000b80)="2400000043006fa2830020200a0009000300001d85680c1ba3a20400ff7e000000000000f233225b2a1895b7244227665299ffd767aaa76624356ceb8ccfd3fafd66bc19712acf2ba1056017111d2a904bb3c9948323900e", 0xffffffb5}], 0x1}, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) memfd_create(&(0x7f0000000140)='vcan0\x00', 0x7) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x3) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'vcan0\x00', 0x6}) fstat(0xffffffffffffffff, &(0x7f00000005c0)) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x28113e26) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x400000000002012, r7, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400204) r9 = dup3(r8, r5, 0x0) ioctl$TIOCEXCL(r6, 0x540c) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000000180)) sendto(r9, &(0x7f0000000380)="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", 0x800, 0x4000000, 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000300)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x45) 22:33:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) 22:33:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) close(r0) prctl$PR_SET_DUMPABLE(0x4, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x14, 0x0, @tid=r2}, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x16) 22:33:11 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x14a) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000000}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x1a}}, 0x800, [0x1841, 0x4, 0x9, 0xefa5, 0x0, 0x1, 0x8001, 0x101]}, 0x5c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1c3842, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) delete_module(&(0x7f0000000140)='./cgroup.cpu\x00', 0x1200) syncfs(r1) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r6, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) sendto$inet6(r7, &(0x7f0000000080)="baf17236d4234c266376cabb520ed7a4edceb7c4", 0x14, 0x800, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) 22:33:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000738ff0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x93) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="d0ae038d17e2cf17e933357ef95ed173dd86bc6bba00776b72f9ec77d8b531b8a81f18af6915c196b71356ae801f92425e01eb729a8553afa967d2d81a7c854a3d6ff5ea4fc6be363f50e5b50e480d775896ef76f675d15dbdf6d00cc261e0e9bae597300a6812d1a39a8b758f756ee5ea6cf160d372524c06df5946", 0x7c}], 0x1}, 0x1454) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockname(r2, &(0x7f0000000240)=@nl=@unspec, &(0x7f0000000140)=0x80) 22:33:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) 22:33:11 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x5) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000580)=ANY=[@ANYBLOB], 0x1, 0x1) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$key(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[]}}, 0x0) prlimit64(0x0, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$cgroup_ro(r1, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) sync() [ 480.776209] binder: 21730:21732 transaction failed 29189/-22, size 16384-0 line 3014 [ 480.805983] binder: undelivered TRANSACTION_ERROR: 29189 22:33:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) [ 480.859136] binder: 21744:21746 transaction failed 29189/-22, size 16384-0 line 3014 [ 480.893095] binder: undelivered TRANSACTION_ERROR: 29189 [ 480.983675] binder: 21757:21759 transaction failed 29189/-22, size 16384-0 line 3014 22:33:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) [ 481.048589] binder: undelivered TRANSACTION_ERROR: 29189 22:33:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) 22:33:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000000000000000000000004000000000000000000000000000000000003f00"/76], 0x0, 0x0, 0x0}) 22:33:13 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0\x05\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) r3 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r6 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000003c0)=0x0) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f00000006c0)) lstat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r9) lstat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000700)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000800)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) r14 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r14) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x1}, [{0x2, 0x2, r2}, {0x2, 0x7, r4}, {0x2, 0xb, r7}, {0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x0, r8}, {0x2, 0x4, r9}, {0x2, 0x4, r10}, {0x2, 0x5, r11}, {0x2, 0x5, r12}], {0x4, 0x1}, [{0x8, 0xa, r13}, {0x8, 0x1, r14}], {0x10, 0xe}, {0x20, 0x7}}, 0x7c, 0x1) r15 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') creat(&(0x7f0000000140)='./file0\x00', 0x11) setns(r15, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400204) connect(r16, &(0x7f0000000180)=@rc={0x1f, {0x1, 0x8, 0x3f, 0x1, 0x8, 0x3}, 0x79}, 0x80) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 22:33:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @rand_addr="721524b0c19168f40000b60000000400", 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 22:33:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 482.699630] binder: 21795:21796 ioctl c0306201 0 returned -14 22:33:14 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) ioctl$KDMKTONE(r3, 0x4b30, 0x0) write$binfmt_aout(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="080100"/330], 0x14a) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r5 = getpid() wait4(r5, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r5, 0x6b45, &(0x7f0000000180)={0x23, 0x0, 0x3ff}) sendfile(r2, r4, 0x0, 0x5a92) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) sendfile(r4, r4, &(0x7f00000000c0), 0xbf99) ioctl$TUNDETACHFILTER(r4, 0x400854d6, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) sendmsg$netlink(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x20a1}, 0x40fe989633a971a0) 22:33:14 executing program 2: ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x0, 0x0}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) syncfs(0xffffffffffffffff) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) r3 = creat(&(0x7f0000000380)='./file0\x00', 0x7e) getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001a40)={{{@in6=@mcast1}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000001b40)=0xe8) sendmsg$unix(r3, &(0x7f0000001c40)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001980)=[{0x0}, {0x0}], 0x2}, 0x0) write$P9_RWALK(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="3d0000006f000004000000000000000601005b640931d2009a0000000002000000000000d10cc0b7fe2d877e7df3e19d16d01bb767bbcd3a355e57def3b23f57c9bc82d840b7334dc0fb4c74d79171895412134a780427c08f0f23ccedb539e621cb9b"], 0x10) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f00000002c0)="dce94dd0d079dc00f3d0d02a19f3aad2bacfe6b4c73d91134186899c9c470558dd9effe2e9a129e0f667a6d2b5a93315615cb856efb78dbe9024f801a80a673a8929f5acf67e09e4abd0ced5b98c146c816f5b12") ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000000c0)={0x3, 0x4, 0x3, 0x1, "1d6afc265b30ca3e1fbe04e0e0b2c4b17d2efb95c9771312083536e30be48d46"}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) listen(r4, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)}, 0x800) sendto$inet6(r5, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) write(r5, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r5, &(0x7f0000001840)=""/31, 0x1f, 0x100, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r7 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:33:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = getpgrp(0x0) ptrace$peek(0x2, r1, &(0x7f0000000040)) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x360, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0) wait4(r1, 0x0, 0x2, &(0x7f0000000080)) 22:33:14 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000740)="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", 0x6e3, r2) request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000300)='./cgroup.cpu\x00', r2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/67) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) request_key(&(0x7f0000000400)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='vboxnet0vmnet0bdev\x00', r2) write$cgroup_int(r0, &(0x7f0000000140)=0xffffffff7fffffff, 0xfffffffffffffec5) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r7, r7, &(0x7f00000002c0)=0x202, 0xdd) 22:33:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 22:33:14 executing program 5: accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getrusage(0x1, &(0x7f0000000140)) memfd_create(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000001c0)={'yam0\x00', {0x2, 0x4e23, @remote}}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000400)=""/215) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) r4 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000e80), 0x80000) lseek(r4, 0x0, 0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000400)=ANY=[], 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x8) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x987ec1747d75b9f4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r8, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) fchdir(r6) creat(&(0x7f0000000100)='./file0\x00', 0x80) [ 483.835465] binder: 21806:21811 ioctl c0306201 0 returned -14 22:33:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 22:33:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x600082, 0x104) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x3ba9}, @window={0x3, 0x546, 0x200}, @window={0x3, 0x9, 0xbe87}, @sack_perm, @sack_perm, @window={0x3, 0xb000, 0x400}, @mss={0x2, 0x8}], 0x7) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r4, 0x104, 0x70bd26, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4040808) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x807dfe5477f5a1d0}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x0, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 22:33:15 executing program 3: r0 = creat(0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) poll(&(0x7f00000004c0)=[{r1}], 0x1, 0xa4) syz_open_pts(r1, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) tkill(0x0, 0x25) ptrace$setsig(0x4203, 0x0, 0x80000001, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r8 = socket$packet(0x11, 0x0, 0x300) syz_open_pts(r2, 0x10300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x1}, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x10001, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, 0x0, 0xffffffffffffff47) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r11, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x8951, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0xfffffffffffffd43) sendto$inet(r11, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="af97221ee19635a8426fc41c6b1030778f861af9bbef00622e2148cc00000000d2ff3b9f9db5547d1c95c23b86782346cc1360aedbd29baca221bf3888f0ea0355f38dadc96963f0bce30afe2dea510000", @ANYRES16, @ANYRES32=0x0, @ANYRESHEX=0x0], @ANYRES16=r8, @ANYRESHEX, @ANYRES16=r9], @ANYRESDEC], &(0x7f00000000c0)=""/28, 0x1c) getresuid(&(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000300)) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) fsync(r12) socket$inet6(0xa, 0x100800000000002, 0x0) 22:33:15 executing program 4: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000000200)=@ax25, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_WRITE(r1, &(0x7f0000000100)={0x18, 0x0, 0x7, {0x6}}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = dup(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) ioctl$VT_WAITACTIVE(r3, 0x5607) inotify_add_watch(r3, &(0x7f0000000280)='./file0\x00', 0x4000000) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200000, 0x0) write$P9_RGETATTR(r4, &(0x7f00000001c0)={0xffffffffffffff88, 0x19, 0x2, {0x320, {0x10, 0x3, 0x4}, 0x20, 0x0, 0x0, 0xfffffffffffffffd, 0x753701e0, 0x10000, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x3, 0x5, 0x3, 0x4, 0x100000001, 0xb, 0x80000003}}, 0xa0) getpeername$netlink(r4, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) ftruncate(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r3, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) 22:33:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 484.515854] binder: 21838:21842 ioctl c0306201 0 returned -14 22:33:15 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x200, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000007c0)) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r8) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r4) r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x200005) sendfile(r1, r9, 0x0, 0x8000ffffffff) recvmsg(r9, &(0x7f0000000740)={&(0x7f0000000240)=@un=@abs, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/74, 0x279}, {&(0x7f0000000400)=""/73, 0x49}, {&(0x7f0000000480)=""/158, 0xa9}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f0000000380)=""/42, 0x23c}, {&(0x7f00000005c0)=""/140, 0x8c}], 0x6, &(0x7f00000006c0)=""/97, 0x61}, 0x761a86134f16f4ba) fchdir(r0) unlink(&(0x7f00000002c0)='./bus\x00') fchdir(0xffffffffffffffff) r10 = creat(&(0x7f0000000180)='./bus\x00', 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r11 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, 0x0, &(0x7f0000000800)='b\x9e\x88\xa0\x13p\xcc\xff\xbc\x00', &(0x7f0000000100)={'syz', 0x0}, r11) ioctl$FS_IOC_RESVSP(r10, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9}) 22:33:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:33:15 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) 22:33:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) fstat(r0, &(0x7f0000000500)) getuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80200000000002, &(0x7f0000000680)=0x82, 0x4) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000100), &(0x7f0000000140)=0x2) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x1, 0x4) connect$netlink(r1, &(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x90004004}, 0xb) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r0, 0x0, 0x28, 0x28000779, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_getparam(r2, &(0x7f0000000180)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, "ba51e2a07b47d8c29792400b07fcf7186ecd9a9b457dcbcf29a0b5a151caaef6bf2e2b9fc81601d8d2e412b1ba5c75c27ba2762e0481023ac0a68f145d4ded5f", "0ddf1561e089d72e4243dd5d6c63c76b3607ff73bb7615f500004000"}) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() wait4(0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES64], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x1a) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100) 22:33:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 22:33:15 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000640)='/selinux/checkreqprot\x00', 0x282, 0x0) recvmmsg(r0, &(0x7f0000003f80)=[{{&(0x7f0000000780)=@rc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000800)=""/30, 0x1e}, {&(0x7f00000009c0)=""/255, 0xff}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/74, 0x4a}, {&(0x7f0000000840)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/137, 0x89}], 0x6, &(0x7f0000000cc0)=""/10, 0xa}, 0x400}, {{&(0x7f0000000d00)=@caif=@util, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/88, 0x58}, {&(0x7f0000000e00)=""/103, 0x67}, {&(0x7f0000000e80)=""/201, 0xc9}, {&(0x7f0000000f80)=""/185, 0xb9}], 0x4, &(0x7f0000001080)=""/149, 0x95}, 0x1f}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000001140)=""/109, 0x6d}, {&(0x7f00000011c0)=""/115, 0x73}], 0x3, &(0x7f0000001280)=""/254, 0xfe}, 0x9548}, {{&(0x7f0000001380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/18, 0x12}, {&(0x7f0000001540)=""/231, 0xe7}, {&(0x7f0000001640)=""/68, 0x44}, {&(0x7f00000016c0)=""/109, 0x6d}, {&(0x7f0000001740)=""/123, 0x7b}], 0x5, &(0x7f0000001800)=""/29, 0x1d}, 0x6}, {{&(0x7f0000001840)=@nfc_llcp, 0x80, &(0x7f0000003c80)=[{&(0x7f0000002980)=""/255, 0xff}, {&(0x7f00000018c0)=""/65, 0x41}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000003a80)=""/209, 0xd1}, {&(0x7f0000003b80)=""/69, 0x45}, {&(0x7f0000003c00)=""/83, 0x53}], 0x6, &(0x7f0000003cc0)=""/223, 0xdf}, 0x3362}, {{&(0x7f0000003dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003e40)=""/132, 0x84}, {&(0x7f0000003f00)=""/12, 0xc}], 0x2}, 0x6}], 0x6, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0xc4041, 0x0) syz_open_pts(r1, 0x204900) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000580)=0x3) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x68, r5, 0x4, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x6, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000880)) r6 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r6, 0x2080004508, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000480)='trusted.overlay.opaque\x00', &(0x7f00000004c0)='y\x00', 0x167, 0x1) getuid() socket$unix(0x1, 0x5, 0x0) fstat(r2, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000600)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r8, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) r10 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x1f) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r11, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000300)={0x90, 0x0, &(0x7f00000008c0)=[@free_buffer={0x40086303, r10}, @enter_looper, @free_buffer, @request_death, @enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r11}, @flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1040}, @enter_looper, @acquire, @increfs={0x40046304, 0x2}], 0x76, 0x0, &(0x7f0000001400)="4a199145931400980c7b47f14ac7fab3b3ed597bd1d70b6c123d7556f3049b0a133c2d8a9d84748f0910bed3d4c30df6f13c16c942d561bd3a3fb254b2ced96519980d026482024ab84fcae11d260de2798ce99b3477f6f5c36e63152ace03e8b81e40e987031527f2974206e25a0fefa1d0ae78c76f"}) getpeername$netlink(r3, &(0x7f0000000100), &(0x7f0000000340)=0xc) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0x1000000000000000) ioctl$RTC_AIE_ON(r3, 0x7001) 22:33:16 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x2f03, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x40) 22:33:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}) 22:33:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, r2+30000000}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) dup2(r0, r3) tkill(r1, 0x1000000000015) 22:33:16 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 22:33:16 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(0xffffffffffffffff, &(0x7f0000007840)=[{{0x0, 0xffffffffffffff37, &(0x7f0000002b00)=[{&(0x7f0000002640)=""/246, 0xf6}], 0x1}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r2, &(0x7f00000017c0), 0x3cc, 0x1f000000) 22:33:16 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) 22:33:16 executing program 2: unshare(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) 22:33:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}) 22:33:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") creat(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0\x05\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/3\x00') r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) sendfile(r4, r3, 0x0, 0x0) 22:33:17 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCSCLOCKID(r0, 0x80284504, &(0x7f0000ffcffc)=0x1fc) 22:33:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)=',\x10\xec]$R\xaf\xf18\'\x99\xfc\xa1\xef\xff3\xd5\x9f\x9d\xff;L\xde<\xb8\xe5\xc4\x8c\xba2A\xaa6\x1d\x97,\xa7t3\x14\x1f\x94\x1b\xebzGY\x83\xa8\x0e\xc3Q\xb81\xf4\xea\xa2D\xd3\xf4\'\xea29\x80\xd3\xd7\xc2L\x8a\xe52W$)\x0e,\xf1P\xd4\xb1|z\xe5R\xb5.\xe4\xa7\xad\xd1\xbfRB\xeduL\xa9k') r1 = gettid() tkill(r1, 0x3c) 22:33:17 executing program 5: timer_create(0x0, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000bc0)={{0x0, 0x989680}}, &(0x7f0000000340)) 22:33:17 executing program 3: syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) epoll_create(0x409) dup(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) creat(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c22436828c76e7bcd80"], 0xa}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 22:33:17 executing program 1: r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f0000000040), 0x4) close(r1) 22:33:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 22:33:17 executing program 5: syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) socket$netlink(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) epoll_create(0x409) dup(r0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/snmp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='\x00\x00t/netstap\x00') clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c22436828c76e7bcd80"], 0xa}}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x0, 0x0, 0x0, r3}) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 22:33:17 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x5}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:33:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x0) syz_open_procfs(0x0, 0x0) 22:33:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 22:33:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x12) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000ac1414aa00000012a199f8a888a92bf46ee779b78003d91876c932b5895c305382e6bd5ef923a781b16392dd240ffb4b0a5961332a4569740308b3daf955906d6c220f70e197d806a8914ec6756451974dbca80cdffe2bbd5e435106414f9d0f140a0e15ec35ebf1292b450d49ce2e4190c5cf13096a3c4c7a95eda4009a0b000000000000b25271251748a1365e2cdf2131074890fb19b349f2c66e22a09ebefefee4a7f810f64e21fcaecbb80fe28396ffff000072bcd81408998e4e1e0d"], 0x18) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x2a1) 22:33:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 22:33:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0300a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x5d1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x3da, 0x44000122, 0x0) 22:33:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:17 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x81000000}, @random="35610700ff00", [], {@arp={0x806, @ether_ipv4={0x6, 0x800, 0x6, 0x4, 0x0, @broadcast, @remote, @dev, @remote}}}}, 0x0) [ 486.267175] binder: 21982:21985 got transaction with invalid data ptr [ 486.301375] binder: 21982:21985 transaction failed 29201/-14, size 16384-0 line 3155 [ 486.355198] binder: undelivered TRANSACTION_ERROR: 29201 22:33:20 executing program 3: 22:33:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) 22:33:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 22:33:20 executing program 5: 22:33:20 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000200), 0x87) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 22:33:20 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 22:33:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 22:33:20 executing program 4: 22:33:20 executing program 3: 22:33:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) 22:33:20 executing program 4: 22:33:20 executing program 3: 22:33:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'sit0\x00', 0x1}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x13}) 22:33:20 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) timer_create(0x9, &(0x7f0000000280)={0x0, 0xc, 0x7, @thr={0x0, &(0x7f0000000240)}}, &(0x7f0000000300)) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) add_key(0x0, 0x0, &(0x7f0000002040)='\t', 0x1, 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x54c2, 0x80000000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000380)=@v2={0x2000000, [{0x2}, {0x0, 0x9}]}, 0x14, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x8cb38f9755a659bd, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) 22:33:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x13, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000"/19], 0x0, 0x0, 0x0}) 22:33:20 executing program 3: r0 = socket(0x2, 0x3, 0x11) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) 22:33:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r2) r3 = creat(0x0, 0x1) close(r3) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003ac0)='/selinux/enforce\x00', 0x20d00, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000003b00)={0x13f, 0x4a8564b6, 0x4, 0x0, 0x0, [{0xffffffffffffffff, 0x0, 0x3}, {0xffffffffffffffff, 0x0, 0x8}, {r3, 0x0, 0x8001}, {r4, 0x0, 0x7f}]}) [ 489.233057] binder: release 22033:22039 transaction 106 out, still active [ 489.240785] binder: undelivered TRANSACTION_COMPLETE [ 489.267815] binder: send failed reply for transaction 106, target dead 22:33:20 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./file2\x00', 0x8040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0xe3600f47cb99b343) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r1, r2, 0x0, 0x20020102000007) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x10, r2, 0x32dc2000) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x10000, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file2\x00') rmdir(&(0x7f00000000c0)='./file2\x00') 22:33:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 22:33:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x13, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000"/19], 0x0, 0x0, 0x0}) 22:33:20 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2}, 0x1c) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@broadcast, @broadcast, 0x0, 0x2, [@multicast2, @dev={0xac, 0x14, 0x14, 0xe}]}, 0x18) sendto$inet6(r2, &(0x7f0000000140), 0x0, 0x80020000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000001840)="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", 0x7c1}], 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f00000015c0)=[{&(0x7f0000001480)='!', 0x1}], 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) splice(r0, 0x0, r2, 0x0, 0xab11, 0x0) 22:33:20 executing program 2: clone(0x20806ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}], 0x1, 0x6, 0x0, 0xfffffc8f) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) tkill(r2, 0x36) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/4096) 22:33:20 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="e86cfa76d71c17f0528bd66d56cf5fe87d1e7f1d47fbdf82", 0x18) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) getsockopt$inet_buf(r2, 0x0, 0x50, &(0x7f0000001440)=""/4096, &(0x7f0000000600)=0x1000) 22:33:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x13, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000"/19], 0x0, 0x0, 0x0}) 22:33:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/19) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@empty, @in6=@local}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000180)=0xe8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x200200, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) r3 = dup(0xffffffffffffffff) ioctl$TIOCCONS(r3, 0x541d) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000300)={'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x4ecaf634, 0x140) ioctl$BLKBSZGET(r4, 0x80041270, &(0x7f0000000380)) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000400)={0xfffff800, 0x5, 0x5}, 0xc) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/mls\x00', 0x0, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) pipe(&(0x7f00000004c0)) r8 = fcntl$dupfd(0xffffffffffffffff, 0xc0a, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40246608, &(0x7f0000000500)={0x9, 0x6, 0x7ff, 0x10001, 0x5, 0x9bd1}) r9 = open(&(0x7f0000000540)='./file0\x00', 0x0, 0xb) ioctl$ION_IOC_HEAP_QUERY(r9, 0xc0184908, &(0x7f00000005c0)={0x34, 0x0, &(0x7f0000000580)}) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r10, 0xd6de043620cb2301, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) syz_genetlink_get_family_id$SEG6(&(0x7f0000000740)='SEG6\x00') openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/policy\x00', 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000007c0), &(0x7f0000000800)) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000840)={0x34, 0x2a, 0x14, 0x1a, 0x2, 0x1f, 0x6, 0xf4, 0x1}) 22:33:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000001100), 0x11e5) r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000380), 0x369) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x80000000, 0x7ac1, 0x645, 0x4d, 0x55, 0x7fffffff, 0xffffffff}, 0x1c) listen(r0, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) write(r3, &(0x7f00000000c0)="f7", 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x200000, 0x0) dup2(r4, r5) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r7 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) socket(0x11, 0x800000003, 0x8) 22:33:21 executing program 2: syz_genetlink_get_family_id$net_dm(0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) recvfrom$packet(r0, &(0x7f0000000080)=""/86, 0x56, 0x12000, &(0x7f00000002c0)={0x11, 0x9, 0x0, 0x1, 0x4, 0x6, @random="3d78ca010782"}, 0x14) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000280)={'lo\x00\n\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'ip6_vti0\x00', 0x0}) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000180), &(0x7f00000001c0)=0x8) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(r0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fsetxattr$system_posix_acl(r5, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x24, 0x0) ftruncate(r5, 0x0) accept4$inet(r5, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80c00) pipe(&(0x7f0000000140)) pipe2(&(0x7f0000000200), 0x82800) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x100c00) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000400), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000013c0)=[{&(0x7f0000000000)="8f", 0xfffffe73}], 0x1, 0x0) ioctl$TIOCGSID(r8, 0x5429, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x200000010, &(0x7f0000000040)=0x8000001, 0x4) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendfile64(r9, r10, 0x0, 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x100000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) setsockopt$sock_int(r11, 0x1, 0x200000010, &(0x7f0000000040)=0x8000001, 0x4) r12 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r13 = socket(0x40000000000010, 0x802, 0x0) write(r13, &(0x7f0000000300)="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", 0xfc) r14 = socket(0x40000000000010, 0x802, 0x0) write(r14, &(0x7f0000000300)="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", 0xfc) r15 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/checkreqprot\x00', 0xaac4091c2f5d9383, 0x0) r16 = socket(0x40000000000010, 0x0, 0x0) write(r16, &(0x7f0000000600)="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", 0xfe) sendfile64(r16, r15, 0x0, 0x4) ioctl$TIOCGSID(r12, 0x5429, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) [ 489.880018] binder: release 22053:22056 transaction 108 out, still active [ 489.895813] binder: undelivered TRANSACTION_COMPLETE [ 489.911515] binder: send failed reply for transaction 108, target dead 22:33:21 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2300, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x2000250) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x109100, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000140)) getrlimit(0x4b7d0ded18ccc274, &(0x7f0000000180)) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1, 0x230) ioctl$BLKBSZGET(r2, 0x80041270, &(0x7f0000000200)) ioctl$RTC_UIE_OFF(r0, 0x7004) r3 = socket(0x11, 0x800, 0x1) listen(r3, 0x0) getpid() r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000280)={0x1, {{0xa, 0x4e21, 0x119, @dev={0xfe, 0x80, [], 0xd}, 0x5}}}, 0x84) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000380)=0x8000, 0x4) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) recvmsg(r1, &(0x7f0000001880)={&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f0000001800)=[{&(0x7f0000000480)=""/178, 0xb2}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/132, 0x84}, {&(0x7f0000001600)=""/36, 0x24}, {&(0x7f0000001640)=""/145, 0x91}, {&(0x7f0000001700)=""/101, 0x65}, {&(0x7f0000001780)=""/19, 0x13}, {&(0x7f00000017c0)=""/23, 0x17}], 0x8, &(0x7f0000001840)}, 0x40000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000018c0)={{{@in6=@empty, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f00000019c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001a00)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@loopback, 0x4e22, 0x5, 0x4e23, 0x2, 0x2, 0x120, 0x70, 0x3b, 0x0, r6}, {0x4, 0x1, 0x5, 0x80000001, 0x2, 0x5, 0x8, 0xfffffffffffff758}, {0xcc, 0x3, 0x7216, 0xfffffffffffffdef}, 0x5, 0x6e6bb3, 0x0, 0x0, 0x2}, {{@in=@remote, 0x4d4, 0x32}, 0xa, @in=@multicast1, 0x3500, 0x1, 0x2, 0x4, 0x7, 0x3, 0x1}}, 0xe8) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001b00)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000001b40)=0x1100, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000001b80)=0x1000, 0x4) prctl$PR_GET_NO_NEW_PRIVS(0x27) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001c00)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x30, r8, 0x8, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x8, 0x3, 0x48cf, 0xfffffffd}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40880) r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001d00)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RSTATFS(r9, &(0x7f0000001d40)={0x43, 0x9, 0x1, {0x800, 0x3, 0x3, 0x100000000, 0x10001, 0x1, 0x8, 0x10000, 0xffff}}, 0x43) 22:33:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x1d, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000"], 0x0, 0x0, 0x0}) 22:33:21 executing program 4: socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x1100082) r3 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1, 0x401081806) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(r2, 0xffffffffffffffff, 0x0, 0x2000005) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f0000000480)={0x7, 0x6}) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=ANY=[@ANYRES16], 0x1}}, 0x4000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffffe, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="c54c2cbd7000fedbdf250100000000000000014100000013001700000013c1ffffff7564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da", [0x0, 0x20]}) ioprio_set$uid(0x3, 0x0, 0x0) dup(0xffffffffffffffff) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1e) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) fadvise64(r6, 0x0, 0x3ff, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000300)={0x3, {{0xa, 0x4e22, 0x3, @empty, 0x5}}}, 0x84) 22:33:21 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x1, 0x4) r1 = syz_open_pts(r0, 0x50800) ioctl$TIOCCONS(r1, 0x541d) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000440)=0xfffffffffffffffc, 0x4) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c01000010000800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003c000000b79094467f3c53259364c2264d64bfe000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000a00000000000000000000002c001300e000000100000000000000115c91421f40371d000000000000000000000000000000000000000001000000000a000000"], 0x11c}}, 0x0) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x0, 0x80, 0x5) r5 = open(&(0x7f0000000500)='./bus\x00', 0x8141042, 0x80) close(r5) r6 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x105082) r7 = memfd_create(&(0x7f0000001ac0)='lp\xff\xbf\xfco\xd5\xaa\xfe\x1d\x15\xe2\x95Q\x87\xa4\'\xd0\xd8\xe3\xa1\x83\xf2A/\x80x\xe9\x11\x05\x8dOS\xdb\xc7`J\x94X\xbd\x9eXg\x7f\xfdQu\xcd<\xbfi1\xd4\xbbb\xe2\xf3,^\xbc\xbb\b\x8d#%\";+\xb8\xc3\x9ea\xde\xd2,S\xa1\x14\xbd\xe9\n3-\x88B\x1f\xa5\xba\xfc\x9fTZW\vG\xe4\x1a6\xdf\x14o.mU\x94t\x90P\x84\x7f\x16\x89\xf7S\x8e\x12U}[\xa6\xe7\"`\x14\xdf\x04z:', 0x2) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0x526987c9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="3400000000000000000000000000000066333300000000000000000000000000000000000000000000000000401755464d281ccd64b72ea3618e7d7f648b9600890e4b0d304465881172991400"/90]}) r11 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r12, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r11, 0x0, 0x0, 0x5}]) r13 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r14, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r13, 0x0, 0x0, 0x5}]) r15 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r16, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x7, 0x0, r15, 0x0, 0x0, 0x5}]) r17 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r18, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r17, 0x0, 0x0, 0x5}]) socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r21 = openat$cgroup_ro(r20, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r21, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r21, 0x0) io_submit(r19, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0xfffd, r21, 0x0, 0xfffffffffffffee9, 0x5, 0x0, 0x4}]) r22 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r23, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r22, 0x0, 0x0, 0x5}]) r24 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)=0x0) io_submit(r25, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r24, 0x0, 0x0, 0x5}]) r26 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x401, &(0x7f0000000040)) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, r26, 0x0, 0x0, 0x5}]) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000400)=ANY=[@ANYRESHEX=r26, @ANYRES16, @ANYPTR=&(0x7f00000006c0)=ANY=[], @ANYRES16], 0x0) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r6, r5, 0x0, 0x80005) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000340)=0xfffffffffffffe2d) mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) munmap(&(0x7f000053c000/0x1000)=nil, 0x1000) [ 489.989682] binder: release 22069:22077 transaction 110 out, still active [ 490.001410] binder: undelivered TRANSACTION_COMPLETE [ 490.050116] binder: send failed reply for transaction 110, target dead 22:33:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x1d, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000"], 0x0, 0x0, 0x0}) [ 490.091165] binder: release 22089:22091 transaction 112 out, still active [ 490.098118] binder: undelivered TRANSACTION_COMPLETE [ 490.117431] binder: send failed reply for transaction 112, target dead 22:33:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0x1) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r4 = getpid() r5 = socket$key(0xf, 0x3, 0x2) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8924, &(0x7f0000000080)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') sendmsg$nl_netfilter(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x220c3002}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000013000000000000002aa0d871ee6c1da100dbdf258a0000090c003d0000040000000000"], 0x20}, 0x1, 0x0, 0x0, 0x100}, 0x4) r7 = open(&(0x7f0000000340)='./file0\x00', 0x400000, 0x34) recvfrom$inet6(r7, &(0x7f0000000480)=""/111, 0x6f, 0x100c0, &(0x7f00000003c0)={0xa, 0x4e21, 0x1, @rand_addr="0e7c0c49fe69ff828f67d48b6d05bf96", 0xfff}, 0xffffffffffffffa1) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x74}}, 0x0) prlimit64(r4, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r8 = openat$cgroup_ro(r3, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r1, 0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) read$eventfd(r8, &(0x7f0000000600), 0xffffffffffffff9e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r4, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) 22:33:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x1d, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000"], 0x0, 0x0, 0x0}) [ 490.171218] binder: release 22104:22108 transaction 114 out, still active [ 490.182409] binder: undelivered TRANSACTION_COMPLETE [ 490.211714] binder: send failed reply for transaction 114, target dead 22:33:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x22, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/34], 0x0, 0x0, 0x0}) [ 490.276560] binder: release 22113:22115 transaction 116 out, still active [ 490.298790] binder: undelivered TRANSACTION_COMPLETE [ 490.328576] binder: send failed reply for transaction 116, target dead 22:33:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x22, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/34], 0x0, 0x0, 0x0}) [ 490.403483] binder: release 22121:22123 transaction 118 out, still active [ 490.421184] binder: undelivered TRANSACTION_COMPLETE [ 490.455562] binder: send failed reply for transaction 118, target dead 22:33:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x22, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/34], 0x0, 0x0, 0x0}) [ 490.529526] binder: release 22126:22128 transaction 120 out, still active [ 490.572783] binder: undelivered TRANSACTION_COMPLETE 22:33:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/36], 0x0, 0x0, 0x0}) [ 490.596471] binder: send failed reply for transaction 120, target dead [ 490.628418] binder: release 22130:22131 transaction 122 out, still active [ 490.677829] binder: undelivered TRANSACTION_COMPLETE [ 490.704071] binder: send failed reply for transaction 122, target dead [ 490.730846] binder: release 22134:22135 transaction 124 out, still active [ 490.767523] binder: undelivered TRANSACTION_COMPLETE [ 490.784737] binder: send failed reply for transaction 124, target dead 22:33:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)=0x256) 22:33:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x22, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/34], 0x0, 0x0, 0x0}) 22:33:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/36], 0x0, 0x0, 0x0}) [ 490.937784] binder: release 22144:22146 transaction 126 out, still active [ 490.958060] binder: undelivered TRANSACTION_COMPLETE [ 490.993940] binder: release 22145:22149 transaction 128 out, still active [ 491.023452] binder: undelivered TRANSACTION_COMPLETE [ 491.033163] binder: send failed reply for transaction 128, target dead [ 491.040372] binder: send failed reply for transaction 126, target dead 22:33:22 executing program 4: clone(0xffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000380)={'syz', 0x2, 0x74}, &(0x7f0000000100)='])+\xe4\x00\x19I0z\xf9\xdc~\xb0\xba\r\x9f\xf1q\xe5\x19\xa3\xf4R\xf6yae+\xa1\xbc\x1dqP\xcd|\xbf(\xe0L\x87\xbf\xc26\xaa\xf2Hb\xa7\xae\xd7\xb9\xfb\xf1+\xea\xd6\xfa\xf9\xc4}\xb6\x14{\x91\x86B\xbc\x91\x9d:\xedx\x1fIK B\xd8@\xe7\xa9\xc8\xdd)\x91.\x83\xbfo\xa0\a\xb5&\xfd\xb5W\x8f\xfeN\xeaH\xf8\xc3%<\x7f\xdc\xa9\xa6Uua\xaf\xc6L\xbd\xbfz@z\x84`\x8e\xa4\x1b\x82\xb0\x99Oe\xde\v\xd3\xadg\x96\xf0g\v\x8f_\x94\xda\xbd\xf9\x80\xb4\xd0C\xdd<\x96\xea\x98\x7f\xb3', 0x0) add_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="8177cc7b2d6f282cc8f2ce5e4868388983a93d526f1d3392bed71935807f072b9dde7e91ac8d730f4f19d94368080e4d613bd92ef3b1b4092f70466ba847532eaffb836873b6ad02203aad1f373bcaee4ad6dc2b80c3865e64e50dc7db4eab2ce103ed5f37de49aeeb01a62c3f0a2ae87cb54fa5f59782decfa03bc4404839644257b3dea8e3f3769f6fc99ee205a570b6376f1abc9d61ec5e514b7d54926f8af42130b1670bd63b9897d794bbaa3ba9bd075f2fd5a6d2af359d8db7ac4682b193ed06", 0xc3, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x10001, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000300)={'TPROXY\x00'}, &(0x7f0000000340)=0x1e) 22:33:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) r2 = socket$inet6(0x10, 0x480000000803, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d400"/85, 0x55}], 0x1}, 0x0) dup3(r2, r1, 0x0) openat$cgroup_int(r1, &(0x7f0000000340)='io.weight\x00', 0x2, 0x0) r3 = socket$inet6(0x10, 0x480000000803, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d400"/85, 0x55}], 0x1}, 0x0) dup2(r0, r3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r4, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r4) r7 = creat(&(0x7f0000000880)='./file1\x00', 0x0) r8 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000140)={@empty, 0x33}) write$ppp(0xffffffffffffffff, &(0x7f0000000240)="64c22b2390ff574319246ca6bc151c2ab258ab43a2cbd0ab99e4f917674f3f12908c62ccc4ec88542c13ce40eefc45449797226b2a9c7341b6e05111511114e6a6f0bd5ba105d9fbbe4e3731cb87f80bb5e2487edab1d76ae1335c", 0x5b) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) r9 = getgid() r10 = getegid() setgid(r10) setresgid(r10, 0x0, 0x0) getgroups(0x4, &(0x7f0000000040)=[r10, 0xee01, 0xffffffffffffffff, 0xee01]) r12 = getgid() r13 = getgid() r14 = getegid() setgid(r14) setresgid(r14, 0x0, 0x0) r15 = getegid() setgid(r15) setresgid(r15, 0x0, 0x0) r16 = getegid() setgid(r16) setresgid(r16, 0x0, 0x0) r17 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r17) r18 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r21 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r21) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r18, @ANYBLOB="02000600", @ANYRES32=r19, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r21, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) r22 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r25 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r25) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r22, @ANYBLOB="02000600", @ANYRES32=r23, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r24, @ANYBLOB="08000100", @ANYRES32=r25, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) r26 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r29 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r29) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r26, @ANYBLOB="02000600", @ANYRES32=r27, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r28, @ANYBLOB="08000100", @ANYRES32=r29, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) getgroups(0x3, &(0x7f00000004c0)=[r21, r25, r28]) r30 = getegid() setgid(r30) setresgid(r30, 0x0, 0x0) getgroups(0x7, &(0x7f0000000300)=[r9, 0xee00, r11, r12, r13, 0x0, r30]) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) rt_sigaction(0x2e, &(0x7f0000000380)={&(0x7f00000005c0)="660ffc9c4e000800006fc4e2599cad00008020c4c281dff6660fedb1f8ffff7fc4e22db7a6f2ffffff360f380aba00000000640faef1c4e2a52b2b660f763d01000000", {0xd98}, 0x18000001, &(0x7f0000000200)="c4e1fbf054b374c4c195f480e9000000c4c261de190fa1c4c279787f00c4c37916877ac6000037260f1d2c712664dce126660f3a4449060a2913"}, &(0x7f0000000700)={&(0x7f0000000640)="c4e17d2884c41cf16edec4c12014cac4e1dded27c4c18df17c9919c4c291df68f4c4e3750fc20126d8f4660f2b98f6ffffff0f01d60f186620", {}, 0x0, &(0x7f00000006c0)="0ffe4b15f00fb08300008020c4c17a52ff8ad4c4c2f91e5b9ce305c4c37d04e90830aa0b000000c4e37961db06c4c2dd288ce9695f0000"}, 0x8, &(0x7f00000007c0)) r31 = getegid() ioctl$TUNSETGROUP(r7, 0x400454ce, r31) fsync(r8) write$P9_RSTATu(r8, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5}, 0x3, &(0x7f0000000480)=[0x6, 0x5, 0x85e]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) ioctl$int_in(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x2, 0x21030, r5, 0x0) 22:33:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r2, 0x2081fc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f00000003c0)=""/4096) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r5, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000013c0)=""/250) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) read(r3, &(0x7f0000000000)=""/250, 0x128b9372) fcntl$setstatus(r1, 0x4, 0x6100) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e) 22:33:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x24, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/36], 0x0, 0x0, 0x0}) 22:33:22 executing program 3: open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r2, &(0x7f0000000500), 0xffffffffffffff56) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) accept4$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14, 0x80800) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000380)={0x4, 0x1f, 0x3, 0x12000000, 0xea, "f1a2c58cac7b90f916d7f28de792593063c5dd", 0x800, 0x20}) r6 = gettid() rt_tgsigqueueinfo(0x0, r6, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) gettid() prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) timerfd_gettime(r1, &(0x7f0000000100)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, 0x0, 0x1) tkill(0x0, 0x6) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r5, &(0x7f00000092c0), 0x7fffffffffffebb, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x22a) syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 22:33:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x25, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/37], 0x0, 0x0, 0x0}) [ 491.429959] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.444634] binder: release 22156:22160 transaction 130 out, still active [ 491.451988] binder: undelivered TRANSACTION_COMPLETE [ 491.468980] binder: send failed reply for transaction 130, target dead 22:33:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0x11}], 0x1, 0x0) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) r4 = dup(r3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r7, r8, 0x0, 0x20020102000007) write(r7, &(0x7f0000000280)="2f2b6eee30b975aefe6d46c16562da6f9b29d94e0539c6b787281d918ab58aba189799cab42a19d24cd361", 0x2b) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@local, 0x77, r6}) [ 491.477082] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.516325] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.1'. 22:33:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x25, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/37], 0x0, 0x0, 0x0}) [ 491.531607] binder: release 22168:22175 transaction 132 out, still active [ 491.542968] binder: undelivered TRANSACTION_COMPLETE [ 491.544948] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.570434] binder: send failed reply for transaction 132, target dead 22:33:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x25, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/37], 0x0, 0x0, 0x0}) [ 491.619939] binder: release 22180:22181 transaction 134 out, still active [ 491.635521] binder: undelivered TRANSACTION_COMPLETE [ 491.678775] binder: send failed reply for transaction 134, target dead 22:33:22 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="021380fa72b8dbc862dd50392f3017c060083f35f24dd768be6256126c38020000800002000000df25080012000000000000000000000000050000000900000001ac010000000000000000024100000000aaee7bb550075649e48881d17f3c3adcc11a9b3924f84f460f633decddfd98b1d95994976fe96ccaf300a5a29e8ee9516a5d06551a59c483095d838105d027076d5113937b562b67f9df6190751d5514636e59c184f8233dbea6534c11c60dfe69906ac3de9bba983fff3d9cfe60dda1a3a704a6807184c69b5128ff71feed2e80ce14c0f7c86aaa404669ce687818626ebe2bc0824c5b098e9b92b32a35619b49135765dce3ce15bcfe2242f161fae5eea2c4b6d667732ecbe6116cc2677af8e8cfd150138988542d01440d3941b24b161fd224b71468af19c1ccc2e45b3e91a2e1c34c654829f281e571341d3753096cae1ff96310aabeb94eb96d633a4675248dcac1bb73ebf33d1aa85e79aba72b13d2cf74ca711ab06bf6265fd37d600040ab54b4962d983d26660fcda17f6eeedeea470f599f499e8a7e17486b087b5c99979659d76fc58461d6df2f9b4a9d64ff0091d98005a59365b5c03bd176a007088cd3b7d663ec206d387386f003e5a31fad9beb036a12032e95836afb35189110c95316dfa321daa39e25f0c2dedda6b4ccd87495b338ebcd5fb8fbab76c404776c63f2ea0147283234b7293e35858685d79ea45394dc0b59429c051360a6ff09f45381c1d3b48def309c682aeb98458073e5eb6ab22adb29908e0bead584f35e44fde0d4bbf6bd7aad358c7299ae89e995a3620828a85d9f2257bd68d260584e8c1545190f000075b22f57071b2f14e5a9f27d269e4281c206000000c95a7758ac19eb91513063a5eb530e1e54fcb804571c7d06ebdf5b2107dd62ca85be6e67b2449a6ac6eff9f9f3e944a4dbddc7da0f34573394ff559682961b0ae1b710292add8e98ff034adb924f245b8003f4dff11a6e000aa12702b0fdd2f2b1c8288a01dfe3cdffb4656d29c385574ae2468364c9778e587d402d0664b6395c70fd8b82fb036ca6dbfc7392f32fa6407387927f62ee000000"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) inotify_init() pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r8, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) epoll_create(0x9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r11, &(0x7f0000000200)=""/250, 0x50c7e3e3) lseek(r11, 0xfffffffe, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) r12 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r12, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r13 = socket(0x200000000010, 0x2, 0x0) write(r13, &(0x7f0000000040)="2400000024007ffc00000100000000000000f6ff01000000000000000c00000000007162", 0x24) setsockopt$inet_tcp_int(r13, 0x6, 0x11, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffc00) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r14 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r14, 0x2007fff) sendfile(r5, r14, 0x0, 0x8000fffffffe) [ 491.752776] binder: release 22188:22191 transaction 136 out, still active 22:33:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x25, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/37], 0x0, 0x0, 0x0}) [ 491.831569] binder: undelivered TRANSACTION_COMPLETE [ 491.860783] binder: BINDER_SET_CONTEXT_MGR already set [ 491.882835] binder: 22197:22199 ioctl 40046207 0 returned -16 [ 491.883085] binder: send failed reply for transaction 136, target dead 22:33:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x25, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500"/37], 0x0, 0x0, 0x0}) 22:33:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 492.006683] binder: release 22204:22206 transaction 138 out, still active [ 492.017237] binder: undelivered TRANSACTION_COMPLETE [ 492.037011] binder: send failed reply for transaction 138, target dead [ 492.076338] binder: 22207:22209 got transaction with invalid data ptr [ 492.089541] binder: 22207:22209 transaction failed 29201/-14, size 16384-0 line 3155 [ 492.116710] binder: undelivered TRANSACTION_ERROR: 29201 22:33:23 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="02071604020000000e0101000001002025f10f022f5c6b796fdec5eba45d92d5f0b248000b17a103004a076462284d8bf691568bc7fd070165bd1bd624f7030000000060cddccd375842d9772290b0a68fbd3dfcce762d3c9eaf4ded5fef07d8ad4946cf00"/125], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) sendmmsg(r0, &(0x7f0000007980)=[{{&(0x7f00000000c0)=@generic={0xa, "c50d7736f23eb18c50699cd46a353724dd0a9b7d95e12e81ae60ddc8b0b3258914948d04f3cb37ad1890e1783e317937b6ba8b4648d3235f15863c3ceaea79d872a132049b46cbd58d41eae9991aa218932ca33d2e58b3eddd204ae609e60f037453fdf517dcedfb5ad699652767f9ac05cebc2425246a9388262138d6fd"}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000200)="e7616f3f2ea19f6c0001066b0fd4a1f089563e7f716f9a78ed22973499349409b3a6064082cdf09ab15007ecea630aa3138e47a696abc739425bd65b5bdba10f07c6fb72953d88367e739e5c1b3c4c3ba0a7f28d5e9940be0ef11708c66b1b065810a52774f1e75982974d6544ce73e3406191769e89b5869d12740c97a7971b7140733ac387bf2d0c29d1bac892aaea4f14", 0x92}, {&(0x7f00000002c0)="e1cc2e0a771814a5da3967b49a98af8dfb7dbdfe9ffab773056c904a70c43d04082314973f72b2b887ad9c4bb7aba2528fd2b69f0ebe0411a0458ad40035a7963d40b4c4cd802c817e5cb3ae32e20e58cffbffa1682603258de80756f5971ee2503b368fa411551e73f42349b08527b32846a85a7858677e765b007f6a3771fcfb408f39583e", 0x86}], 0x2, &(0x7f0000000640)=[{0xd4, 0x118, 0x0, "e16ca8879eb1284665c5cee830927f7dc8f3220d163218430ea576a183ac380a145d211c65311f64e17ba382dfc380a6f2e481febf0ab80fe8ead59587f3ca48aeed924f3ecfad807578b9f31f463ea64a5e0c0214e82c273c54f53e40579916a793a01bbb3a2c20b9820ac85d12e27204c98b82a0f977c29da1566091d396deec51ad2657fa570d6f890a892e4adad38e5dd8fbb8f1ee6300b6a12f8d12fcb720bb8a92a8f5c4f5ef23ed5dd7bb100698405464c91e177b7c13b2c1f8ffda141efa05a40a"}, {0xb8, 0x107, 0x3, "c3b0558daf18ba1aedfb212c44377331b375c11d490cd9fe3a6b1cd4e53c3a64839245f230d920a8609cc6350cfe3ee62a2854fa56208c6bf1472dda092fdffb1bcec87cacfbf2ae1e5d41b3c943072be4a430edce13e5ef3c69320f092aaace70e0113ae312b4c406c551bad1237f2f81a8f85090d360fb4266266a4605216bb86a45222b84d3d960277bb93cc010e1eff6524af7661e8c3fb584fb8be90890db727eeefbf65d4a34e7b4f5"}, {0x78, 0x0, 0x2, "8f2fb4fad192a5cf035974927200af1d15b07f7a16a35d6adbc21dc92bd52fc4912d40b9429899c994c722393f103536625eb0e496e81d306afa1cf773096790f52138a3c42de48c370fab7f43f2cf75e23fed603a77ab62aa0c00b5844a655dbf5f314c5a87c8f3e873"}, {0x80, 0xff, 0x4, "0ff00492504903d11faa7d61d16ecb4a3ff2aaf8a9807cd57c4019242a3b33d92ade9d83f4cca239e4f90413f46095197e3ebb88b6850b41070838edef5ac332715328e93979b9596db44371fcc2b7cd640f69d9e685b0588779cf6a827928f73ae64d2412cdc1dcad193e25f563eacf3f8da9e3"}], 0x284}}, {{&(0x7f0000000900)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000980)="12a438939b542c16c12baf8a36d562878d3a4567a2e5b177fc1c023f25b6a8c41940", 0x22}, {&(0x7f00000009c0)="97443ff37528d708d0c5b9bceebb77ded706f5531283b9d06d975259402d69b0835d6660cab8402bbbc2c609ede7bced9a156e36a608e655b20c39a21a353a5e66a5d75062587f6c6e373a0d05083aa6c5f2", 0x52}, {&(0x7f0000000a40)="1bffefec434911a8847e7a1cca94af656ddf7496e285158944e6b51322e99b2790139366ca245310a5fd4e8b07ef568aaa848ef7ed86ee8ef210a4e45c54d1f4263f3997084b32b47ca5ff", 0x4b}], 0x3, &(0x7f0000000b00)=[{0x78, 0x109, 0xf59, "52d901cd5009a609c1f5b38e37bed43da53dc479c0fc448ca808f255b516a1bec8b38bcb7680d9bfa7f2fa2432dad0e8734619bbcccdf43551290593f3b67376ad08f11d867c6a5c5a549208353395f77545adb962436c862ad7137c8485b58cd76a1da01bf1e214c9e0"}, {0x50, 0x6, 0x5, "b975282eccbf1c65a7e0a79a477eade031a10b27ef910d64ac874a86a035379a50849edf711d8eaef0d9a6866e7709fee684db9878e1cb586ff1c7d2abdd483fa82fdce2"}, {0xd8, 0x101, 0x9, "8f592ccba345f33f03ac872c502b1cb14b372af808e048b4a9cdcefabfcb6ce972ee3264315039ff115968a7b92fb4867186f29014259cf07bd04c5b89348b13e849a6ee9c8736b7e03b72847f2f2277715300e85e86e13f5012227dde9deb387865d3e78fd8a9e243f8adac90de6be16fd92530b6ace960db2a7a4e51a9bc27b867c37d2e7d2c2f2dd01abd348e833f212abf64fce21cb84550fcbf7c23e4bc957d64be61a19652766984845cc61055cce3096e508bcca06699c4592c1a34befd7cdc88cd675f5a7091bd"}, {0x54, 0x109, 0x6, "6c5633f31624846789e05aee42149ede72d37026f230cd1caf4680d9c49f41c953f0bfa25e6544da5665adb5d7fb891d0f45edcffe1bbca58326f486522036b98a02e0d919"}, {0xdc, 0x103, 0x0, "123d1aa61a4fa41f5c174bd858a92940693a8bdfc504fd4ff3d42ea372b5cf043898a4170c4564fbc0f613ffa9cbcfbb78e16eebcb03240dac0f42b6de3c7854f803842fca580278078821793066ecc27682e94ec69f4c7ea0b71ea478782457e43352e9f2c06abcc2a66b91beb6ffb8629c59968206d2e80e3e348d0117de4d9bbbb65a5e82147680796871659d6fba737743551b2af44ffadc9fcffcbede2da02a5cb413acb28025f90e690f27826f7b83dbd6077982da294fb42f0fd7d6c16479014da938c3dde7abf56685"}, {0xa0, 0x3a, 0x804d, "5a49ba6a48f40959600499f09a4c71d5aa672bff2a55dc2baa94b0a5b60324300625285d47254a98668d6164a25e0891acc2e8f6503f30ccc996f4f52b8ed4204abfdd84c1b84b06e34fb6ccd0fbd01d6e4ca191b1df75e445cc68212fe189c1a258d59772016c207198522f7438c9c18eed0935803441b82dfc9952c1447472936862ca1e12b081fba72f4605ad553d8f"}], 0x370}}, {{&(0x7f0000000e80)=@in6={0xa, 0x4e22, 0x7, @remote, 0x1000}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f00)="8b511731b6a6e101ff3dd47cfa076d8000f3136bb1e1d63985ff931d59864ec8d6852d66bd0ea822ef95da898b38de8dfb0329e221c7d1d3a5b0eda8b308a62237b769ad8fd659cf3bd3a38132479ea6f83f01cc688ae3ea84b733b9b79ec9cb146c96f8645e3e5229bbd4c0a9c0f9c9f21cb4812fd32644b4cc91b4369c3c51527800d5d9b349de56a3b37b7e8b7cb1e6cb2c3e637fefd786d5c212a1f2bcc7c112dad454fa0e5f1e4e15a90aa942b4fba626607ed245482bafc12562b344e724c6b2077d48f5780b50fd034cfa8bb41002cd4a3b25e65ed647be4ee7d27da1b9afd9904cca3d91a234589e8f4700a57e39d9dc", 0xf4}, {&(0x7f0000001000)="fa6f41d0219830141e3adcea044c6220aa201d7dae851f3df60237605ae794e35956f84159abc55f70f9087b35e4e147c2fbfb817c6b20259a47773c4b0b3686cd79d3c8", 0xfde8}, {&(0x7f0000001080)="f9484abeaa9573e07dd18b074d463f360e780b45f59e3a90ed381dd78e59db90cab31c78b96a3dcd2853a4f72f760fd3c8be1b0f4935c8601c1d7fc9e63075bc6dab491816c3ea3ffba9b430506c8a3e16be2c7cc8b505e98b209fbb1db5c928c43f8fcd7721a5e8444669a83ae973e883cc97a9206b2f9db579a712576f", 0x7e}], 0x3, &(0x7f0000001140)=[{0x98, 0x3bfafcfbce76e4da, 0x4, "edcff663ea9e28ebe30ea37053c0319b956ad95bef576f0a5ef7fe0ddcae16788b177ec772cd4783fada0ba7c2535b7f5e82dffdcc757a0af64a4551d5ac4fb7b4676499354d1c66aba7a538b71c22899d201e716d6a3b0021e8d49d18d98a39f987a85fb2313d7cedc84d4412e10eab0378134f6c9ff5cc79da36a28f05f655ebfb2cbd153c3b0b63e94e"}, {0xb8, 0x119, 0x6, "451b92ed75f15489614910caa62fe36a4c1407ad53371588fc5d9c9e434876074471830cb25a537168544a69af73fa388abc12a05aa1d8047431604d769629588b5fb8c7f3433d4ffd67cebc7f9199dfac89d3c9fe9c61f2883cb498382ea284c96ef0de347bd3013003d8344f04c847ce312ab3120435c28a0b48b6629ffec4975881c7f674ac1a21e68b42bb83ae6edde6d693b27128197ed3458885a71cd7f4e96bc51068058a08c494"}, {0x90, 0x10b, 0x1, "6d741a67ab4cbdfc0024e3f39c1e44081a26d697abd3826f38863c47cf32746098d920cc044a18610bcdc8b806dfe64739ad3b4a78b8cea679d1c5291f3011d1d518ed1c0f4af8f1264058c509f86540ea7a26c0bf072dd12a7d5d402874e8e5b74a004fc0b90ad32164c84c94d602a9d4b480a822f7e3168094813dcb3efce07a87c6ef"}, {0xb4, 0x105, 0x100, "a7e7173a83a96b926b3464e97897d59f829d19dfc81bea3538fbd7acd5dc77c02d1270c550fbcfa881646ae5e68b70a81bac49bd9eaf224d66c8b386c9dbdee36370c000a0ca75322b5403ad2278218214297542e5251a0f32a55356222d3f3bec5b9c0202a0dd32a5134b75aa6212d868d80f994af7e4408b98e66fc8d500fd105b4311cb96ebe5e7e3328663f0de75a4b090b0f39b2bf17a977d3b54abe18ad823f09f93771760"}, {0x28, 0x84, 0x46, "48452e48b1701b0b7af5dc60888a7f52b544981458d2e7fefdc0"}], 0x2bc}}, {{&(0x7f0000001400)=@ax25={{0x3, @bcast, 0x2}, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001480)="1690a7b81154d82d94f88f97d8e3f96fb7df5a43f3356682f3ad76d9d133bdf1bb5d2afa6a49486928651d728e", 0x2d}, {&(0x7f00000014c0)="7f7b650dc7f30bfe62f093c11a19a348ebb4822fafd5b50fcd61ef3f181e88a8dc68f33ecafc8c149d08075f95479e5270986a357fbc67e5f160ed400b5c83df6266ea6c64bf6327dd11a2a4aba91152dc2aeb2bdb9ddee3d8b69bd80bd52addba6689978eac690812727f46e809d266189a7be70432d2e54f", 0x79}], 0x2, &(0x7f0000001580)=[{0x30, 0x105, 0x1, "bed1763b3556ae9fe8746411e75e52b3f2a1c4e41cfcbf7cbdfa913f25da9b4751"}], 0x30}}, {{&(0x7f00000015c0)=@sco={0x1f, {0x81, 0x44, 0x6, 0x35, 0x60, 0x81}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001640)="a0e74c3f7cd6f3c6d4f61517c834f577eef1be8f23a64dc63611aaa9228ee7f12b190c2283913ea56800118c82fbb4c26be5e46f09283093ef9c0c6658a1f4644bc412f45abf1bfa66e37fe2efdcc2b72c", 0x51}, {&(0x7f00000016c0)="5e31c54506bfac9fc6731a65d3b851c37c753a9d2eb89eb5b65afe3612dd67d4a1699acc80ac40c06c58fa3b89ee02d842eff8fcd7dda780be27b9a1ac58ee0ea333d486435a6f3f0fc445d631b23af527a6c194ccac", 0x56}, {&(0x7f0000001740)="30f3785f4a75f3d28619cfb424dfe7599d032aadfa7c9701b69c55458954f33f979151234aad4ff4a364c14fa1d2c733a4f352fe427356ebebec938243620aaa03819af58aa518b4bdc18959287c6bc22a74fab76ddf3e50", 0x58}, {&(0x7f00000017c0)="a517416c49e7e146dc790a3ddf104d0b26bafbbdec28fd27b9b58aefaa6ceb7b0ee782c6b59d83c352b4a38c7438d6d7bac0d2f98a80bcc94a346c7fb43a55a2fdc0e8", 0x43}, {&(0x7f0000001840)="e243d86a74e49e08320642b5f3adf880847ac880dd91eb56c15d1ee9b81c57a6ce5e59081fd4b72aec136e62768f711485f9a15b26", 0x35}, {&(0x7f0000001880)}, {&(0x7f00000018c0)="89c3b940e8be07037df9003b3382b916f180ef6b72aae951820dfddb0523139e62e3181c78b784a12e3f4f932fad202a144b032ef19a29f81bb25ae4337459da11a7be4abf886f8f6d5ea37512594101ee9ba6cf6983bc2cc02891", 0x5b}, {&(0x7f0000001940)="3dcd24cbb082992d8be0abac7b685d6a337b8b15c922447f699f285c8b670e3fba143dd4f7f6ca545b4cd92bb0b58b4938f24400b6d05ace3f998f6bac02", 0x3e}, {&(0x7f0000001980)="caa277f64f2b4ed8c201062be459ada3463222bd724f95fd0d275796b813ac1870f3fb987ea6c285f8f8d48cc6cdeef24cecce7ba8fe87832a24aaf1bb91cf07fd58ccbbe1edf8726c", 0x49}, {&(0x7f0000001a00)}], 0xa, &(0x7f0000001ac0)=[{0x84, 0x111, 0x8, "652ba266f5cf541480eef88b25d6f0de85cb2ff92d9b76a967f01b5b354d09cc157254bf562ee89d96d36fcc2d29d6eeb6d86c2fa14b29d34b02aa8c36dd8a3df3f2bbc4cdcddcd9c8c9025e2c28ac065fef54c47ffff4051ad1141744fb125d9146a1926d0f301ea86f59cd890b2f141bceccc4fc3182"}, {0x28, 0x3a, 0x6, "a0d3222af236e02c496efa16bddfb4151b2f1181ddf4dff3252e94"}, {0x54, 0x115, 0x989, "37404d61abf28947de5f5067857beb9d6aaa9a427d4d1a3557f116d1ec30e6a93cccc1f3ea8a87b33f0b53799d0641ec5ebdc2f2a17af2d836259fa81093098e591862894463"}, {0x24, 0x3a, 0xfffffff7, "b9e3df15b127f676bb6c23b42bdff18f48792e02ea"}, {0x84, 0x103, 0x20, "7947ee21254b05806a4ecf983792da8a513d78257441f9105df15d709d9043cbf050a8f257cb48c3c2f0ff6a128c6859515a9437935cc7a9e5b1e13b3e4f583b16e425c9082c30ec5b4b8c5b7ec9d412fcd54cfe8f579181d4152726219e98dbcc77735db12118aad2e710d0e57b5580532b4c118e7c6a34"}], 0x1a8}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000001c80)="307760953fb5fa6670006285dab80587b26fee1c69846fb46ce640c093e27d5ded07aad11dd8b2b2d8060a8fa4539fb74ded44c8ce5df8c7b1c04f800468bbfc735e11405c89b2e43fa71a9234b14315e35488174eee531e89ebb0e8e102d80a442a7231c9def267e1644c2e52689938ef64e432b8d7b22e215a151ac6fb5d01af01970e2c101105b1aab487553d7d107ff71f3ccce719fad7cc4d58401c85050e8388d9c0a2491e32b4a22cf95ac86a4b25b9e8c3147968cc80fcdfe76e33a5671397e9540c9dbffe2d9fb505f5bc2c48e460edd5044fd35b291af7c136c36fe52f4749df181302ab51d802fec5bcf50e6509f64e61138a8e484c1e10e31be725e1b631b6890480382f01cfac25e6142e8fa488424515eaba347f627ae0d3d69bc9b3e92ec616b655ff544ff1b28bedb7ba90b60032f3817f9c023c113c900393c2b5b4270b79999ad3eb41b7e595056b6e74ce1f119ece145028f78614a56944784d7d1aa4b7c44bf03d9277a4490f4a928b1e235325d1c731cbd2a93e0504e389a7617fd30d0a20382c014aada499ce70f48199b4c351110524518d9629dbce42eac0b6bec04f1f76755eec4aaade1e710ccd3dbcd7aba734bd4023ba54de232f05ce99eb0aef2339a3b00ac660c2ede04199d303288f5fd96b6b3f1adc36a5c22b4f0efa4f5553c577e990f8c99ef9376dc06f53590d12094335739b5500c0feb6b1e8a52d5c4d50384b88236f8440773c4b694ae5cb291ee0e30beb753e504573ca524a7245d7167f0cbef9aaa7e9989f00e8be1ea8372a147b75135023c883320413b1540c2c5284120cf6b8e583e7ee01c5b588e3cd9da3375e0210c67dcb03b4831a770fce77d603b08c9b57d83295b702895923aa8cb1d175f4013617f563a9f6d605fdd7d2c06f2549f653f1275275bf779abfca6fb8306a06aa18f8dfb1510b4b9802f82b985803d1ac0d30575939ae0adc493bd05f5760c554ef0890a2d6ab2f24b910f46210a8bcf343430861bea54c192c4a38536aab67c80fc385ef6eaae408da391361c0a8bd2b5b2ec4fef73728f52621a11eb80615fed72182102d63b8718cc2b5353c903b06a02679e679c5620df9dc4a3020b9bbc8d797d86091580609e4f9c8d4e6d8c718be23b03248cea11ece6ff10e404381698fd730e27f18fcc1caf90f2d124032085f89d17a8065273ce254787095f628deddc73a18a48aca36c012ce6d4f5c44173f55215446fa980432434ed951e4836237218c1cc47e1840af23fedba28300e1b8f1a8ab64dbea57859ada0ed2acb54d8915a6dc798138103492b6b16f15000c15866dadd163aa1aac5321231f6da93af0857dd573de66ce283a7963d6fbaad59f8294afc629d000eceadbc60c4fadc0d7cdea6ae091b3573a64763a9e1850019680b80788226d351adf5d65ee56d298fa9d1885b5b6f778159d96ff0b02b1f41c482e4f4dea3b6419c180f559f7e5192ad02c478064d052313280fa3ae71a7db6b8d9723394809569bd64341300b4febd814e0041431df77293e7db9e380d1f63c744f051d3720ad4d33c45a0ae9633c85d3f83632693848a338dc3f9b865ac1f55048582ef709560def3b2783ad2836784c8eba6916cdedc49c25b974a8e2b4bd0c18c05839cc077da387a51b5d424aa3c24acbf1630f683d71eec1ac9649bd17003a7a12f091cddd136ed107226c689e18a2130ebdbb9e9232a25d3ab080013231b35d7fd378a79b4eb4ad8cbfce1ec94e63ea59c2fced8beab4bec564500b1ff1f6029572b7221aa1da7a5a4c268fa75310a12d4ba702e4578b669c003dfc851f75133bf9240b3e5fdee60d057a1fcaceb04fb7d0ff4740d23909d15ea285c3231eaedcd7efd9d6986eaa6a2b029413ca7471c189d5bce7d1e25ddd02c102c817f45376938441813b29fe1b436e440e5d772530a44ffcc890979d6dcb537594244b948c5348d60d463ad7db4813c43f8b595de88f9548f29b3d98a405291a617b710b948af3a4ecd57029f19b41e027cb240a5014467ba87074bbb84be33ae7bb6a512e752124bfc48b4e342a742630b89a8326c65c92fac3f854a5589661caa35d11bc9f00dfc38fd7b09560e40229f40dfb3f03de7ad78908dcdd9adb5d294404b1a90f4b468b2cc7df7a2a3ce1657db99e162685f05d75b8dbda5b0d8ef6723036dbdee67c45068972312fbf36546266b2f9a8ebb7a2d49d3e90aa5f624915cb22dcb7efbde50d330e04bd5c1f6479c117ba124b96114a42503f6a446aaf9432f698a4db73a2ce30d7bb06926ae450635fc2ee14de2af12bda292a8522d6e35255c8e6f5dc04c7f6270bcf5e007868ac51e191765bfe1ce9d95983238f41c6ae82a5e1e6212f45dc6d93f3e1012f517f853d73f21ce35a8f63bac3817e5476d0414180b183af7cda7f952b78791edfe19cba56bdc45d8c0416c48eec69768910b97a301c5a8225eb7c01cd8f0eae495dc6288a8cc57bf9395c698825a10e42c45624fb1b5c1e5f3e243a1fd57f1f741ff614a87788c879fe7465c3d743f19ff7dc8ea7e45313bc56bffe46c3aba798954ef4877d78bee753c432c130e17807bfe68672408706577219ee6eb918b0acf024e5c9956b9899bc086254c87c016a7c669a71346637fbb49c9c65f9ebcdb03560424fb7cfdb2e24cce7f903277a5973af58f6f9533df9d738df933a5ff197330a36b82e46be4dd1c775ae55212397078929d16b4ce46cb744045c174749c638701c7b9ece031193b9705506b92913a4f628c1c583580d489aa719079fdbdb9c10f5818d8a14470a483af8911c9d5a747deff32ccb0a9863ef5ee8532be4cfe6f9391f791ee5cfbe9f813ad7f08a1f54f2511c2f69aafc132ae7bb685d6c325d247a6b66b3dc930af6601d5abd3a79c53e7b35cd274d43b822aed9ea180c8c232e92db4aef270c10fc1884a88e4ef4aa51ddf55730f896a7f93516c35ae57602eefa64fd18100f345fa4b9bbe26cb55ea9243110208860793622af462df9baf8929d106191ebe0c79ef7a9e4e06dfdf7114f28bc0cc664a055ec972f5789e10c7d4844ae9c27cb3877d32f058375bcba0fc216761343f14be684d1cdb9aaf4bec19b75678c9736bce6be48c6b6eb8cbcd124e7ff418c33f95ec012bfeb099c7377d44daff08483e771c53c4bee733e2164f7eb6d82521a7e160798f9197549bc561f665f2ad7f461cd628267a4e293528ceb1f30a854c23d5293724bf74209a49276533912b42a5fddfe7929bcc44c739ea53bff1630a712a011d886699d2c068f95290a2ab3516a7cb19b4350912d459d5ebf35dd05128822b9979356d7accac2dc6acad33a31e311715ab7c19da9cc27ea15c11b774e237e7f8a38cb567cbb73419bc9e89a86e4defa09f347cde197774a8173855e32a0c5e5cb559c78f34ceb98bca17af42a28d3171d78a76f49d792ef98cba4f3a9e526d69c47b62065d1afd967821ebd0ff9ae4b4d4ddf24276b4932dfdb9f784bc3594ca834947720fd0f10dcb7ca7fb0f0d147c33a3a447d4bcc6edd90ddfa6bbcb7050f9c4d75a638582d26222bc023d1f3c45cca2ca08cc2d6377ab343979f48762989c9b16b2b136f0889ed43b9f88bada79a3b651af6ffdd544bd681200cc506e706090598605d691032b6136d4aff4d98b2e523b41199f682c1f414b31730c96504b7382078167ebcd7ce1b9cb3a2196d91981d762caf1bef0bc465cf5d6cdacce9b823f3eace469350c99dae7244939bca4763352bbb26b91ec3173c42a983b8e411ffc3e1102a529560aa916f2eb94a8e49948123451ae0fffdaa019c135df9ea785e1d6238d207eca0ebb437f999d0828ea47b8f0f05d0f9881a7f26461c4d816b378a1cb9f869a461b7804feacb03318892927e323c27dcd97e2f2006ed68772ac42b40fa94110d69c8a922d39fe60a83020a3fb60a7e9349761d1c0a66c5821675115f5e5e5b9f074a7a5485f6bee040a54e27fc3856f7db7977a3474bc0678534f18e6ed41b043c5b15077e8a3332e48c33b9d555548db5082ddb50f6e691cc6a6d6077b96cd1fccc0924e4934bccb9a9db8305019dfd7022edca06359ba988ea172acf156f281e88901f2b5b43f6a68c707779737292770a44b122666c2233e48f4bab505fb339766896cf6b1efc44b31d197e6ed9987265bd2991e850dde511415bf62175bbc327dbf4bd94b8a1bc1607e99a12e7c8f81829e7b67914095dd52127025091aad2229163f5401630d9292921940479ed39bffa3105c08658ce0195df59cae8d947dd9847f32e0ae11e8a0df2e3ea2cdcb26d628e49aa2c2dc0b377dbdf9f61f0a2068606ba45a413513a9c8ca8812e373e7f964dbdc29ef384c7c63b271d150ec24b2a78749f1f0aa1c9b23d5acda1bbd226b6c1be8389cf706a327c11f28b76a9853c0fcf1553b0be7ce73046af241015945b419b0e2d158e14d4eee20d8b8b312a2b6977bddfc70ea3d106f8235145b93e95552602514d0c3eeccdd099a628a5d445340ecb195145f7f619422e2243d7ec9da950247fd634753b33983b46a7a40f295f42ff79f8fb5b4de067e52d4a11827538cf8a7e60d5a000d6203d63b156969a7e7b42436b6c9300dc5dbb6f64b20e654ae7be343830ad0a394bf699da87db2f28fa405ecffd5f34eafa3abad6734979bba5ed18834f2bfc46d4ebc6cdb876a56c182a3cbad24c4276e1b088fa0b212ccc2307d71f5aeb57567512359ffecebf7108b1041786173608775ee9fe8ce17b3155ed0639cecd1aacc16bdb1b748b499a51a49e1cd17a99e8768085c4fcc6a1466694a77a25dfdc358ea24e2b6a8fe8d13859fe6dcadc4cd12749055704a8dd72a54825550c00324fdb13279da0ce3613df694545c93fe8b21325276b30c3af963af55ce5bbb3686dd2aef01f1fd111723cabf129800ff830353628b6da81d92f94de9902d302860cf5d71d3bc2b1a19094138114ed46278a5992dfdabbab57ccd4e764774ffbdeac3cad7e98db1aa524a606aa78eb5db688a8258f0c4034f4b1015b2e43e13ebb2b0c7fe68e0e4f3e27405e9ec4a947159659bcb4bee5e25e5bd53c338a9ff37344d7735b6b1c9c85221c4948b048840ceb5afeff6f4fe8ffb5418f19d2292bf68fc3502821cc25397e6f60ce14c3dccffe86ee489d78e71993348dd26ec049567987e87137cb72dd6b9c1aa808b4b25c74c6bcd97caaf0cd96a3d74d7325910763ee3c47c7a23f114201b442d72ebe3d9d1d7cdf09b4678ff4976928c5bffbbc0ab49eabd0f06cd36ebb9ea60b52a2f3af1cf6cf15b37b22bc8059b17f4e54feda4dc0b159e105eb50ed74a597b6a4197e30571cc66a6806c7a2f5508d43ca13f823ffcb75bef0df5687fe38ba6f361520ca5ef1468578b3f54915eceeee26814ec3eedd231b699437a08b44199f3f1f131029ba081073880db1cebf7474aa2d35d3cd6e1b558060d9ae2897a01d90dfc0f036e80d7981d77cd04071895d52bd58e1e4d9773a7f01fa05a05f07315e06e0ca8e369b7b35e0ef6b77e40d40c01394ea4dbc01042e5331bd7138b4ab02c0382a10e28c58f84ef063632a02f41c08d196fc4cc83b6a71d657b7fed39a5b997eb2d83ad4a91d70773f07fe11a4396b0f08e88843850df1e1a935760a4059e4228b3a63a89791b339f35308cbeb2ed882515b222995ac5c5b067ec77c5b8b3616134327c602be7890a912d9a197e8f3e49157f4bd84a07be620e84b29cd3c8c272d5b6b0c495e970a5be4d3f47dc7a", 0x1000}, {&(0x7f0000002c80)="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", 0xfc}, {&(0x7f0000002d80)="5d92c5b691ccd4298f1f0369", 0xc}, {&(0x7f0000002dc0)="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", 0x1000}], 0x4, &(0x7f0000003e00)=[{0x1c, 0x11, 0x6, "8c7ea2bf4c3aa02540482bdcb7ca0583"}, {0x78, 0x0, 0xffffffff, "d7d3cc607043bd9ab2e5bd66f12269b5067e6dee6cd4f81b98832227d1d71d32f0e1b2438916a4f65181d0c49ede8be5b115f36e638563477bcd7b4ebb1e883070ca5fba3ce943c6d87ff59f67809f5fc2c045938d698996bb608a9f1adbc6e94b20c6c5bbf6ca088671"}, {0x48, 0x115, 0x6, "69808ce60ec2573d1960f0c3799942d52cb967820af3f2088fd6247ac7f575ce4e75370c340598d58ac54e9677d1fd404e35027e5766cbbabad071"}], 0xdc}}, {{&(0x7f0000003f00)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003f80)="bfeb3914db3065ec51592e306155546911d6bad9055377f3bf3d22511a373c0d2f27386e9cb82509ede5f3cf541502368802bc2aab04a2b42fb94b2d787b2309862f41a68e9300bc6f88c1bff25718542fa869306377c9546b4bfe6da2f362594f3c9d2be21eeb3d2225add0b1a525432dcb0ceb42c47e01dc7417d88b0fd21f7158c127599280c1c30059dfc137725f264c8a7ea0026eb462fee5684d256d8c122e0b7de188281473069d547119520a098b5b1677824d3162f207ada6bb03d9a861d940fea265df3d16ff4fcd3604fb8dab", 0xd2}, {&(0x7f0000004080)="c132224342d3032ec544d35569ea6621b79a8f31453e7e4b2f8e9e4493fb2e10776082817face20fa1f70d1398c9f38e377407eeebae5c9135b7e1a58f4c3490ff1e5206c1db312aa0f869e44dd572d420d3b63e61bde9905f385e3e715b128c3d795e5b2f148a72fcfb2080bd9532a590129a7ca6e3dd0f956e3192987b21b9fc232ca02edc08164a2a089ee5507448754301", 0x93}, {&(0x7f0000004140)="d8cb71a61e791749ccccb502a9c5c56eb2b1c131a4e6ec17468b6804c72db82be2dd0f86de873bcb35f8b54e062b9bd42540317b30f9d93248e49125d869697d5256baf966a8abb12ea5b260454763e75098fb30f6015b0d2cda1560d9161408fa1b09406621232e548fbac1ee10aee05f090a2047c1652aa414fa42d18105031997bb2ece6a11c975053b9360797d6604430625", 0x94}, {&(0x7f0000004200)="05ac684456acdbd90ccb1e782184f4215a2130a89764cb6885f031bdef1f63b0833e3c1fd643cccdb651007815307618526d485ee6224db632ba2adf953bdc95d726cc460deace71e63445643da5ce1522603f76f433eb5f978423ef682d1cccac56511fe87486cf5f3d5d6ab33cdf58bf56c7c069033fbfa2af0f087ed646b185e585f1bff08eb895c2c7b4f7b9a6a217c24b2e1c348178e5a45d01180d0ec8e15ac8f972bd8eec5bc67d5885aad8620a96bfaee6902468d61f45b91349a245d6944c91f0826bf43499f5bd3f5ec10d464ff159173d4d2eec930aed28b1bee34b88e7107b85ee6a8da2967b6946944ce4caa783aea4d0666d503f054840fc758fabfd2e50066717d1d81e96112fe403e07c2eb676b99ee386b3862151cae5cd6259c39688d57bcab7532635b97dca122516006f421985a0d1e516444c6b99617e7425e2ee18678b347ee9b87dd9ced8c4e79e2dc98f6a7b53f6d53c71503e9808b098b37ee21f99bb29badbd00dbc69003d567071ef36610189de56d4978ab4cb93769a76a764fca9330e4867bc47a1c41122fe4f1b20a34208bec3d578773cd5bc525ec998db6556f539cb33aba589e99b56eb2613eb6af47210a860249029d7520c03b083e1b841a290ecd88c60ec12a24a4f3bb548d9a6e65b2761254bd953d2b7f52144f67910caa391ccafec8a18443e3516a720c38fcdd311ac631fc694c95ccc5b180e4db9c40a386bf1ebada4355d5e73976a4f6769d34f8c128af12fbb918f8f8dcda6dda2bdc78773ed1422f114848498835c29c15d467d7ae2f5b639114240c31e89ba68a14413b67d63d684b0b8426895ce9078840f1124a4d3842c2cf4d9a5697746716ef6c0657299b939592f184a4ba489ede7a9fa34be40a73d5d2db33ebcecb30102f4864bb0dd2213f25cbcc45d96b6d312a38344521fc8905830e81d8c07d7886cfc68a38e999c14334791b4f873e979e4a1f9507752e03bba3f60ace24ba852dcc4e4407d4f7f9e127506ef43846751ab0fc21e3ee6d197940940ca6edd9b6e9a52e107c7629b9f01d42aa2bddb1d6eccbb9eda78cde4e13db1f2a5937b890d2659bc84c62a5d5477425d7f81e56dff7e1e820d36c241f0c64ee0df8c9fe85d2612ad4e1fd1412014a9ccddbbba39e890e5784656399d09028f09730211fec03dc68d11c7c7bf5ebcc0e7112a8cd9f96de9850f2c0c0ed4b200bfaa7f67a6af0e963ef6278450b2e3a3ae7788f02acd93c0c0a633d4f37ccfe105941402f7af23a026c546e456a7ac9f4639de8dd2c9464e5f1fad2f5148f5e175244f9214a08c907d511c160766bd22c05398e0fdadc4de4da73b974a34c8b229b04db49ca355b5afb6b9789037ab2b2e960ee3d487a8b15c6ef548e3f639891d6aebecb7769912cb0ac002f8f496e425606db1e55a316fcb58439d1eeefdca6d050713d1563aff67446461683acd64c4dd1088ed9ab5877d4cad9d7c695728c63e38c287feec56abe2f949658b3f020328b9338544848838f92773a4f81636edc256cc85dd795c9564d16e7ddb3e19372a3792dfd2d2e92aadd85c901b2a18d8f55fe451e432d8da71bcd0416c33269829f9e7d07afe9aa8c9e85740e24173317c1d6692e7941a33aeba55c50701547a88f03ec355f6a01b09bafd1d68eaed6265c299f5730e5905dc8384b3010138490af2df0a99af9db52125a043345b96c729cadf526ca38544bf40f5d0a364e0fc7455d7a1844d4fe96df660b6ed645f6aea83c1e5d77b2efd0d4c185cd652f64d7b01a2bfca191c561e2a889350257e02b167453952579a1359f1e0b152358f7f6579f18db5f7334fde97449d23792d10a628b9dbca5f99c7fa9c2d3c8fdf5e1709c39f13330daf75eac8cbe1f9957fcc720654a12096658f005bc313a6cd40d8ab9e733a529917370d32b54fbb8c30becba6c09f052b8e6df0d736b0085e87985adacce3cf03b4e51133fec008ba130525c9e244f78dace8c89a2978558b0d50ec37574e23cd0d6189e8585ec8970bc87c9aefff001c84b2e3d07a5bda28d1ff8df29c92625d936831e991596502c0e2c971998f192fee94dda5755226d7090e4f19f5ade52d642b779433719f856a7411774d87c425741530514d08628daa984977558a2b26da4eaa3c9d6052b8c81b9d0d16424b5a966d723431ee5073e5d29b9165f2fd31a5414ff03b1579045f40cc1a1594e26ba7e90957277c484fa8c31e8afd40837cbb08bd4380237619fcc803f57a16ac45d9ba35edc0c077debae03a23ecafd38f62bdd39d7ab110713a46e0bf6fca7551005c9b6f9bf01c1f510dcf53945b558ca8da1b8d549f083024c6d01c62cbd026ae97df5b998a000abe3cbe594e26c97fc5a5103b3f228e8b79d0a7b9bd35c77f637232f865349ce1ce36ff0f79c1d1ea46318b3f619686f301c65e714381c43b380525012afd8c8b9aeadcb042138db4d8b77c34e657949908852cb6acdc42ff6113e6cc5a3b73f4fff265503ba27d65407dd02d6fb5f350ef105be26dc999852bb7d22ef09e618b02d20e7d18aff2e90fb8931378654ae73a0e9c7ae3d1968375648244c0df7a5a00d495a4bc9ae1325514df6a0d15e0a7b99246df6fd4bbb27ac854d6a056766d6778c9a5b5442fc99cf7e4be8011e5f6e06c48805c3e066da3bbafb44fcce7a0f0a0bfd14c24c2a8a1dff3e00cbf694930f736882f5ebaee54a37748cae37e66482d89703095d87f9b995fab3c922080d6304313fb6ebd2f0fc501d34ee5efcf63246e1bf40fcedfb770a5e84720c1cca099dcbfaf7eec5f573608c1f069f40d8b5ba12b5413847921493924c233b8a091c0b3bff53aa03a9ca052a5ac3be3a2eaf5bc8304d0aa4f61ebfb3e2b22d27fbc7c8c544f3cbe0117234e4a894addc4507c02f775cf262cee5ca0638855a0226ecb44a70c31dfe07dec5e09669f3d53f58a289228c8fffbaeedf9b5b66064e4ce124ce22b81bf554885662c7370a28b40020a9c6a9bfb96012404f236f20f3e880486dfe8019ec6360f2c15add085cac87bfdae725970acaef2abebcac8d047e0bdbad5662f906992aa361b5c550e120d4e8234c8b2db75f711e7f76b40fd7b2f4c230486dddbb139d186206bb471da6011532fc3cefe1fede3637b855f56291543e3dde56960ce3b52e041d8644012da6fed701b040a953a73c45d60f89a18d45c7704f62439331000a5d2aec33d76dd501901e5bfba65e0acdc91c83bc65c7291ae7ab9cb4f0dc194e36072c803a1b6bb8b061520260433a363afe10f3dde8bafee4579390b5e32145ecb6114e13b0c4a7c86ba9ae5b797f9214460fa3946d92140d56e6bc8600e94ba53f02a5564d733628785a8e600d318b2d6e266c1929b9be477650320264dd353f590987d111096829e8fdaebae7eca22a47bf7b8bfd965f6e17f09dce51030366cca4423d11c7661766f4862e57e711543313cfcc7a4542ef1088365553e4ce7874ee2ad64f3f9f1d848b6a677a81d8f063250aa5146a991af6eca3ba2da9c97b2476cff46c9d5153002a71102ad2f32ec0042ae700911f71dcfd5f35f39b1bc8f41df5fe3465ecca79acfa4d5cc70abe164cf4314a620631470a3eec92be1802b76b70a2981e0aca38987ab077e677c2b813395a43b927b3a8402807e3b3c645319d51dc8392dda4259feb22ca86b3821fe19b473fbbf0971c05ad58258e99fce7f449c243b96a544a519bb2a4b0ad3e575c3a911e06487b1c443aafe2422633b20bf2a110f9e9359478b300e83ee37db4a31baebdd553e8ed06eba689bdcd38844b84aae4a02f71faa7f048bd309e6edcd2f29f1e368598cf72f9eaa6ae59e88b3d3c73dc9aff1998c0319677a433e1e7a5d20366979d9dadae77ddd86d4333dd7b71b72cd44570409de76ea948687617b18b4e00383aa7c609211a3ade44b8e410e54bcbf8b45c0cfab4bea7021a828cf3e5a8f2f696253857580dda752911695d6a9a426fa4f26e36fc2dbac8e5c058bcce1206d64bd920cea56e6595ea8558fc24670132803963f8f98baf10099c54cb4eef125b131d1679231c32d4d3de7e43c8f91c315c1ef307ac0b52f357a680945a00eb5ea105e10f5277dbe2e6b46ae79645fcc6c6a9dd2ea48dda187d2444b5d9eb6c0fde30c9352ea6222e1b998f02c6dc73659dbf828b6265262bc2034837dff24cf8ad7668a73df13208d5dd7172294002546f0de35de2f72c21dbb81ee756663d8ae26569cac2a673bce38cfb7f86f31cceb1869b4c596fba7a979af348f77f5d8c326d70de6c3871bcbf352a69eead05664fa1ac4c2789015c2287ccb3ed5f910ed7d4e4335008a3758a8f60a7da34d892142ab0a2bed28fb3759c3674027f04db7aabdf01e119d784440a4728b12aaf58395c03a1eec03168c4ba8973d3250810b45d36c32eed16bae8fdaa4ac973450f159cba00b68fe33d82fa2b6275136b2272932931f44eb97af61f01f136f21ef628d99e6bbfca5e43b59ec7a431d9ff248a7ee9f5269831906dbec196826d8e39b403d0a467e92ce5a02b8b1a5a0688740ca9c53fd397f3b028ba0781fa23aba75cf7d7f459d2a1df373d29ac1347565adf7b421dfdc53942659db40198675016b086de2cdbbad5572a9830171e44c860b79e8d86e2e31d87a32bd677f3dc1f7cfe2d0561172969101b8c182d08fce39aff1f249626de375b44adb50937b9fa802860a525d9d7bcd757723542ab30cc662fb1c93870874fd2e74307b83b2f435a5bbb49b6709a62400a6bbbd266b162ea0fff5534bc19ae8611b8cb6ecf9f1dcc6cb157eb81d5ff314d65f18ff3cc79db245de4120e90f51c4efc47860cc7731014e0ca256faf17af4b5ecbd0034dd86adf59a833ca256048c90e8afc0b331c8f5dfe77e380d5b84b3cb27a007594b89156ca7cf3c09abdf0b42e7f54137637e4930fb1714b369b5b66a94e5192e5825cad4df72a6c25c58883a214bfe2001e2cf4aca9f69bd7edb666aa439dfcf4673e5789cc0cd2fdd8e0f0b9ab06e391aa56203a29ffec190eef9afb63b66a30d4bcf356d4435259224eed8d0e416d1b5142a8d26d079d5300030353951b6f7544ecf5823b77cc5d84906452e1bc35c80f8dfcbb0e12982af1d77dda8c0f3798bb85b7cc99b5fee247118524d59a7f7c17b29bbc4b8cbdbd75c10dee6cb8ce50ade59150f4b7f4254b89b0ae0dcbc4cc5e9df5e4f092e49e446aa885705a0501a2fdbbf3f2bb3f47335ba982778d0ab29611b6d2fb87040b8e24f342826e110343c0ec84b196d0a7909138d6fd4383ba93de2e00cb3383a3c840eadf90e4677e98ba77cc31a5c004a1916a78aa8553b1dbab363ba9b6f4ca698b275b464699e134989beea1d09edd784b652830c60b7b2e1b32282e23e5ffe3891c8bc3f50d7c05a70fe57a0d97efc93799927d5dea15d821b4db5b2e25f428697c07391188b36620cdeaf06adcd69565a0c7652d72cf8bf563c3bf072291b4bf38946a0ff0fe28b72c7a41f0f5a5b2a50354528fdb4715a9b2cd3db0ef67f252adad51de97530716c1b052725ae508ba7ec2f7a472c8e0c6563676de8fa0fc92fbe5f0b8fc81328e5fbf1d612a24712badb03dbb89586bfea905aa634591873dc76554ee3e6daca6011c17a7a0a281afddceb141fd3ecfb0724470336cdfd8ddf72a66e1000d95c83c1212d9c478c0074d32659dbbea8ead9b41e19154d7a3fce03648bdc33c1caaf4de7f63dc55032289a2474179a660928703d232a64718a50def38b", 0x1000}, {&(0x7f0000005200)="c84e5bf2beecea3f097a78bdfd76b455098a6c166b544233b3fe0d7f400436c62857fac05c743eb8cac1b80c72b21a6d05add67e19c32ca8d0c0ff4655211e9f", 0x40}], 0x5}}, {{&(0x7f0000005280)=@nl=@unspec, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005300)="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", 0x1000}, {&(0x7f0000006300)="6ea6b8f8f7c681dd41f587fdb1ee07755a1100aefd7a7ee23b6d66ec1e79c932a129c2e10ef05b26c6bd1f0094c4d4d40163d853a65436b7248b36cdde92e89bc685f6c8d2a64918e8929b1f1a0004ce107a99eb13788931b8db6412bd5a63fee9f7eb4db36f5df0e94669bf196767bb78aceb489c99d1c3762285f6f7e97ec0f3e10e2e32e37078e19008ebad54b18cb1ad2a30b36e67fcfedb055a43c4d29fc53fc0103ff7d6bfaca80f95664951ee7879c2ba24164b5231a16d4d9375f29e034b2d112dd59c8e29769978", 0xcc}, {&(0x7f0000006400)}, {&(0x7f0000006440)="b1f93905396915a0fe4c479405d86186459e0cae4f712f556448093f3907c8aa52391832e7032c1b297c258133db2b1accef08f0601757a0730740cad713bca65c641f8bde990caef0364458a52f1e3921e2200dcfa2e0c218ddb82290922cbe092a54fabe4540514acb8eefc562c19902a96a00eff49f75634268603eeac5d92bf046ee15890d0a11212e20dca5c035707e819a0e7f27", 0x97}, {&(0x7f0000006500)="57ed7a3958a9da3556b27535e3cf2a3dcc8825b499c41c96a082f163b05d1e5688775db90dc7933f06e5f602de59b0bd5f98bfb4c2b651acdcdd9b31083f7aad0b376011361207b4138f2e5ec7bce154acb81ba4a5b056b9d1fb882da90bdf5920f159de1bfd261d79a729d0a5acbdbd5101ac2782bca760cc620fb9276d379b1be2f2bcd01bd9c0cff5f65816047215", 0x90}], 0x5, &(0x7f0000006600)=[{0x100c, 0xf, 0x4, "85917db96d8f48c4bbe586a3b6e68edddc465fce49d0cc846d1d8b3d3909f4244c36546e5867d2c9bcd53a74164bb1f58f5603b5535e2243c7fcb3db155380f812243dd7505b12d7abe093f4679449f8ce2dad907dd223b7c7cb567e9508c30f369636b7c1e46ef9ff7d49ec8d97970920201c621a8be925b2d93bf203cfbf02a05d26177218c3ead73a16eee62afce87112243e049066e54ffedf957978cbbd6367d02f5ca16425650f530d6d5137076e3649082260ba24707f17a5307bfabb1373945091f9f353a3bfff502f01d6439eb14cbf2a2b5801e9200b61ad986a12038e5ed4acec5bce335f0e942cc77b5fee81b7fb902b19b7a5b4a200269ad85f084c252a7ce6da1129f8b674b3544034472495c9e77fbd1e614a0efd3c2e1242de5760f6804209d2bed6332c3b8550882a2497dab4f77381182d0590d85e54f12f961fad078c76552bcb28ce059179022bed5057a33f630337c23734676ed413cfe1e954ece2f1af9661d7046fcb4d1bb565b470d8a3047cc8a15e0c046a4fb999b34cdb6b45dfe4e4f7198d3dce5dafc7031fbf1a1b83c3dacbd98b5129935d275bd8fd6af5d754fbd90ceaa79aa7ec9a092705a0da22ff33e536fe86fea92582a78ff3e357b66d99a663e6d06e4883e0c70c596d28997644066f5c6e858a4ea058be145369323ef7ecfe64116bf803d1b850142659c9396a65674e0fdad2b2bfffb8ca03453fa8e6047c5fe17a46907bacf2d58035b8d69a56a1c1530d75318d264092f005f8654732efbbbafa8014ef05d91d9ee00f6ce278fea063d7a1327ae6f4b2b474c7687771440902ee16b29edf504b63036a1dd9fe122f7cc4e6fe94a9a7bde7ec041fe8be65ee1bf54cb1592fb03324b9665fcd219f110e64ef995109d30dd7ab6dc15203167457b660df109c699f398e88a7e098d32ee0bdc770d304da6f1b2cf22ea46ebf40209b22618ad5eb56d08eac9e205158a1f26baadd82d1c0e9ea0fd3227d7dd1c3951d07ca459e09aa7fcc7d6846d59967b68f70e9e007df7e71301371b05af556866b6dfb60c596c3a4b94f823cd68278dddd295c6aa2e7acb58b7e2f48be72d59f46e140e90907da2abd69b028fda9addadc365a030ffd84cf74895b9599a7d0c32a5014e3d9e56abe4806e28553949c54240c84a24dda8509faaf42cbf00d2b68df3790b432e285dece2b6d1d1a716aa4db4e1fffc40acc323d1593159073c684bcf92d2329738e3ca50a6669f7bba21c2d382a08ba2530752e8c2435004eda975eec1abde9e487044b2c86ee5793eed3aca88f752f4a712cafe3b4720967d8c059bff25e245c7eaf7f302af1dca227aef4aef243742ad838c23d4200f756c86c3f865f423741998cee8b9cc4db89d62ee5d7a17d917974ef5eb061606062d635143f38ecffc7f99af4f4ed3d8ae647801ac8945739c301b87b0e4a5b49c02a1384c9c36592a78887d88ab2147ebcf8d3496b63e878fdeb31e02a03568ce4791c2360172210696bac68eacd6105f616564e78f16ca2ee39d3f087fdcf83b7a6084c28de3cf36200ded33319a8333e1c053b92f68f6cfde5cb1d7612719a7953e5eb6cc9ccf29a8b02ea14afeab752c7d3f9ee865363bb6393350a529959b2759c9d412730e2d7c311849a6f9d34a1b2b239916701b29b99fbccb4a4f7336195dcea5f476fc67bad7496ccbdb28538e39da758549c05e2446bb49e18e957cabd1cfaa50821f3a74e929f210a649f09642c5cd8d86916451944fab0dd9fda50e18d8fc4e83ee731b202770691f9338f4293fc84133cc76ee2268c23985bfdcb06e2a27b536a428f938f651a2e9cb4eab395bd624b94257b92975bfa082fe5425116db13b101f1227cb7ae4971d8f0f39a098c0c401e018fda9cbfda9b28575c7c81c34ad9b6036593f22372c4d452fb948331a99380249f178b5d027cd71a08de62e67c7b00974627a335ce9f0f1a4754301b456fd9c97669ff8b45aa49918816f1230ed16039cd7aab99188fa52df5069aa821e4750b67e1bdc0c76560aa600991e9c9459ae3387a682739d2bf699e05712a095e0b7a92adeb8929e24d254bbd9f96d47b7d0f941ee9751a080fa4f9e7eb5425aec246241c7d1fc4570bb27aa1c3197696c14e9d496571809f3433c8248d351f3a1788585d62e62b799a600c509c53efe23799461e6156b61474fe247afa9194bec7941bc855cda71b26f37d57f31c1ca583d6bf088022f7bee3b9bc7137ee7d90437b6611db6810a9d13bc629ae48c5f940e6fb29cf90ad18250e9edd974a58a11379041e0f006dce0d957c0e194cf40e2628ac27ef160f16fa9413dc27ce4a64f4fd827808cd38252bf493637790326880423523d2ea59a7b03fa8de646a147a744e72a16a3397e8125dd3fe53c3875dd7d70c46b4f1da6f989ec6654423e058b297c90397de39aa6c38bd83f0ddf3d551a5059598ff39139a9fec1eb78e1c28df39722754f4c8b461c21a95842c7b5590990a35a1188e618bac642dda548078485ce899161a1677d295c9a40eec7d8f009335ccf32fa3defed344a9f7f5a88be719deb1d2006f9f6b3fbc4174a099b6b16ee3ae6776d80cbb2f58aab3cbf486bcc8ef030330009798339a4900fcd6bb77742e6889e1fa0adc607e5a26335b02c0afc822b6f2290915f0158180129ec2e4a30c94832a2f0a83f84912cc7c988934a2ba4482ea1e3ffc3de62ab73b7f4c55167a3a27513f11151e8e9cf084d1516a101dd1e3ac8581fe0cbc2aa2af43ca7dd9e265c5ddf76c3a0ef1562ffd56078277ee97a3b76db18aa17d294cc09fe0f0f9bf6d38667d49c5b48ded9f364dcd9fc80e0421dea982a523b6de42c5607d62adb31ec16c836de157c9b53ea510f160f87bc7f6697dee0bebb5f616a39a1b5c80d650c04fecd5e0709b3acf184b8809934121561d12f0034a90e43fcc70259a7b38c827ed087e446426a7959a4f5cfcd68b60cd2bcde3bf35d01bc32a61b5d45912557583cf35ca6058277f1f36ee43d0d2914eb55a946be9b01aae1515939b07cd2a786c079e073a6a101215d06556ff6b61622b4555fd004f3c2ee9221b5ff3ab3b6779a802f8b9ae1d1934cbc2c7bb2855a338fb104ddc483de4b57d1137653aec6291c4aa909dea5374fb50564482f8f16633ab0402b71d0ba2240b7d302f9edeaeb3cd67469e7ea5f7962593de7271c73b718ba93d5818057ed29ecd0fd4ebe0ee7a8559c24d011a48573fd4ccd44f1e51595496cab5551c79c503e7c86c3e2fb9d0d8168dd151fa19f6fc4cb225846e2efafa590e9ef38b17c3ed9c2d0e28d9208f30ac90f06847725cf5505f0da38cbcefa16a405ffaaad411efdff6060c2d785c8c598f2462ab7044a2aa12bcf3286f8bfba2cb93056613fcaf3682799cc6c0f2935967af92a80f56a1fdac7ab89f2ae70c73ddc37bdfb0accb82d339aed3d83a38008555ab0308226fdee34ff7ae6c671140369203af19eff04337f624b1379d42d870cb366e7040b73dc00087f0df8b9ada9ba51e6a6513be34f950177b1b953d2efc4bcae9883bad401fea7320c9cdf2caa52cc835e077e27aaa59ad99197a83a1c8ccf508894f2308de2ca5cf8d74fc84667e77a4ca8c21bdaeae3a14fb48c68fa4bc0b8519cfcd855fb704e2e6268263b80afb9dbbb8d7ec457292bdd4ac43bf0e9b8b92c264908d643c134ab8ca12d6cf47ceab0dd2da57fd122b65f93f5d82c109153950e40250d871ce0296f64b9845451a794f0a60fe2be90cb3775c61dc1266cdd47e5f85b8cac39af2e3d2e397a3f893d274807c3c79e542e08d336651d8036a11790008c7585f9a7cffa61df73656716f2e6ad84338f5a46c323c9ddba18eb982cf4fde34130a8773679231adc121e5e58486d353458d2b005de72aa11405b5307f3678153465b279a760ea3b2f4b88f8d2aa560c34ca26da9a71cfea835349e16aac3aaa36d2af50d1148ad07d100adabe06605b6e18190760511e8d2150d2ec9f1ae3653fa69fa047a74dc847c1c8aeaa254cfdb5fd96b395b48ec80136b0f234e04bb65fb739ce2e6056811726a009646132a062501c02c53d24d423d16217024da6a62b4c317dbe4ed6283717268efe53cccbbd16a187d36f0dd86a973f336f4b561324af573bae72b56f7a06f2e5986cfbb2c6f29cbb82147f74880c40052f69d0db491d72fecf2e9da7b0d2ae3e2369e0ffce658c12d88bffac1b9901e1b4d014eaff2b1e14f82dde686ea7f4cd7f7e8660adb0d04866fbeb995c54c9f53c258380cdfe2d55e8695a076490e566dd4ab94c4ee3388ab3df617091da4f901b4188395b2b799242acb2067d860263d15bf071a15b84e6ed14ecfb9bb47f7b1a7544205cf508f993fa2cb93340ba38ff5d4fddb65622bb3585d5491411ab51e957666ce8281e5f80887e33f5ca6c906a175bf5100c515348b2011e4e0d2f2a58886910cd0720a976c1c28b539b762ca3240a545565612cc585dd7ae5439d405eccd92b82c2f987ae56d2c5e36535fbec47389b85b76d2ce8f231c40b0699b44928f960efda3d558694ea4fbb57b74dd809c0ceee74826c3e2db05fb0c50cfe2326bab8709d672209232445f1361250eb14cf40d30cdf9570590af1cf3c7b732c0436502348a3b41b49928e91f0273e76b861fd650fdeba894eba320bcfa25e67e51212abe95f3730d0d698c602497dfaf385c12f0098abcfdf8753943709d1b2b08f047b28cfeb781fc1ae1d81990301edc989ad87f666e0bd9c41bfe9703a6f7872844268cfc91b20c005959c097efb40649a360e03b9d0507302863eacd73da4c292c8bf5d2367d2827f2f58e7ed30b9e4d828e60f80fb954fe4dc25871646878a4afaf406a9d3124e243cadf24766aac98e2918758f3c3c1fd4fc935769db38fe9853bf859b8d3e7349eaac10fe157bc95bb00bdc0293aa690e211d6eba9a7eb0ec1b1ff141ba1455e877d7540a52f0f177ce11253b9116fb8edc3169829c4227f4f02b478d0826c884f7c12114df28b7fd43c00425c89abd1b9ad1f556a74693ab1ad80eaee826f56b05ba0ec5c847e5e07738fc37c3307cf231c7e3fd4e0fdd85ec4d1491d8ad48f6fb8904894f39113db44c7035e763b81e02e677d528856e9687dbdddecf3ac500d1a4504d8428c4c1677bf382a87d9151dfe42d24bf847ac0c6afa146658356f08989a17e322d1663ee4ca54a3754ce1e33aed3016375d941ce31e0a37b274e8224965e8674966440a01daf3c2ea95c6236e8fedb9fcc16b1b74777f617bb6f149e6824c281372d0ea5a412cd4d8f5cc25619d669867f8c9663d0b553c45536bca9974912dea5d305527c4bb7c6988f3b2c1418b2d72c1c7339c899d39264dcdff3112c56cad5ddacab5d572f7f39ead48b90766b3cd988a6d780158abab3ea7872521fcd606815811f9c444cdb9986a63111b931eb83ff557edf5a055ae7756e284418cf121d4fb091cbe384eae39f173277fc318d868a348558008b7e79f2490e2924ed8d8a82d4a66695662c8a6cd0d07303b733963b70abc6b323537f155754296127184545a9c05e5a7026ecd7eb27925a542ec131918bbd381e69f902eba0cdb1d5ef2cfe87c8c498c06017690d6c95d1cdfee71aa6a970e6cb5defaff1ff3f66fa1c03664dc0bb0148478abdf6534b3f626643c9f6cd02c779a0d00e8b1a3d0707226b57b57d7351b1e8133912e230ad909969efcefa58261fca14bdcbe91e5b7e5ca1bb458baf57d510b138d8734b7b088ec86d31"}], 0x100c}}, {{&(0x7f0000007640)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x0, 0x3, {0xa, 0x4e21, 0x8, @mcast2, 0x166c}}}, 0x80, &(0x7f0000007880)=[{&(0x7f00000076c0)="3419eb9a8ec471328d2471b09c70c4d0b2047f8772d5c2a16aaa1306e862562497aceb7e506c49525c7abf7bb43a7fdd6fd5d60241c4a60da5438199961b0907a3d638d5d4389ff5917e6c9b4927bc85c8d8092ab6945c131e2cbb68f4f89ba6097ceff6edd1b42166c1c98d403413c944eb999372a560f77736e3ed8ac2ecc27835333b6f9ae837f120436ad79e92f8c4a74c111fb32da2c39249c76f3af40f50cc8a99196618b967573cabe60305ba7a5914ac22d167ebcd", 0xb9}, {&(0x7f0000007780)="82c72ea7f5645907a111a749d42d2686fbe85143a10a4931bfd739b209aea37af1d2db04da9f1aecd16cd75b653b5c582fed528fa632f270003911c19b3ddf4eee46349f0c56128eca1737cffdd9643e11ac223f791c99efc027a630ddbeeabfc11a872fbc5b0ff97e4b497dffe74949f5a29ce01877f44c1c5cf01e27b82945f88c6a04393f230b74929fd8cb0e79014a86a4cc110a51036fdb1951457db2fa989e9e37c3b2662cf8e5abaf94643bfa6c3e57bcc54accacd198034a85c9520dc8ef25891269e65f57bd43003251", 0xce}], 0x2, &(0x7f00000078c0)=[{0x94, 0x105, 0xffffff00, "90a255b546b0ff7c8b178d17ef03d1f435152aa69a4c7ccb1fc2dc50362c785b98eaa45fe79724cba76aedbff8f03adce1756ac9f5023f2d259cddeb6a01917f2774175176b511cd4b94c77e5735514999ba4dc92c63f980202edaf37b6a0c8a8acec67581df64f4dc2540dffb31b54b0349638d25b9390db270ddf60f5846cb6cf9c583336d"}], 0x94}}], 0x9, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xd) 22:33:23 executing program 0: vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{0xffffffffffffffff}], 0x1, 0x9) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = geteuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) lchown(&(0x7f00000000c0)='./file0\x00', r1, r3) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r5, 0x0) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000000)={0x21, 0x3}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000006740"], 0x0, 0x0, 0x0}) 22:33:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x0, 0x0) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x192, 0x100) read(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000580), 0x214) r3 = dup3(0xffffffffffffffff, r0, 0x80000) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000380)=@nl=@unspec, 0x80, 0x0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000400)="fba2135547197889f3c0519eaf7c6db0cc71bf50a153aee03b8c924e107389c9d5b2bccd45f718a82d", 0xf3463305) openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/fuse\x00', 0x2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000340)=@known='security.apparmor\x00') ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000700)={0x7fff, 0x7}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="e5fa1503fb9e4f93adca40a36114ed000508ab931c"], 0x15, 0x1) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x2}, 0x2}, 0x1c) connect$inet6(r6, 0x0, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x5) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) read(r2, &(0x7f00000007c0)=""/250, 0xffffffffffffffe7) r8 = socket$netlink(0x10, 0x3, 0x6) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000440)=0x6) splice(r7, &(0x7f0000000080), r8, &(0x7f0000000140), 0x6, 0x4) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) fchown(r7, r10, r11) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x1, 0x7}, {0x66}], r10}, 0x18, 0x3) syz_open_dev$loop(0x0, 0x0, 0x0) 22:33:24 executing program 3: socket$inet(0x10, 0x3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0x7d5e0000, 0x0, 0x0, 0x20000005}) r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) bind$netlink(r1, 0x0, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) creat(&(0x7f0000000300)='./bus\x00', 0x1c4) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r1, &(0x7f0000000080)=0x80, 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r5 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r5, r4, 0x0, 0x2000005) read(r5, &(0x7f00000005c0)=""/193, 0xc1) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x100000000000000, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) sendfile(r7, r8, &(0x7f0000000180), 0x8000fffffffe) getsockopt$sock_buf(r9, 0x1, 0x10000000000001e, &(0x7f0000000380)=""/87, &(0x7f00000006c0)=0x9) mkdirat(0xffffffffffffffff, 0x0, 0x180) syz_open_procfs(0x0, 0x0) 22:33:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:24 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x802) write$binfmt_script(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c65300a2490eb7946c6dc08cb757347a4ebf52dddc47b4969c2dfb993300525cff83cc7e98498c5d86bb7bba23bf47cc80dfe1b"], 0x2c) readv(r4, &(0x7f0000000540)=[{&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000080)=""/69, 0x45}], 0x2) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "3a9dfc784ba5b015", "590fb4fbaf75343a0d9881470b535ef4", "94ba4ed3", "f42f17a1e9e68dc4"}, 0x28) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[]}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r6, 0x0) write$P9_RRENAME(r6, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) fchdir(r1) creat(&(0x7f00000001c0)='./bus\x00', 0x4) r7 = creat(&(0x7f0000000740)='./bus\x00', 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@local, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000580)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @empty}, &(0x7f00000005c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000640)={@empty, 0xf, r9}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r7, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() fsync(r7) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x0, 0xfffffffffffffc00, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x6, 0x0]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x0, 0x0, 0x0, 0x8}}}}) socket$key(0xf, 0x3, 0x2) clock_getres(0x2, &(0x7f0000000340)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000300)=0x101) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x1) 22:33:24 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_procfs(0x0, 0x0) readv(r3, &(0x7f00000000c0), 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={@dev, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1, 0x2b00084}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$KDADDIO(r4, 0x4b34, 0x4) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$tun(r5, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0x102) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x4001) io_setup(0x1001, &(0x7f0000000140)=0x0) io_submit(r9, 0x400000000000002a, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r10 = ioctl$TUNGETDEVNETNS(r8, 0x54e3, 0x0) dup2(r7, r10) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) fcntl$setstatus(r6, 0x4, 0x8d264d94b88cc547) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r5, 0x0, 0x40051) 22:33:24 executing program 1: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm], 0x2) r3 = open(&(0x7f00000005c0)='./bus/file0\x00', 0x141042, 0x4) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000006c0)="bb120a7889345606d132dd8b80966668658b89fc789da6efcb35f7645b2382f095cc6de23040b0d6e7e51734f26e79b713fffbd9a5a451811fd887fa87d43fc4f89522452dab750a68fa0eae845eee67dff677febe8dfd2c78b81881f84126e811a716d686d837db06803f62ed6188589f113501cb0671d6742660e945c9115306ed4172fd631fa958005bb913e59fdc658ae5", 0x93, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="9240d8e6fda4dfc8e10df9a676b62e4e6a5d6f513c4339d802bb871659a76a245dc262ef68b1c91c191aeb60c44544074747cd945ee86b2824fecae843b4ebbb2bf2303b0c797414f928de2f484b0400000000000000a3c86bc20d9390729ced41e9d81eb8282c83bd5f1a0f4eb770261ec96b37568b6d3772699437c6225c22d5eaff13aa493b93155482853fe4866c5168e116c7d478f7fcef93242816223f51f9caefbc30f26c47ba52555f56e09e2fb4e5c255308d89ffe67a86dad6948837eaa2822bfc2b6cd2b9f57fed65066f11eb646176ef68f28c2cac4c3db8244b3887fd00"/240], 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f00000008c0)=""/260, 0x104) timer_create(0x4, &(0x7f0000000340)={0x0, 0x22, 0x2, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r6, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000440)) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) rename(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='./bus\x00') 22:33:24 executing program 5: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x20000, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x399) fstat(0xffffffffffffffff, &(0x7f00000006c0)) fchown(0xffffffffffffffff, r6, 0x0) ftruncate(r4, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) r9 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="90e73cedbe844bdda8570833395d493a1aac3238b7a34f24f9cd39785d5c237073dafde77ef5a1a9e66dc63ae928a4a42e9d88b131eb6d46353331c4f2861a245d33b4e74462", 0x46, r9) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef359867f4bcef53d3a47853e7af5d0328209ad73224000000000000000000000000000000000000000000850576cab6419dd44c143a56fdce000000000000"], 0x0, 0x0, 0x8000, 0x0) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_gettime(0x0, &(0x7f00000003c0)) sendfile(r1, r4, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r10, r11+10000000}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r8, 0x0) [ 493.216153] binder: 22239:22258 got transaction with invalid data ptr [ 493.223708] binder: 22239:22258 transaction failed 29201/-14, size 16384-0 line 3155 22:33:24 executing program 1: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm], 0x2) r3 = open(&(0x7f00000005c0)='./bus/file0\x00', 0x141042, 0x4) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000006c0)="bb120a7889345606d132dd8b80966668658b89fc789da6efcb35f7645b2382f095cc6de23040b0d6e7e51734f26e79b713fffbd9a5a451811fd887fa87d43fc4f89522452dab750a68fa0eae845eee67dff677febe8dfd2c78b81881f84126e811a716d686d837db06803f62ed6188589f113501cb0671d6742660e945c9115306ed4172fd631fa958005bb913e59fdc658ae5", 0x93, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="9240d8e6fda4dfc8e10df9a676b62e4e6a5d6f513c4339d802bb871659a76a245dc262ef68b1c91c191aeb60c44544074747cd945ee86b2824fecae843b4ebbb2bf2303b0c797414f928de2f484b0400000000000000a3c86bc20d9390729ced41e9d81eb8282c83bd5f1a0f4eb770261ec96b37568b6d3772699437c6225c22d5eaff13aa493b93155482853fe4866c5168e116c7d478f7fcef93242816223f51f9caefbc30f26c47ba52555f56e09e2fb4e5c255308d89ffe67a86dad6948837eaa2822bfc2b6cd2b9f57fed65066f11eb646176ef68f28c2cac4c3db8244b3887fd00"/240], 0x0, 0x0, 0x8000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f00000008c0)=""/260, 0x104) timer_create(0x4, &(0x7f0000000340)={0x0, 0x22, 0x2, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r6, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000440)) nanosleep(&(0x7f0000000100), &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) rename(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='./bus\x00') 22:33:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() dup(0xffffffffffffffff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000000)={0xe, 0x7, 0x2, 0x80, 0x2f, "289f692cecd2b80dd54128a379a57b3bec9c291b680b68e40b32bd1b7453bc4fc808de162fafbc0df5627c061c415e"}, 0x3b) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x0, 0x0, 0x0, 0x0, 0xed0}, 0xfffffffffffffdc5) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x19) fcntl$setstatus(r0, 0x4, 0x80000000002c00) 22:33:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x1}) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 493.919423] binder: undelivered TRANSACTION_ERROR: 29201 [ 494.091482] binder: 22290:22297 got transaction with invalid data ptr 22:33:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x1c4, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/20], 0x14}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406055c9, &(0x7f0000000100)={0x5, 0x14, {0xf9, 0x0, 0x8, {0xde}, {0x5, 0x102}, @period={0x58, 0x0, 0x73f3, 0x8, 0x4, {0x2e, 0x200, 0x8, 0x20}, 0x1, &(0x7f00000000c0)=[0x7]}}, {0x54, 0x7, 0x425, {0x4}, {0x7f, 0x8}, @ramp={0x2, 0x401, {0xfffe, 0x4374, 0x4, 0x7ff}}}}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 22:33:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) [ 494.139822] binder: 22290:22297 transaction failed 29201/-14, size 16384-0 line 3155 22:33:25 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x8}, 0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000340)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), 0x1, 0x0, 0x0, 0x80}, 0x0) lstat(&(0x7f00000001c0)='\x00', &(0x7f0000000500)) inotify_add_watch(r2, &(0x7f0000000580)='./bus\x00', 0x1) lseek(r1, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r3, r4, 0x0, 0x20020102000007) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/relabel\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1905) sendfile(r1, r2, &(0x7f0000000040), 0x8000fffffffe) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f0000000380)='/dev/snd/timer\x00', 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) 22:33:25 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x4000000000000002, 0xc) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354c007110000f30501000a000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000240)="1f0000000104fffffd3b543407110000f34401000b000400038cb188819f02", 0x1c3) pipe(&(0x7f0000000340)={0xffffffffffffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x23674b9ab0362b0f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000000)=0xffffffffffffff69) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r2, 0x29, 0x46, 0x0, &(0x7f0000000200)) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40246608, &(0x7f0000000480)={0x7, 0x1f16783b, 0x6ac0a6af, 0xdaf, 0xfffffffc, 0x40}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x9) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0x20) r4 = openat$cgroup_int(r3, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r4, &(0x7f0000000400)='security.SMACK64IPIN\x00', &(0x7f0000000440)='eth1\\\'}em0posix_acl_access\x00', 0x1b, 0x3) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(r5, 0x29, 0x46, 0x0, &(0x7f0000000200)) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x13}, 0x8}, 0x1c) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RRENAME(r1, &(0x7f0000000300)={0x7, 0x15, 0x1}, 0x7) gettid() pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, &(0x7f00000004c0)) write$P9_RRENAME(r6, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) [ 494.417863] binder: 22307:22316 got transaction with invalid data ptr [ 494.434191] binder: 22307:22316 transaction failed 29201/-14, size 16384-0 line 3155 22:33:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000500000000000000000000000000405069624cc2c836d0c8678b7f0e49a5d025f162f58030d92b392518aef2f11949413aebeeb9d069fc10ae16f55403538248c560de00f80c49de3d4167fbb925de598604fa86ea1f0e4cd0480fd0eed7550dae456aee8f9d9d62cbee57f3d10803e23d943dd8242e52f6b19973f6b8cf60f52f51c669c284c07f472172fd1bea6fdc1fa724d44940720fe0210ebacc6ba3da3f48f1f09897aa26"], 0x0, 0x0, 0x0}) [ 494.755980] binder: undelivered TRANSACTION_ERROR: 29201 [ 494.794374] binder: 22322:22323 transaction failed 29201/-22, size -3980535135084724224-5264285251161083958 line 3137 22:33:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 494.806879] binder: undelivered TRANSACTION_ERROR: 29201 22:33:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) time(&(0x7f0000000000)) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) ioctl$FICLONE(r1, 0x40049409, r3) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) ioctl$TIOCCBRK(r2, 0x5428) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 494.853809] binder: 22326:22327 got transaction to invalid handle [ 494.861069] binder: 22326:22327 transaction failed 29201/-22, size 723996680004780032--5061787818287492274 line 3014 [ 494.873793] binder: undelivered TRANSACTION_ERROR: 29201 22:33:26 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000001580)='/dev/input/mice\x00', 0x0, 0x105101) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fcntl$dupfd(r1, 0x0, r3) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) eventfd2(0x8, 0x80800) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r6, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r10, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) sendfile(r9, r10, 0x0, 0x49) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r13, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r13, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffda0) sendto$inet(r12, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfdc5) pipe(0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) setsockopt$sock_int(r13, 0x1, 0x8, &(0x7f0000000000), 0x4) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r14, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r15, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r15, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) write$binfmt_elf64(r13, &(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYRES64=r2], 0x10) shutdown(r13, 0x1) recvmsg(r13, &(0x7f00000000c0)={0x0, 0xffffffbe, &(0x7f00000015c0), 0x1ffffffffffffdbe, 0x0, 0xfffffe5a}, 0x100) write(r12, &(0x7f00000001c0), 0xfffffef3) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r16 = syz_open_procfs(0x0, 0x0) preadv(r16, 0x0, 0x0, 0x10400003) dup(0xffffffffffffffff) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r17, &(0x7f00000001c0), 0xfffffef3) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000040), 0x175, &(0x7f00000003c0)={&(0x7f0000001640)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x2000) ioctl$BLKFRASET(r17, 0x1264, &(0x7f0000001540)) read(r11, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) [ 495.108952] binder: undelivered TRANSACTION_ERROR: 29201 22:33:26 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/307) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='mem\x00\x01y7swaS.t\x00\xe3\xcb\xe5o\v\xa5\xdc\xc8\x1f\xfar\xce\xdc\nsn\xc6\xda!\xa8\x84\xefR\xffX\xfa\xea\n\xf2\xc5\x90\xe2{\xab\xa0\xbb\xfc#', 0x0, 0x0) getsockopt$inet_int(r4, 0x0, 0x865bddc8d2797227, &(0x7f00000003c0), &(0x7f0000001540)=0x4) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$VT_ACTIVATE(r1, 0x5606, 0x85) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001400)={@local, @initdev, 0x0}, &(0x7f0000001440)=0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r9, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) getsockopt$inet6_mreq(r9, 0x29, 0x15, &(0x7f0000001480)={@loopback, 0x0}, &(0x7f0000001580)=0x14) getpeername$packet(r5, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001740)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001780)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000001880)=0xe8) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r13, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r14 = dup3(0xffffffffffffffff, r13, 0x80000) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f0000000080), 0x4) r15 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r15, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r16}) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r17, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r18 = dup3(0xffffffffffffffff, r17, 0x80000) setsockopt$SO_TIMESTAMPING(r18, 0x1, 0x25, &(0x7f0000000080), 0x4) r19 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r18, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r19, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r20}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000018c0)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000019c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001c00)={@loopback, @rand_addr, 0x0}, &(0x7f0000001c40)=0xc) clock_gettime(0x0, &(0x7f0000006240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{&(0x7f0000001c80)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001d00)=""/58, 0x3a}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/148, 0x94}, {&(0x7f0000001e80)=""/55, 0x37}, {&(0x7f0000001ec0)=""/81, 0x51}, {&(0x7f0000001f40)=""/235, 0xeb}, {&(0x7f0000002040)=""/113, 0x71}, {&(0x7f00000020c0)=""/6, 0x6}, {&(0x7f0000002100)=""/36, 0x24}, {&(0x7f0000002140)=""/35, 0x23}], 0xa, &(0x7f0000002200)=""/55, 0x37}, 0x9}, {{&(0x7f0000002240)=@nfc_llcp, 0x80, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/27, 0x1b}, {&(0x7f0000002300)=""/36, 0x24}, {&(0x7f0000002340)=""/171, 0xab}, {&(0x7f0000002400)=""/123, 0x7b}], 0x4, &(0x7f00000024c0)=""/194, 0xc2}, 0x3}, {{&(0x7f00000025c0)=@x25, 0x80, &(0x7f0000003800)=[{&(0x7f0000002640)=""/57, 0x39}, {&(0x7f0000002680)=""/112, 0x70}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/233, 0xe9}], 0x4, &(0x7f0000003840)=""/114, 0x72}, 0x1000}, {{&(0x7f00000038c0)=@isdn, 0x80, &(0x7f0000004a40)=[{&(0x7f0000003940)=""/200, 0xc8}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x2}, 0x1}, {{&(0x7f0000004a80)=@ax25={{}, [@null, @netrom, @null, @default, @bcast, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004b00)=""/15, 0xf}, {&(0x7f0000004b40)=""/182, 0xb6}, {&(0x7f0000004c00)=""/222, 0xde}, {&(0x7f0000004d00)=""/29, 0x1d}, {&(0x7f0000004d40)=""/220, 0xdc}, {&(0x7f0000004e40)=""/22, 0x16}, {&(0x7f0000004e80)=""/137, 0x89}, {&(0x7f0000004f40)=""/4096, 0x1000}], 0x8, &(0x7f0000005f80)=""/35, 0x23}, 0x4}, {{&(0x7f0000005fc0)=@nfc, 0x80, &(0x7f0000006100)=[{&(0x7f0000006040)=""/90, 0x5a}, {&(0x7f00000060c0)=""/3, 0x3}], 0x2, &(0x7f0000006140)=""/43, 0x2b}, 0x8}], 0x6, 0x20, &(0x7f0000006280)={r23, r24+10000000}) getsockname$packet(r0, &(0x7f00000062c0)={0x11, 0x0, 0x0}, &(0x7f0000006300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006340)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000006440)=0xe8) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r28, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r29 = dup3(0xffffffffffffffff, r28, 0x80000) setsockopt$SO_TIMESTAMPING(r29, 0x1, 0x25, &(0x7f0000000080), 0x4) r30 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r29, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r30, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r31}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r32, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_mreq(r32, 0x29, 0x1c, &(0x7f0000006480)={@dev, 0x0}, &(0x7f00000064c0)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r34, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r34, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r34, 0x29, 0x23, &(0x7f0000006500)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000006600)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008980)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}}}, &(0x7f0000008a80)=0xe8) r37 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r37, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r38 = dup3(0xffffffffffffffff, r37, 0x80000) setsockopt$SO_TIMESTAMPING(r38, 0x1, 0x25, &(0x7f0000000080), 0x4) r39 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r38, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r39, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r40}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f00000090c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x71148900}, 0xc, &(0x7f0000009080)={&(0x7f0000008ac0)={0x5bc, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r8}, {0x104, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x1f1, 0xff, 0x1, 0x3}, {0x400, 0x6, 0x5, 0x4}, {0x5, 0x4a, 0x73, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x13c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffff001}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r26}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}]}}, {{0x8, 0x1, r31}, {0x150, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x1ff, 0x2f, 0x6, 0x4}, {0xcb8b, 0x1f, 0x6, 0x4}, {0x2, 0xd8, 0x2, 0xffffffff}, {0x5, 0x3f, 0x6, 0x5b4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r36}, {0xfc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r40}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x241}}, {0x8}}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x40000001}, 0x24000000) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000380)=@md5={0x1, "839f87f3687a18129e230941a26d2cd6"}, 0x11, 0x0) shutdown(r2, 0x1) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xfbc0}], 0x1, 0x0, 0xfffffffffffffe2f}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) dup(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000003c0)}, {0x0}, {&(0x7f00000014c0)="005843ef3fc692b1", 0x8}], 0x3) r41 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r42 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r42, r41, 0x0, 0x800000c4) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) 22:33:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000500)={0x40009, 0x3, 0x5}, 0xffffffffffffff4d) r1 = openat$keychord(0xffffffffffffff9c, 0x0, 0x28002, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0xffeffffffffffffa}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) r3 = socket$inet6(0xa, 0x2, 0xfc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c00001c585ff338f625ba62"], 0xc}, 0x0) setns(r1, 0x12000000) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0xfffffffffffffe2e) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000400)=0x37, 0x80) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x380000, @empty}, 0x1c) setsockopt$inet6_opts(r7, 0x29, 0x3b, &(0x7f0000000000)=@dstopts, 0x8) sendmsg(r7, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0xc}], 0xc}, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x475e, @dev={0xfe, 0x80, [], 0x8}, 0x4}, 0x1c) 22:33:26 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x20, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r2, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS2F(r3, 0x401845ef, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0xffffffffb0effc5f) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r6 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x0, 0x7f, 0x7, 0x0, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r6) write$P9_RSTATu(r6, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x0, 0x9, 0x7ff, {0x94bc, 0x2, 0x0, 0x1f}, 0x0, 0x0}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000200)=0x1000000, 0x4) [ 495.571381] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8224 sclass=netlink_xfrm_socket 22:33:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) 22:33:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='\b\x89\xf2%\xff\x01\x00\x00\xf2\x00', 0x0, 0xb118c4a386d4d681) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) setfsuid(0xee01) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r4, 0x104, 0x70bd26, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4040808) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8018}, 0x4000000) 22:33:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x400, 0x4) fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="0100000000dd", 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000580)=ANY=[], 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) syz_open_pts(r3, 0x0) r4 = socket(0x11, 0xa, 0x40) socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r8, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r9 = dup3(0xffffffffffffffff, r8, 0x80000) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080), 0x4) r10 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r11}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00', r11}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000140)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff}) read(r12, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9c0200002000020026bd7000fbdbdf252b000000ff010000000000000000000000000001e00000020000000000000000000000004e2200054e2000ff0000a0c000000000639a56707f35a05f796a35bc088ee180f841c8a2f6e60f947cbc0ed87a3d3ef0bf16774d64fcfa9376e2785e3aa190b2e7b2bfb11c1f971cae6fd97a8529f6736d2cf39f4542f2a897d4d678b6a667c4c70767e91354202bd845b60a1cc9ce4fd6c466187809f8938c", @ANYRES32=r7, @ANYRES32=r13, @ANYBLOB="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"], 0x29c}}, 0x9342b26be812e2c0) getgroups(0x3, &(0x7f0000000180)=[0xee01, 0xee01, 0x0]) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) write$P9_RSTATu(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="4c0000007d0200000037000000ab0e0000c603000000000000000002ff03000000005e12040000000000000004005c5e23400000000000000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15], 0x4c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r16, &(0x7f0000008600), 0x0, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, 0x0) ioctl$FICLONERANGE(r16, 0x4020940d, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000140)=0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@loopback, @in=@local, 0x4e24, 0x7, 0x4e20, 0xce8, 0xa, 0x120, 0x40, 0x0, r17}, {0x5, 0x3f, 0x6, 0x81, 0x9}, {0x2, 0x0, 0x8001, 0x7fff}, 0x68c6bbaa, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in6=@loopback, 0x3504, 0x4, 0x0, 0x1, 0x6, 0x0, 0x8c2}}, 0xe8) [ 495.873684] binder: 22378:22380 got transaction with invalid data ptr [ 495.893687] binder: 22378:22380 transaction failed 29201/-14, size 16384-0 line 3155 22:33:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x20000000805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) write$FUSE_OPEN(r1, &(0x7f0000000000)={0x20, 0x0, 0x7, {0x0, 0x1d}}, 0x20) [ 495.925372] binder: undelivered TRANSACTION_ERROR: 29201 [ 495.934751] binder: BINDER_SET_CONTEXT_MGR already set [ 495.951329] binder: 22378:22380 ioctl 40046207 0 returned -16 22:33:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0xa1c9fd6059f5c6cb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000100050000000000000000000000000040"], 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0x2b, @multicast2, 0x4e24, 0x0, 'sed\x00', 0x1d, 0x66, 0x3b}, {@multicast1, 0x4e22, 0x0, 0x8, 0x1f, 0x1}}, 0x44) 22:33:27 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000380)='\x00\a\x00\x00\x00\x00\x00\x00\x00G\xe3U:Q<\x16%\x98\xff\xf2\xda\xeb\x88i\x16\x02\xb5\x83\x19\xf3w\x18\xc7\x96\x05\x00y\x93\xd3W\xc4-l\xcf\xa5\xed\xc8RF\xf2.Ihm\xe2\x86\xd2\xf1\xd6\xb6\xff<\xa4}\xcb\x99\x9fq\x1dF\xe0\x05Y\xfex\x0f\x17\xf7s\xd51\xdf\xeb\x87tT&|i\xc9\xa8\x95\\\xf2\xb5\ay\xc8\xc8R\x92\xf1#\x9bsm\xf6F\x83\xd7\x13L\x94\xf8}\xc7m>\xe4]\xde\xfa=d\xc5\xf7\x115\xd7\xf3\xbc\x0f\xe3V\x9d\xf8\x8b|1\r\xd4X\xae\\\xd5\x9a4J\n\xac\xd1\x9f\a\xa0\xf6\x97zr\x0f\x04\x00\x00\x00\x1f\xe0\f,\x9e\x13\xdf\xf4\xc3)mzB\xe0Y\xc3n|M\xc5\xf7\xd0\x94\xfb\x19\x9b\xefS\xf8zi0\xb5v\xde\xed\xccl\xe9\x0e-\xef\x9dN&%\x80A\xacn\x8c~7\x18\x94\x94\xd9\x8f\xd1\xe13\xd9\xa6\xb3\xa7\xf3\xcf\xb3,\x9b\xd8x\x94\xb7\x8f\xcf?\xda\v\xe7\xd2!\x8c\xa8\xe3F\x81\xee\x1c\x1c\xa7\xbcnU!R\xbc\x9fJ\xc1Z\xeeu\'\x7f\xc1\x1c\xcb\x04\xf34F[\xf7\xc8VK\xad\x90\x00'/307) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='mem\x00\x01y7swaS.t\x00\xe3\xcb\xe5o\v\xa5\xdc\xc8\x1f\xfar\xce\xdc\nsn\xc6\xda!\xa8\x84\xefR\xffX\xfa\xea\n\xf2\xc5\x90\xe2{\xab\xa0\xbb\xfc#', 0x0, 0x0) getsockopt$inet_int(r4, 0x0, 0x865bddc8d2797227, &(0x7f00000003c0), &(0x7f0000001540)=0x4) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000140)=0x8) ioctl$VT_ACTIVATE(r1, 0x5606, 0x85) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001600)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001400)={@local, @initdev, 0x0}, &(0x7f0000001440)=0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r9, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) getsockopt$inet6_mreq(r9, 0x29, 0x15, &(0x7f0000001480)={@loopback, 0x0}, &(0x7f0000001580)=0x14) getpeername$packet(r5, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001740)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001780)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000001880)=0xe8) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r13, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r14 = dup3(0xffffffffffffffff, r13, 0x80000) setsockopt$SO_TIMESTAMPING(r14, 0x1, 0x25, &(0x7f0000000080), 0x4) r15 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r14, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r15, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r16}) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r17, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r18 = dup3(0xffffffffffffffff, r17, 0x80000) setsockopt$SO_TIMESTAMPING(r18, 0x1, 0x25, &(0x7f0000000080), 0x4) r19 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r18, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r19, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r20}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000018c0)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f00000019c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001c00)={@loopback, @rand_addr, 0x0}, &(0x7f0000001c40)=0xc) clock_gettime(0x0, &(0x7f0000006240)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{&(0x7f0000001c80)=@can={0x1d, 0x0}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001d00)=""/58, 0x3a}, {&(0x7f0000001d40)=""/69, 0x45}, {&(0x7f0000001dc0)=""/148, 0x94}, {&(0x7f0000001e80)=""/55, 0x37}, {&(0x7f0000001ec0)=""/81, 0x51}, {&(0x7f0000001f40)=""/235, 0xeb}, {&(0x7f0000002040)=""/113, 0x71}, {&(0x7f00000020c0)=""/6, 0x6}, {&(0x7f0000002100)=""/36, 0x24}, {&(0x7f0000002140)=""/35, 0x23}], 0xa, &(0x7f0000002200)=""/55, 0x37}, 0x9}, {{&(0x7f0000002240)=@nfc_llcp, 0x80, &(0x7f0000002480)=[{&(0x7f00000022c0)=""/27, 0x1b}, {&(0x7f0000002300)=""/36, 0x24}, {&(0x7f0000002340)=""/171, 0xab}, {&(0x7f0000002400)=""/123, 0x7b}], 0x4, &(0x7f00000024c0)=""/194, 0xc2}, 0x3}, {{&(0x7f00000025c0)=@x25, 0x80, &(0x7f0000003800)=[{&(0x7f0000002640)=""/57, 0x39}, {&(0x7f0000002680)=""/112, 0x70}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/233, 0xe9}], 0x4, &(0x7f0000003840)=""/114, 0x72}, 0x1000}, {{&(0x7f00000038c0)=@isdn, 0x80, &(0x7f0000004a40)=[{&(0x7f0000003940)=""/200, 0xc8}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x2}, 0x1}, {{&(0x7f0000004a80)=@ax25={{}, [@null, @netrom, @null, @default, @bcast, @netrom, @netrom, @bcast]}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004b00)=""/15, 0xf}, {&(0x7f0000004b40)=""/182, 0xb6}, {&(0x7f0000004c00)=""/222, 0xde}, {&(0x7f0000004d00)=""/29, 0x1d}, {&(0x7f0000004d40)=""/220, 0xdc}, {&(0x7f0000004e40)=""/22, 0x16}, {&(0x7f0000004e80)=""/137, 0x89}, {&(0x7f0000004f40)=""/4096, 0x1000}], 0x8, &(0x7f0000005f80)=""/35, 0x23}, 0x4}, {{&(0x7f0000005fc0)=@nfc, 0x80, &(0x7f0000006100)=[{&(0x7f0000006040)=""/90, 0x5a}, {&(0x7f00000060c0)=""/3, 0x3}], 0x2, &(0x7f0000006140)=""/43, 0x2b}, 0x8}], 0x6, 0x20, &(0x7f0000006280)={r23, r24+10000000}) getsockname$packet(r0, &(0x7f00000062c0)={0x11, 0x0, 0x0}, &(0x7f0000006300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006340)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000006440)=0xe8) r28 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r28, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r29 = dup3(0xffffffffffffffff, r28, 0x80000) setsockopt$SO_TIMESTAMPING(r29, 0x1, 0x25, &(0x7f0000000080), 0x4) r30 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r29, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r30, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r31}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r32, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet6_mreq(r32, 0x29, 0x1c, &(0x7f0000006480)={@dev, 0x0}, &(0x7f00000064c0)=0x14) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r34, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r34, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r34, 0x29, 0x23, &(0x7f0000006500)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000006600)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008980)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}}}, &(0x7f0000008a80)=0xe8) r37 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r37, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r38 = dup3(0xffffffffffffffff, r37, 0x80000) setsockopt$SO_TIMESTAMPING(r38, 0x1, 0x25, &(0x7f0000000080), 0x4) r39 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r38, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r39, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r40}) sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f00000090c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x71148900}, 0xc, &(0x7f0000009080)={&(0x7f0000008ac0)={0x5bc, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r8}, {0x104, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x1f1, 0xff, 0x1, 0x3}, {0x400, 0x6, 0x5, 0x4}, {0x5, 0x4a, 0x73, 0x2}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r16}, {0x13c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xfffff001}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r22}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r26}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r27}}}]}}, {{0x8, 0x1, r31}, {0x150, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x1ff, 0x2f, 0x6, 0x4}, {0xcb8b, 0x1f, 0x6, 0x4}, {0x2, 0xd8, 0x2, 0xffffffff}, {0x5, 0x3f, 0x6, 0x5b4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r33}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r35}}}]}}, {{0x8, 0x1, r36}, {0xfc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r40}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x241}}, {0x8}}}]}}]}, 0x5bc}, 0x1, 0x0, 0x0, 0x40000001}, 0x24000000) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000380)=@md5={0x1, "839f87f3687a18129e230941a26d2cd6"}, 0x11, 0x0) shutdown(r2, 0x1) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xfbc0}], 0x1, 0x0, 0xfffffffffffffe2f}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) dup(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f00000003c0)}, {0x0}, {&(0x7f00000014c0)="005843ef3fc692b1", 0x8}], 0x3) r41 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r42 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r42, r41, 0x0, 0x800000c4) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) [ 496.043793] input: syz1 as /devices/virtual/input/input60 22:33:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r3, 0x0, 0x20020102000007) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0xc0000000}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:27 executing program 3: r0 = socket(0x18, 0x0, 0x3) connect(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x12) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='3selinux/\x06\b\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='bond_slave_0\x00', 0x5, 0x8, 0x7fffffff}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000740)=ANY=[@ANYBLOB]) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r3 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4b2c0063105bd32f) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x341044, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getpeername$netlink(r4, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000004c0), 0x4) creat(0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r7, 0x0) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x1) ftruncate(r5, 0x280080) sendfile(r3, r5, &(0x7f0000d83ff8), 0x2008000fffffffe) [ 496.506183] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8224 sclass=netlink_xfrm_socket 22:33:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) 22:33:27 executing program 4: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xbab230cf) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = gettid() rt_tgsigqueueinfo(0x0, r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x4000) getuid() openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000480)='\x00\x00\x00\x00\x03h\x00', 0x0, 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'nr0\x02\x00\x00\x00\x00\x00@\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 22:33:28 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xfe43) r1 = socket$unix(0x1, 0x10004000000002, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x548, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r1, 0xc1211000) recvmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0xfffffffffffffe22, 0x0}}], 0x1ece87a4671555d, 0x42, 0x0) [ 496.966251] binder: BINDER_SET_CONTEXT_MGR already set [ 496.972323] binder: 22412:22420 ioctl 40046207 0 returned -16 22:33:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYPTR, @ANYPTR64, @ANYPTR, @ANYRESOCT=r2, @ANYRES64=r1, @ANYRES64=r0], @ANYRES32, @ANYBLOB="7a8ed77c461cbfcbe1c457dcdfd0039315401e8c649928056701f77fa5751b0648d7335a1eb09cf86af7bbbee8010e69c524ba60ddd28f8884c4a5c42a3005952c7136826eff3b42b31d9475bfaf8c3860f9f837446ae3c1d33c9f0513fcec52d38b3bf16ba9de5439fd8f2f2a4c641d98f2600ef4056321f255c4c729af85069c29bb", @ANYBLOB="8205e71466c29ae3eb03f59cc551eacf7a31bd57412499a6f81dd1fb03a637321fe0f77530ddb7ed72e5181d85fe3b03688644ff64b85f8c8130ae37f6d0466bb7bc7370021c1b8b985533add136afc12d40b6157df436e53dcc8dfaef33007c867f7005b696"]], 0x0, 0x0, 0x0}) 22:33:28 executing program 5: socket$inet(0x2, 0x1, 0x84) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @loopback}, 0x20, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='bond_slave_0\x00', 0x5, 0x8, 0x7fffffff}) r2 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) setgid(r2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x10000, @remote}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') sendfile(r0, r3, 0x0, 0x88001) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) getsockopt(r0, 0x80000001, 0x0, 0x0, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_timeval(r4, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) listen(r4, 0x80) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r6, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r6, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r8 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:33:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001c40)=[@ip_retopts={{0xc}}], 0xc}}], 0x2, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) sendmmsg$inet(r2, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001c40)=ANY=[]}}], 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000300)=0x7fffffff, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(r4) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)=0x3, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) signalfd4(r3, &(0x7f0000000180)={0xffffffffffff7fff}, 0x8, 0x800) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_UIE_OFF(r6, 0x7004) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) vmsplice(r9, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) fchdir(r8) [ 497.255128] binder: 22446:22455 unknown command 536871360 [ 497.285916] binder: 22446:22455 ioctl c0306201 20000600 returned -22 22:33:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x2ab, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x400, 0x4) fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="0100000000dd", 0x6) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000580)=ANY=[], 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) syz_open_pts(r3, 0x0) r4 = socket(0x11, 0xa, 0x40) socketpair(0x9, 0x6, 0xff, &(0x7f0000000100)={0xffffffffffffffff}) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r6, r6, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x50, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r8, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r9 = dup3(0xffffffffffffffff, r8, 0x80000) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080), 0x4) r10 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r11}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00', r11}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000140)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff}) read(r12, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9c0200002000020026bd7000fbdbdf252b000000ff010000000000000000000000000001e00000020000000000000000000000004e2200054e2000ff0000a0c000000000639a56707f35a05f796a35bc088ee180f841c8a2f6e60f947cbc0ed87a3d3ef0bf16774d64fcfa9376e2785e3aa190b2e7b2bfb11c1f971cae6fd97a8529f6736d2cf39f4542f2a897d4d678b6a667c4c70767e91354202bd845b60a1cc9ce4fd6c466187809f8938c", @ANYRES32=r7, @ANYRES32=r13, @ANYBLOB="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"], 0x29c}}, 0x9342b26be812e2c0) getgroups(0x3, &(0x7f0000000180)=[0xee01, 0xee01, 0x0]) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) write$P9_RSTATu(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="4c0000007d0200000037000000ab0e0000c603000000000000000002ff03000000005e12040000000000000004005c5e23400000000000000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15], 0x4c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) sendmmsg(r16, &(0x7f0000008600), 0x0, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, 0x0) ioctl$FICLONERANGE(r16, 0x4020940d, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000140)=0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a80)={{{@in=@loopback, @in=@local, 0x4e24, 0x7, 0x4e20, 0xce8, 0xa, 0x120, 0x40, 0x0, r17}, {0x5, 0x3f, 0x6, 0x81, 0x9}, {0x2, 0x0, 0x8001, 0x7fff}, 0x68c6bbaa, 0x0, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in6=@loopback, 0x3504, 0x4, 0x0, 0x1, 0x6, 0x0, 0x8c2}}, 0xe8) 22:33:28 executing program 3: socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x7ff}) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) memfd_create(0x0, 0x1) memfd_create(0x0, 0x0) getresuid(0x0, &(0x7f0000000180), &(0x7f0000000440)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000940)={{{@in, @in6=@remote}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000006c0)=0xda) connect(r0, 0x0, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='.\x00', 0xfe) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, &(0x7f00000004c0)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmmsg(r5, &(0x7f0000000300)=[{{&(0x7f0000000380)=@l2={0x1f, 0x5e4, {0x5, 0x5, 0x1, 0x1, 0x9, 0x2}, 0xffff, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000b80)="38779abe18ad601a0d1a2e2bb4eab30248144f25fb87227c9c33d9f4cc11a29e9ec2269556e974805068a8b2794b3e931f42b7c711872fb39e68639215c48d6be21e0aed8f1401ece02f6afa6370fa1ed4221c3a272ea4bb1e8a137177e4685328570a12dd3a0f96a8c94faa487069e44964d0d342cc10b4ad3b144177866b2c4069d3f4a29764d1c538f8e38fc5c5d5bd675463d35c126c5d9be7b1e63f43fde9d77a10967662cebcc7b05a603bb57e964ea9a00dc72d21c2b00c692bc2758a1075a58ae9231eafb883aabbd636373170f5044026714757e55dd3c836c1c240c5eef7bc8f4c3d6f21c0f036a76a5a1e8ff0bba3f96ed18c1bddbcd74b6f90ed936db8a4b299e029835269e022e81265736c9ff798123b5e86823befe2e5c689400b18a7d5dbe25b600e43fbd15921b746644ebf62fc0cc0255791c5cc44b0af7490f5da68bcb0bee03c91cc2a97dd9ef92c40143764ae2750810c485a645c1caae7263d7ad08871d106fa001636dd7e5aef50cb4162289a63a9a1924a6586b3d9b6dd4549ec50ec4e3865ebc5861fe78b8f860e298c0415b8d6db0e93223763f0f801faf067688096d5c5c5cbe0b035ba1a006a7c54ac0793e92d23a391569bedbbbedf54678ea46f02c2b76581ba2491185475307ba5785689f6f66fd79940c9372b6260a96f763930452b97a7a4de15b63cd749fc9a72d87506030bbca76233cdbdb93bc86ebfc48631c068971a4cd1901140874b37f46e6bd03184243a7e8777aeca83c079d589be031dcdb2c7d0aa7c8c248f0da04804a93ebe2e838ac2c9413db95c7ff0f6db03d7e40b9531466ae9450e3f9ffd723bb583eccc9247161693eb58c1977fbb417fadc0330e67a430fa0c22c49d4d24a5abfbc611b8d47b418084a6b5b6e278030b5c1bde88f8a6f6917eeecd78a0ef55b1ca7aaf52f20105957d16232a78e44422d13f7f8e410b860c3329299423860ba9463caa3433d98dc52cdea48bea55d1e29376940c75a0ffbd8f00ac641c3be08443393dd1aefb8d650cf60d944d6ab14e6c86bb35ac56a71e9affbe7216cc1120e12b6bdaa48eb68fc6d24eabca573988cf673ec03a3eb0dd6dcb8169e9306fd0ef5c82de222bc1761bfb64a5faef771927a767bc56aa738cb8d53bca185e325d863ade90f28cbea1391b70cd7cc209f5e0e62988a219b385e537282e0b0cd398da22539b82c4b3238ef8a720c980c5a496a6d5def7ba82b68a846bfcf5053e7c6e8fa5f997a7af49a2e2fea6f9ae33e8a6cd2033701be08f3fe7a3c17608d094d1285f8f376d37eb6ce6aa7d36812be67df5128cf1eb2e45a9b47bd151c866516a2ba4dbaaebf3ad49aef9b106f58c05aa5c7287b38ec8dd916e40cc264dff7275dddb1abf4f56dc03d8edfc516b73456f08c05db8398a1473358211a905408d5d00a9f3989c4fa8198b6727f2aca2d7e6ad0c1c105fa8b6f94226fab35e4166ac73f8955c28f96fbdc2330f0d5832318855de3c02b44315eb4b77091e50796d0f977e01fc20e29fee197eab40518e77891ee1836f0842fa7983180b3f55370ff8eca2d1ebd6e6703f21ff96edcf93045843b96ee85355c5631544df1437ec95d61aca0f5c7f3230800d45e4d17fc4429a3c426dc941243c6d31f09feffd5771a7d450aaf5395d1e499c6693b7520ca879dcbe90d5a1567dfaab86a7f07136afd3498759a2077e199d6a4cfa8d924813119d390c80dbe6ffcf0e4c47d6aba088ccbb154703f40f4d834625234529595b8d5466d4c0b6e1d5cbd0508eeca61c3ec01e5bb25fbece082a975ffbf6ee2812ccdc8eeaff1fa983d142208aadfe56e91390e140f59d24d5959dce11508540d4dd407f6e355be5886f69264f4beddc766bc5268c378f194f0bf9e0c474d09fe6f4cbcc2b57a33e7d9ead8b9477527270a2f5f98511259709ccc72fe26278de077736acdd109bb3543bc08ae9c75da08360da21db99a9ca70c1c7bb3ecf8b50143c3ed621bad00bea05bcd85d4204dd4b7c79cd35f987e35e58deff6d61f8f33858d15df2c4a8bf425571ca72a08beae6cacd78405589c4e575a2cc4f28b516cc55a8287f1325bd089e096742ffcc0fb6a3b796d1b3302588e2ceb545f50a934755ecef8562e3834f3427089c2c16be2b83ede49e41f8a14dbb764e860f178d9a33d2ab4c9d8d0378bca568b0c45d3f933d71b839d5f2ccf331cbf426803a030045861895cebd7bb643d66af55e4ff7b6b2b85b3fbe8c38e9605c6678babe334b7e2c23dec5c2a38d848e0a89cab55dfce79dbf65c7a74c580806d47e411929581eae1109e4b9dc914bf3c2e240a3df8a7a6fcb0805090a70166ed09741fa8f28d83e17238fdcbeb6bc38d1da8f49f960abbb3fd3419d6ffa04846719afd17b67695efc3c3d3c825de170e93ec39908eb24faa248c8ab19fe645508b842338f432a843b6094aa4e28fbb981e087144bece720b784fe46553e16e3ed39c1c40eaaf3e6246012d86c93bad36da4434d7c3b1ba597e5bfbf01cceb9abac0ee38be3807427db93f98759cf8411e3ef746c660e3bb2b4e541ca7a1e2099ff6430c715130777d3815bcf29c017e13cad120c2cfbc5bcd1b89dd0bfffc69fab01eb8aa850b188d1cf69f6103bab0ea521ed7fdf36ad9de829c94cacd24e4890178f2c729d97687bf84712a1d9a2890827c97033de800ef06a7098e722f1a0412678178bccafade0164eb927ada3dbe1b851e70fbeefecb4fb3a92ccaaf9cfd45aa2e30ed2c77e69677801a0ea88f19df6b21411e5c62e30d62d5454e2410534bb6a1a07f22d1d8b2e47b0055bfee3ed015e2b6f01e4b60d5095e1a10f0b7f8516cd829882abe41725509315bfaef402f3d9f0f8b23c01b1ee7f636c471b940cf9d3685d40c79975c8e7f02573eb60c5a4bd91f88058082d343047eea3ec49046f40d131c080b3a3f73112545aa4a4b9fc253c31508c74830683a44d56ab6c308d5646717bcabe130ff0d2c3f26050526c6dde32e72efb6ce1497ec1c7a0837fa6aac7131c515267c10a00c87728d944d5fb885049a91af5db151645ce98e4f11bc809849c30195bdc422bfd248990f63615f382b75253a9c8e9cd4f2d741b679dab86aef2712dd90115636b059ba26c7fa082a178becddad3ec3d823147c0d5af9957960cd6d6bc8c73e669142e7f394ef952b1befeedaddbcefec16c4908680caa50b8f2f356fefb1c814d648c192879b6638d4436992830fc50335df6208f001b80678e91ffd585a6a5318355bf70368a522aacfaec16007a77d66ac476e4e8edb1d490d41e0177d922d79a4c0a5175b3ff9fb3dc0903985c84f3b2998830d63d1fdb7fb2d285b09d4cdfea8d75b065651a083bd5491a1f001da18d9e0c5f45f8415eb70f0a9f6678933e55e98472f40310d54ecf1637a98b742ef911283d85ad009b67b17c9c419a4ed65dafc5920317e4f54a4911c1f9bcf21bc3c434a2e1b0ce444440241303cefa08fa3c194d550d7acd4c806947a24dc245a94e2bb9ebac131038d13ab611f68e0724ca5ff8af2fcd26260bc7412d256b196ac46f95b166852f616ceef3ec94e69c75483ac0b9f3ba0fa8dfa852299dd93c47346073db5cb54654c290009032ad3abc4f941741143d662dacc2d602ea0b8782988a7aea40925447ba761a6dc07fd3d54eb17843145cb3b956d16ea7698a21d319d1112ef84c824b97f33e642b724492a6ac7c0ac725c2077164b0f5140993fb8e9a7f83ddc25acfc55b01f20f25818cee63b11ce7e0d1a6bf3c3ecfbe57472aaefdf3b3d534d16602731d68bbdfded39dcb1462b1de5117ec44831ff5e79581c9e052e8599960c0086c11c2cc80f47c14169100bff3a5733fbd156c8280c1a97dabcfe81c10871e9ef82a41b316497e729301a5640c6cc953d715cb383c5c9019bb6bb0a8b459563f57939359128f930bba95bba4f93c71b506a7edb9e4140080afc86c4092ac70c6b8a9779cf8eec7e990d0145e0e2df5129d73eccdb4de828d2543a098ba3a4d04695f49f9531fb5f1c1c9644d024143355841d95c81ec1cdda6be2293dd4fa71055dc8b38b6eebdfc324ac7828580b8d4b0243ab46ec04ac335ac979b3eb4540756fa67aa558ce9aafed0f9e5f86f45bbdb5b7c79e5805603d34caecebc81a5b4c0a417e285f183250063a7b364e8bd7f160b79fdbf92685bcea151729d4e03ea61f5206cd5d223078a55b80251c53609128b11d07e0e8288736c99520eaab48dcf138dffc0d6bb2de0afc2f8e16f5634d691b5c5e20f5a96a028beb60f742e45e028b01a0e9a0c65abce8395adfea2680141509564e653d7ae9c5679f93d7ca5d81a76d7b2de4029cdf4d5e70def3cda0e5af739d2923cf3a37c8c277e470f3fc8bf6a6ad4e9a8e275d4737dbee03604459674a502bde41597733fe96c63be223934e6cfe8f73457ae60a1dca3761f4f628f6a5474fe131e600da78cd8ea5358d55056d7ef2b1fdeda76b0c5016c5126ed59d46321d8257415e9218c3a4019bbc6491bfc4dcadf077c2660fb8275d87723781d9214690b54362f6bf435b080a0ad7a36ec32524914d7d9787734a4cf78ab67192a00c150cd771e237a5d118a810b148a47620aecf64990447a33b569e0bc8ed1d536eb85a911a47507da5771d9523f5d9594b59d25bb02da8d07175062c9001e97bf8053ecb894181cf67e070e89d41dd189e10a6a78bf5c4a1f7c6d29bb44acf7a96c5bfbe9b610f67e2c8e2504501e1d834104d00558e08894379ae64593e7a6c77503644e367d27c7151f9da7e8ef9734a5b99ebb43282925ee28b4da16fecad3f987d4200ab14479144cd7f8da1c53434cd7b3fe745bb5baddfce0dcb21e1bb671b845128b1f6aff4e60ca7627432782e7c9f74d8a2623dd8d85720daf95ade86aa885c59eba3e3b29863e53aeb0c480c2553daf0db1f184fe8540c4d82ea5bc8d158eb16f64a72b88ac267303016eb6fa7c5f9e61042be9a2cd65ec878e7fc7c80ec032e85ef0fbd97a2a94c47167d6ca00860cc957e9e097c697d4cc2d1d280d116bc70c7567db1b01c267e97ce469d297ee32609679d23c7729899bb49bd01c698dd702016ae4c3fa3c4d39346dde549a4c9bacbf0265d46154b6ba15f01cede7b4f8b40eeffcb27d8b0ef5adf630c3daaf22d1cc2b26798d20eef87e448d887d683b01bd1156928400df40fea199241355d8f5f1cf33a5fe5b22f013fee570307b307aabda0cba0dc590472ce3055f543e1985f8de4b2542b650fadc55e5670d616a7d7392978bbfbea6e46f8ea51cc246f6777b5db45a78f8bdbe0325b2a3d0c54b569a8aebd8476a912ba01dc0cc5bf005622476138caf998057763346dc6e9238cffd3e7c036e93af0883dc3aa6df8ae6a3e3e166d4509da2a26685d0d21e46a578bd8d9a713864120bb86f6f7111e9354f73ba0caa93ad3971138db5ca900f0c65eaf38b6cbd824e13e31696cd02b31e1b7c35205eb4b6cb2f1e6b5953fdbbe110b49959d7adb384145faaa5ba0392c7c34116075d15469b1d9d6d8694a083433aeec2992d7806f4fcc9f83587f2e617975bdc8db3cc3f457c48a81de5100d0be9fc7febb1cb02ab310d974ffa4045c420f33001a7a0535977ede45808b3a26496adcfe36ab2ea9f309210fb9f05b8a492969970b04089d595bf33783ce0e251a7cbe471f12271d2ca0146628a57df49a71c4568d8b9142caf47669f89017e7b14dd23b4844725c0d37ef92b00c3bc2c6ee3cacc01757c4334a66c4", 0x1000}, {&(0x7f0000000500)="529a0d21f0afd02a44c5366e748361fcd54677a327c1fb20d4c40b164ec84ffc358a9e6af42b8d106a04aefca78322a3e600091d49658c2aa19dc93baee958d45ab7d1c781eaa79498b3c96f52569ea0a7538faa521107f727fb12187b7b715da9f4d3b2c31092f7d30180207301e72e2f3d9b4b0ff105701a2b988aa04af15c9e818f240a077f0097879ea26fca831bba9baec52445d0681ccc1212a8527af48f9d300ffe28f32af49076e1eb832b7e67430b1d439609b91e30d851fa9690730ca61a3ed3c04b11fdac", 0xca}, {&(0x7f0000000700)="79b82b9e84366ff8a705c5571e6b8f6c6a3058849e571190f76ae496b49925cc5e3b72b0473e32859073aa8209d29546028723e299ff17b567bc02c60a2b35b79192a232c950e866983f5b0524f79198b28fb5b23eef2560ac38a5338fc5e72214874f5358d100a3bf242615e268e2696e6d452fe5d4f1dd7f4fc71a2ada8de51ce2073e98f5", 0x86}], 0x3, &(0x7f0000001b80)=[{0x14, 0x0, 0x6, "f8332c6851669848"}, {0xb0, 0x105, 0x6, "2f747d6c4b668fe4395b7c1d01d7f58eecd402dbc92952585d02f67075223e5645e229f653ebb3896e5338afa5412cc6e543639f2009a961c7bd6d498ba670c4ae9184d07c5cdccd664e4b358b5fb2162f34af1b177909ead05ba97ac5f1ed8264e31a0f843f69c236c554d77988ea3d4c352b1557307968f8df8e116e8c9a94d2582b0afca07c1493dfa6589962bb1b233d6931bf1d9d8b2be24f365e116c0b03"}, {0xc4, 0x113, 0x3, "869fb7bcae88970878c05c88a6395eba3d2f8350230345b3eb3e7a7028052fe0b22c6e01a12a0d48e83180334dd2fa9376a9300c1e2280b1f4d713fb64909ffb18e634a14cb9e69805f13847f52c91a9dd71114f6fd6542a4d866c0c24f8d1d15f8ad08f510c23a00a7db66b3de0e0df9ec0e8d8feab36398e056bc61c930bec4f44cfda0f1ec6ccd08beb9f7cf8c0aad6504d95bb7037556a974804bc794239dea7359a447671a217c84f5d5cedda4f3264bb9d4d623f26"}, {0x80, 0x119, 0x401, "7ca66feb99101bc60764a690d7f333249802707afb7e73fc8b7aa1320905fd29cba3d1801e34f031f3f67f62d1d601a5c63867d472eadd4e76dc2578dfaa6ab8874ad6576ecb6d06a09684dc70b23d3cf21e813f0e3e177bf435a6c8eb96b422a734933c1dd0d42f094dd28d1b24dcb540d3af"}, {0xa8, 0x84, 0xfffffffc, "8bc90b36d7e86df69d1e279a48308dba18fdf235207fd761f75d3f87c443399323503e94370062f2b9fcd20b1be558afdd286151afe2c5309398d31f4a4f4de4f0ceacf088b689562095a1a97827ce568367cff8538dc0534aa9bba27535e5df4880c224c19dedb2b02b87c589cfd4e359d7cab9f3deed7d573497b86af8510a59498a21641befdede8901a56be11bbd15bab85ecf653e84c3a5"}, {0xe8, 0x108, 0x8, "65109b0528d4c349e8eabeaf76c2d85c28a1fd7b10be974141b4ed318817d4fbe882ebecf4c71ed2869f3ed197ec1c6b64e5dbad34303d66ea5c55f99c7a88284996963fb77f74d4c4b836773048f4ff609e38be4ce9c2e8f32a277ee0f7d97d3ce05cd92f3eb5e8334f5b2b0697cda3599158c752be1d8a52cfd04576c7858a3e993f33ea9d979d420273bde347538448233fdc62e20101ecce11c7b07f536e9998144564e16aceb2c1f87df10ef02da27d8d9d51852641a5910e02f8cf21b690597ff89a40d54c4c53a6f62eb857164f0f245abfd4245896e859a4"}, {0x18, 0xf, 0x9, "b939e358f4c15bf221"}, {0xa4, 0x10d, 0x7, "25d87f2ba0f12a23409ef50572a683aedc6a4131cfa7e30ae44e0683c691f34aba384afe3f694dd86dac72917419a8ced57914219d0e1c90973c8f782177a24414928c57fdf6f7743c94e3f7c250891d357cf9a24514093b43fa1506cdbd34a1fbecc6807ed329ef40df414ac4002823a7304052afcb3928a61bdb6113fac5e48ee1a3fac75dc6cdf355a266c2810d8169e506c94cd756"}], 0x454}}], 0x1, 0x20040091) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB="0000040000000006a5763af841c07d429e49e4756552dcd026f1b67a2d4e020006000fafe77f08cd89518e9711f66ecb31b5aed1f03027d7a45d8febde333a72b3b77f000000000000"], 0x8) sendmmsg(r6, &(0x7f00000092c0), 0x170, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYPTR], 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) sendmsg$key(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x2, 0x3, 0x7, 0x5, 0x28, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x6e6bbe, 0xfffffffd, {0x6, 0x0, 0x7, 0x66, 0x0, 0x9, 0x0, @in=@initdev={0xac, 0x1e, 0xfc, 0x0}, @in=@empty}}, @sadb_lifetime={0x4, 0x3, 0xfffffff8, 0x6, 0xff, 0x3}, @sadb_lifetime={0x4, 0x6, 0x316d, 0x4, 0xfff}, @sadb_x_filter={0x5, 0x1a, @in=@dev={0xac, 0x14, 0x14, 0x19}, @in6=@mcast2, 0xc, 0x4, 0x18}, @sadb_key={0xa, 0x8, 0x238, 0x0, "12a46544412ae822319436fa4f6a14e3b121015556509ef0e3829a305edcf8ac1857cdae89ff172ed8899923394ca914f8879557b87e54a26b41b15b07da1d31a3b70bc0359f70"}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@loopback, 0x9, 0x10, 0x69833af61d881b91}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x57ff}]}, 0x140}}, 0x4000) 22:33:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 497.990062] binder: 22483:22484 got transaction with invalid data ptr [ 498.016976] binder: 22483:22484 transaction failed 29201/-14, size 16384-0 line 3155 [ 498.046992] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.061757] binder: 22483:22486 got transaction with invalid data ptr [ 498.086878] binder: 22483:22486 transaction failed 29201/-14, size 16384-0 line 3155 22:33:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xc05) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1163484000df0000000000000000000000000000000000050000dd00000000000000000000c13814bedfec1f005a385e228edf1a05e15b15e0682a083d4b0cd530b409c2b8bc0afaebac5069b0e45b7e3d2237f1f2fe98b00ab13fc75fbbda5ea5a6ec6d9f48ec8fe4b2e202738d020f7da9c346adbbe1ab8754dd7b339f53c0"], 0x0, 0x0, 0x0}) [ 498.117984] binder: undelivered TRANSACTION_ERROR: 29201 22:33:29 executing program 5: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) [ 498.214040] binder: 22488:22490 got transaction to invalid handle [ 498.252006] binder: 22488:22490 transaction failed 29201/-22, size 2300459517155524864-1936422643053386240 line 3014 22:33:29 executing program 5: clone(0x3106001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x40000000, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/uts\x00') r1 = gettid() r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) tkill(r1, 0xc) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) dup2(r2, r0) [ 498.330268] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.345825] binder: 22488:22496 got transaction to invalid handle [ 498.397804] binder: 22488:22496 transaction failed 29201/-22, size 2300459517155524864-1936422643053386240 line 3014 22:33:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) [ 498.490606] binder: undelivered TRANSACTION_ERROR: 29201 22:33:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x15a000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e05411, &(0x7f0000000040)=""/4) 22:33:30 executing program 2: bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000300)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000001c0)=0xc) r4 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) chown(&(0x7f0000000140)='./file0\x00', r5, 0x0) r6 = getgid() r7 = getegid() setgid(r7) setresgid(r7, 0x0, 0x0) getgroups(0x4, &(0x7f0000000040)=[r7, 0xee01, 0xffffffffffffffff, 0xee01]) r9 = getgid() r10 = getgid() r11 = getegid() setgid(r11) setresgid(r11, 0x0, 0x0) r12 = getegid() setgid(r12) setresgid(r12, 0x0, 0x0) r13 = getegid() setgid(r13) setresgid(r13, 0x0, 0x0) getgroups(0x9, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee00, 0xee01, r11, r12, r13, 0xee00, 0x0, 0xee01]) r15 = getegid() setgid(r15) setresgid(r15, 0x0, 0x0) getgroups(0x7, &(0x7f0000000300)=[r6, 0xee00, r8, r9, r10, r14, r15]) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000066aa11c5212fd88aeb23c00fc9b70001000100e3db6637e8000000000400071bc7f7227e865009c2778465b1e6647a299b8de93d55e6267f7f9ac0c9b6941412f827634598272f179d558dca11d3836dde41b9abb2a8b423d510f8531cbfceafb8dfdc196c5d8600579443160c077f395df6421d09eaf232b94dd59176", @ANYRES32=r15, @ANYBLOB="10000000000000002000020000000000"], 0x2c, 0x3) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r16 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r16, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)=ANY=[], 0x0) syz_genetlink_get_family_id$tipc2(0x0) 22:33:30 executing program 3: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x100000000002}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1=0xe0000300}}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000d80)) sendmmsg(0xffffffffffffffff, &(0x7f0000003040), 0x4000000000003c4, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x8000) clock_gettime(0x7, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1fb, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, 0x989680}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x0, 0x1, 0x0, "eda9078f487d77e44841f145a596355f11a852671e2b0debf33bd3dfe2132aeb51ee0370002bde1f82570f91aad7d657aaeaca14732c29ecbdc1817025166ae37f72f259f7dd2f117beda6923ca77094"}, 0xd8) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup(0xffffffffffffffff) 22:33:30 executing program 4: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f00000001c0), 0xbab230cf) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = gettid() rt_tgsigqueueinfo(0x0, r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x4000) getuid() openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000480)='\x00\x00\x00\x00\x03h\x00', 0x0, 0x4000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'nr0\x02\x00\x00\x00\x00\x00@\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 22:33:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x1a8) r3 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)=r3) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r6, r7, 0x0, 0x20020102000007) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r9, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) write$FUSE_DIRENT(r4, &(0x7f0000000300)=ANY=[@ANYRES64=r7, @ANYRES64=r9, @ANYRESHEX=r3, @ANYRES64=r1, @ANYRESHEX], 0x3c) r10 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) [ 499.036828] binder: 22513:22517 got transaction with invalid data ptr [ 499.060642] binder: 22513:22517 transaction failed 29201/-14, size 16384-0 line 3155 [ 499.073685] binder: undelivered TRANSACTION_ERROR: 29201 22:33:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x4000000000, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) r2 = dup2(r0, 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[]}}, 0x0) fchdir(r3) r6 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r7 = socket$inet(0x10, 0x3, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="24000000120007031dfffd946f610500070000001f00000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) r8 = creat(&(0x7f0000000740)='./bus\x00', 0x10) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r12, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r13, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@local, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) iopl(0x6) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @empty, @empty}, &(0x7f00000005c0)=0xc) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000600)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r8, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getegid() fsync(r8) write$P9_RSTATu(r8, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r14], 0x17) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x58, 0x2, 0xfffffffffffffc00, {0x0, 0x2a}, {0x4, 0x5}, @period={0x58, 0x0, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x1, &(0x7f0000000480)=[0x6]}}, {0x53, 0x100000001, 0x6, {0x8}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x0, 0x0, 0x0, 0x8}}}}) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0x8, 0x0, 0x1, 0x0, 0x0, 0x4000002000000d}, 0x50) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0xe, &(0x7f00000006c0)) ioctl$int_in(r5, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x1) 22:33:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) 22:33:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0xcb7) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) ioctl$TIOCNOTTY(r0, 0x5422) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 22:33:30 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x10000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200210}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/1112], 0x458}, 0x1, 0x0, 0x0, 0x18000001}, 0x8003) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x56, &(0x7f0000000140)={0x77359400}, 0x8) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r1, r4, 0x0, 0x20020102000007) mmap(&(0x7f00004a8000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r4, 0xee10b000) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x8993, &(0x7f0000000000)={'gre0\x00', @ifru_hwaddr=@remote}) 22:33:31 executing program 3: openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read$FUSE(0xffffffffffffffff, &(0x7f0000000840), 0x1000) socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = socket$netlink(0x10, 0x3, 0x28d7b4a841aa4290) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r4, r5, 0x0, 0x20020102000007) fcntl$getownex(r5, 0x10, &(0x7f00000001c0)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000380)=r6, 0x12) fgetxattr(r3, &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f0000000300)=""/125, 0x7d) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10001000a00) chroot(&(0x7f0000000140)='./bus\x00') openat$selinux_user(0xffffffffffffff9c, 0x0, 0x2, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0xc0002, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000c80)={0x8, "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", 0xf05}, 0x1006) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) ioctl$LOOP_CHANGE_FD(r9, 0x4c06, 0xffffffffffffffff) signalfd(r9, &(0x7f0000000080)={0x3ff}, 0x2) lseek(r7, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400204) sendfile(r7, r10, 0x0, 0x7f) lstat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000500)) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) lseek(r8, 0x0, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/l\x00op-con\xf4rol\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 22:33:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='\x05~\xdb\x18\xf3\xbe\x0f\xa3der\x1f\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9, 0x1, 0x2, 0x3, 0x8000}, &(0x7f0000000040)=0x20) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x7) 22:33:31 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/policy\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) write$evdev(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffff8000) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @rand_addr=0x7}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xb9e, &(0x7f00000000c0)='batadv0\x00', 0x3}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10001000a00) ioctl$VT_WAITACTIVE(r4, 0x5607) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) r6 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) write$cgroup_type(r6, &(0x7f0000000200)='threaded\x00', 0xf642e7e) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = creat(0x0, 0x0) ppoll(&(0x7f0000000700)=[{}, {r7, 0x1141}, {0xffffffffffffffff, 0x3282}, {r8}, {0xffffffffffffffff, 0x360}, {r9, 0x10}], 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r11, &(0x7f00000001c0), 0xfffffef3) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r11, 0x4, 0x8d264d94b88cc547) sendfile64(r10, r11, &(0x7f0000000380), 0x1) setsockopt$inet6_opts(r10, 0x29, 0x37, &(0x7f00000003c0)=@routing={0x0, 0x0, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @empty, @ipv4={[], [], @multicast2}]}, 0xfffffffffffffe9c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r10, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="20062dbd7000000000000c0000000800df00040004007c0001002c0004001400010002004e227f00000100000000000000001400020002004e20ac1414aa0000000000000000080003000180000008000300ff0700003c00020008000100020000000800010011000000080003004a000000080004000000000008000200010000000800030081000000080001001f000000"], 0x2}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2041090c}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f30af5ca194ee1ff8e44faeab50700fd000000ee", @ANYRES32=r6, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) 22:33:31 executing program 2: socket(0x11, 0x2, 0x81) r0 = syz_open_procfs(0x0, &(0x7f0000000200)) sendfile(r0, r0, &(0x7f0000000040)=0x20003, 0x92da) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='batadv0\x00') 22:33:31 executing program 4: socket$inet(0x10, 0x2, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)) capset(&(0x7f0000000000)={0x20071022}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000480), &(0x7f0000000180)=0x4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200005) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000ffffffff) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000380)='./file0/file0/file0\x00', 0x141042, 0x0) ftruncate(r7, 0x200005) sendfile(r6, r7, 0x0, 0x8000ffffffff) write$FUSE_NOTIFY_POLL(r7, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x7d, 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) r9 = creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r10 = socket$inet6(0xa, 0x400000000001, 0x0) close(r10) r11 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r12 = socket$inet6(0xa, 0x400000000001, 0x0) close(r12) r13 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r13, 0x200005) sendfile(r12, r13, 0x0, 0x8000ffffffff) r14 = socket$inet6(0xa, 0x400000000001, 0x0) close(r14) r15 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r15, 0x200005) sendfile(r14, r15, 0x0, 0x8000ffffffff) dup3(r15, r4, 0x80000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x82000a9) setsockopt$inet_tcp_int(r11, 0x6, 0x3, &(0x7f00000001c0)=0x9, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x67ce8e14a42bca10) socket$unix(0x1, 0x1, 0x0) lseek(r9, 0x100000000000000, 0x2) r16 = socket$inet6(0xa, 0x6, 0x40) close(r16) r17 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x200005) sendfile(r16, r17, 0x0, 0x8000ffffffff) r18 = socket$inet6(0xa, 0x400000000001, 0x0) close(r18) r19 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) sendfile(r18, r7, 0x0, 0x4c) close(0xffffffffffffffff) r20 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r20, 0x200005) sendfile(0xffffffffffffffff, r20, 0x0, 0x8000ffffffff) sendfile(r19, r20, &(0x7f00000003c0)=0x3ffe, 0x68a8) 22:33:31 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x20, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r2, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS2F(r3, 0x401845ef, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0xffffffffb0effc5f) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r6 = creat(&(0x7f0000000840)='./file1\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r7, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r8 = dup3(0xffffffffffffffff, r7, 0x80000) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080), 0x4) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000001580)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x33, r10}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71, r10}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x0, 0x7f, 0x7, 0x0, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r6) write$P9_RSTATu(r6, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x0, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x0, 0x0}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) setsockopt$inet_int(r13, 0x0, 0x32, &(0x7f0000000200)=0x1000000, 0x4) 22:33:31 executing program 3: setreuid(0x0, 0x0) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) openat$cgroup_subtree(r1, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x0) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000300)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r7, 0x3f, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) write$FUSE_ENTRY(r5, 0x0, 0x0) fchownat(r5, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000140)) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) pread64(r8, 0x0, 0xfffffe55, 0x100100002) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) pipe(&(0x7f00000003c0)) read(r3, &(0x7f00000004c0)=""/250, 0xfffffe2a) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) r10 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r10, &(0x7f00000000c0)={0x0, 0xfffffffffffffe4b, &(0x7f0000002000), 0x1, 0x0, 0xffffffffffffff78}, 0x0) 22:33:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x402) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffed6, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0}) 22:33:32 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f00000001c0)) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x80) fstat(r0, &(0x7f0000002800)) 22:33:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) 22:33:32 executing program 5: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000100)={0x1fe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000000000000}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000004c0)="5d56f1319f269c974a6e5d799fae98260b7f3d35d6e4df3691bf84ec57e0b95b843df279b3f15a4018930ff7459b584a4dac8109832688eb86b219a7e2e4e94dcc6194f3d887e7be8af0a7e29b840f038b603a2d4abe083d305dfaae", 0x5c, 0xfffffffffffffffe) r6 = request_key(0x0, &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='\x00', 0xfffffffffffffff8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4800, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000300)=@caif, 0x80, 0x0}}], 0x1, 0x10) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000680)={'\x00yz', 0x2}, 0x0, 0x0, r6) fcntl$addseals(r1, 0x409, 0x800000000000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x800, @local}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000180)={@dev}, &(0x7f0000000440)=0x175) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/checkreqprot\x00', 0x100, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, 0x0, 0x0) [ 501.341679] proc: unrecognized mount option "./file0" or missing value 22:33:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) r1 = dup2(r0, r0) ioctl$PPPIOCSACTIVE(r1, 0x40087446, &(0x7f0000000080)={0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) fremovexattr(r2, &(0x7f0000000580)=@known='trusted.overlay.upper\x00') close(r0) r3 = gettid() syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b6ce6812f60ddb6a7c63a7a2389c7a083b1223af47104e6911ea12a42e1d33216b37f4dc9a5470c8a5850c6a70c0f3c4f4e6b7b4f1d937287955f816cc7d1091a5feeef3ef2a5d19f69c375f0e26283ad2250c3b3849ca5154bb1a14fd0f39374ee7b3922abd43aadb10a204992d4b264f00985b8f54dc80362fef4bc45efb374ff4c10f4f7fea000112e107b83b3894d8858bdc22293f624fd3336d9e965f782f4a791c3077d3417436027ce0b101f8702ac9d07904600f5202b83a2d82d2e4d1ff76b789c8386c9da380e3590c7383901fa71aead2c7a27f81f49a9b61ae550ac9a39eaf1a57d65544e91f157864cc8f38d1bf37fd89e242b78bd8439d40af517c50c4805106c2297d69d17195f9dffcac40fe212e4fe36a9c5048b14a97c40b6f1415eaf5d6f06d4ba6f79db96db1b1f43d6275475b69add9d35fca81bf62a69d2de0f047af1abf5fa974725afb9978b7c8a51bc3cd43"], 0x6) ioctl$KIOCSOUND(r4, 0x4b2f, 0x6) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000100)='/dev/input/event#\x00', &(0x7f0000000140)='&\x00', &(0x7f00000001c0)=')selfGPL\x00', &(0x7f0000000200)='/dev/input/event#\x00'], &(0x7f00000004c0)=[&(0x7f0000000340)='%wlan0\x1ctrusted(procppp1(\x00', &(0x7f0000000380)='userselinuxppp1[\x00', &(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)='vmnet0--\x00', &(0x7f0000000440)='posix_acl_accessGPL+vboxnet1bdevself*eth1#\x00']) tkill(r3, 0x16) r5 = getpid() wait4(r5, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) tgkill(r5, r7, 0x7) 22:33:32 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x10001, 0x8000, 0x8, 0x1, 0x6, 0x20}) fchdir(r0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = dup(0xffffffffffffffff) openat$cgroup_type(r2, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) inotify_init() fcntl$setstatus(r3, 0x4, 0x6100) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) readv(r6, &(0x7f0000000080)=[{&(0x7f0000000180)=""/241, 0x10}], 0x20000000000002f4) write$uinput_user_dev(r6, &(0x7f0000000880)={'syz1\x00\x00\x00\x00\x04\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x10000]}, 0x45c) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}, 0x45c) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) readv(r7, 0x0, 0x0) write$uinput_user_dev(r7, &(0x7f0000000880)={'syz1\x00\x00\x00\x00\x04\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}, 0x45c) dup3(r6, r7, 0x80000) rt_sigaction(0x26, 0x0, &(0x7f0000000400)={&(0x7f0000000380)="646526f082610a07824c2d2104c017da6426f33e0f18810d0000000f4bd2660f2cd7c000fbc4e14758c026d133c4c1a9def9", {}, 0x0, &(0x7f00000003c0)="f30fbdf4660f382262bdc4c2f902e2c4e27597a2b191911e0fc70c9ad87fc6670ff7d8c4e1edeb499fc4c28139b4f3feefffff8fc858ec54280032"}, 0x8, &(0x7f0000000480)) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r8, &(0x7f0000000040), 0x8000fffffffe) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) sendfile(r3, r8, 0x0, 0xa5cc554) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000004c0)=""/191, &(0x7f0000000580)=0xbf) 22:33:32 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') socketpair$unix(0x1, 0x8005, 0x0, &(0x7f0000000480)) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x8004}], 0x1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@in={0x2, 0x4e21, @multicast1}, 0x35c, &(0x7f0000000080), 0x0, &(0x7f0000000100)}, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) wait4(r3, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x40000010000013) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x04', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffff00) iopl(0xe8) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000500)=0x1) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='\x90\x00\x00\x80\x00\x00\x00\xff\x00', 0x2, 0x0) socket$key(0xf, 0x3, 0x2) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000002b80)=ANY=[@ANYBLOB="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"], 0x1, 0x3) fchdir(r4) creat(&(0x7f00000002c0)='./file0\x00', 0x8) [ 501.609102] input: syz1 as /devices/virtual/input/input61 [ 501.679958] input: syz1 as /devices/virtual/input/input62 22:33:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f0000000380)={0x0, 0x2, 0x6, 0x2}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2400011}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="82000000", @ANYBLOB="2e9b8618c3174bcd341d099c05337ad535063058df8b33642a3c1dd152eb61b06b1a7179b633f2d80d2316e75670e5cff6a09a54737ac0c4ae18f0eb3b820890f6854e3a80c247d1197cb7a0e00e796a6a85cd8c03e600c448f56d6375c990bad6ad852e704c97d41680925c066f0a491c4ac2b3dca5f080d8a005df2b007391c2ee12336522daa9e06b3e3a586b", @ANYBLOB="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"], 0x3}}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r5 = openat$cgroup(r1, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) sendfile(r4, r5, &(0x7f0000000440)=0xf5, 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:33 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) 22:33:33 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000300)=""/19, 0x13}, {&(0x7f0000000340)=""/233, 0xe9}, {&(0x7f0000000440)=""/78, 0x4e}, {&(0x7f00000004c0)=""/134, 0x86}, {&(0x7f0000000580)=""/41, 0x29}], 0x7, &(0x7f0000000600)=""/32, 0x20}, 0xfffffffb}, {{&(0x7f0000000640)=@generic, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/173, 0xad}, {&(0x7f0000000780)=""/90, 0x5a}], 0x2, &(0x7f0000000840)=""/234, 0xea}, 0x1f}, {{&(0x7f0000000940)=@sco, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000009c0)=""/250, 0xfa}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x2, &(0x7f0000000b00)=""/128, 0x80}, 0x6}, {{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=""/45, 0x2d}, 0x1000}, {{&(0x7f0000000d40)=@pppol2tpv3in6, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/36, 0x24}, {&(0x7f0000000e00)=""/59, 0x3b}, {&(0x7f0000000e40)=""/32, 0x20}, {&(0x7f0000000e80)=""/18, 0x12}], 0x4, &(0x7f0000000f00)=""/83, 0x53}, 0xef0}], 0x5, 0x340, &(0x7f0000001080)={0x0, 0x1c9c380}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000002180)=0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000001140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x4040, 0x110) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1, &(0x7f00000010c0)={0x1, &(0x7f0000001040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = getpgid(0x0) ptrace$peek(0xffffffffffffffff, r1, &(0x7f0000000080)) [ 502.404748] input: syz1 as /devices/virtual/input/input64 22:33:33 executing program 5: pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) dup(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x10, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, &(0x7f0000000100)={0x1fe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000000000000}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000004c0)="5d56f1319f269c974a6e5d799fae98260b7f3d35d6e4df3691bf84ec57e0b95b843df279b3f15a4018930ff7459b584a4dac8109832688eb86b219a7e2e4e94dcc6194f3d887e7be8af0a7e29b840f038b603a2d4abe083d305dfaae", 0x5c, 0xfffffffffffffffe) r6 = request_key(0x0, &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='\x00', 0xfffffffffffffff8) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4800, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000300)=@caif, 0x80, 0x0}}], 0x1, 0x10) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000680)={'\x00yz', 0x2}, 0x0, 0x0, r6) fcntl$addseals(r1, 0x409, 0x800000000000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x800, @local}, 0x10) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000180)={@dev}, &(0x7f0000000440)=0x175) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/checkreqprot\x00', 0x100, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x0) r8 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x18, 0x0, 0x0) 22:33:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000000c0)={0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) getpgrp(r5) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000040)={r3, 0x8c87, 0x7}) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="9500000000a0"], 0x6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r8, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r9 = dup3(0xffffffffffffffff, r8, 0x80000) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000080), 0x4) r10 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r11}) r12 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r15 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r15) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) setsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e23, 0x8bf, 0x4e22, 0x8, 0xa, 0x20, 0x60, 0x6c, r11, r13}, {0x1, 0x97ee, 0x1, 0x4, 0x8, 0x7ff, 0x8df, 0x6}, {0x7, 0xbb, 0x5, 0xfff}, 0x3f, 0x6e6bbe, 0x5, 0x1, 0x3, 0x3}, {{@in6=@remote, 0x4d4, 0x2b}, 0xb, @in=@multicast1, 0x34ff, 0x1, 0x3, 0x1f, 0x5, 0x0, 0x2}}, 0xe8) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:33 executing program 2: socket$key(0xf, 0x3, 0x2) setreuid(0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x6}, 0xc) write(r1, &(0x7f0000000680)="f4176eff979a0e7bce259b093c5cf12464fc699cdfbb25a6be73f0b23ed2acce78884e4ea4bf8930aeefe1ca8e109ec32b24eb5e8b6c59000100002281d87697ff6a2e2ac446a9d10a8899795069947db79f786b041005a957ec46b5736d2707cb6061a84a63d60382a24361c44b85467eab2c3f5f32dbd647a734", 0xa2b6279) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) openat$cgroup_subtree(r1, &(0x7f0000000440)='cgroup.subtree_control\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) sendmmsg(r2, &(0x7f0000007fc0), 0x5654807, 0x0) unshare(0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x80, 0x102) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) clone(0x20000000, &(0x7f0000000500)="f35e8fdd0dce633a241a37faec12072bb9085225665989cadec04819beca21ef419c8e90549a941d2c1cacf4f87b785c756fb973410347a0f0975ecc5caee8bbf1c9779987", 0x0, 0x0, &(0x7f0000000600)) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[]}}, 0x2d011) statfs(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=""/20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xffffffff00000000) getpid() ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x4) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000140)) ioprio_set$uid(0x3, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 22:33:34 executing program 3: syz_open_pts(0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x1c0) syz_open_dev$loop(&(0x7f0000000580)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0xfffffffffffffffe) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, 0x0, 0x2a0241, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x100000000018, 0x0, 0x4) connect(r4, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) fcntl$getflags(0xffffffffffffffff, 0xe) write(r3, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xffffffffffffff63) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r2, 0x0, 0x2) sendfile(r2, r5, 0x0, 0x8000fffffffe) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x8f) write$selinux_load(0xffffffffffffffff, 0x0, 0x146) r6 = fcntl$getown(0xffffffffffffffff, 0x9) r7 = syz_open_procfs(r6, &(0x7f0000000180)='fd/4\x00') setsockopt$inet6_tcp_int(r7, 0x6, 0x1f, 0x0, 0x157) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x7ff) sendfile(r2, r5, 0x0, 0xa5cc554) 22:33:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 22:33:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000000000)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000740)="9b746e719e0083260483a83833a31c2f97abe201d503927c56e9ad3c77f3c0890782d41b1e4e870347cc945037cb8db5dca60f23da15c42871ee6425d8908ea2645c2300b6bab0b8221554e4a4cc457ab40bbb93d8775ed1f3d36e3665655ccd61d887722a001a62bf8a03c78b64a21ca7d72d78973954c2c7fa78e168aa2340b9af52b4d9c7799ffce49f3e32c5c4df78d65f043042af95641c75d733a3650f39ab1eaea1002173eaf788983b57ead080539e1dce59d4cc68ff9ff3025fe1ce3bbc261ab4f7ea57e6422842674ec905b15be0cd5fbd8ccc085a664c53983abfe2c7ef2ff59384dc2344208d23f31e81fbf06395d16b3044aba8fc0761dbab9a23350147d430e2d91ceb2691cc1398a13996e28644f1330c3c01b4a1ab9ecfd93533c0c6c3949f7ee1a9cb5471198d407f26cdf6351298281e0d4a528f93c3ea8aa5548b64c11918e55d2c542b24b8dba44fd2b8f55922615f658b234c83338655613fc05b26bbbb8befd04170dcf7da6e6e9913d73679f833d1e0799050b392b735aa463afd711b8a97f503a8d9b0a02767ae3a757293511dc0dca26d6275671eac3b8124259e82855bd62376a8028c01d0f4e1b7c34d60fcdb1d0c968816b34bf9496be7848254328ae0e1114bca6fce3d8a51cabfe224d2c1a814591a446bd14d0020444ff8321cadc6d400756121f6c0453792bf1721f4a11537df9cd80944aa5979f36bece828e4e97f0f0921a1e41a2a14258f72612d85a93856885624496797f191d33aee3b3555573517f4927ed8c69a46db01e964e14b6ff2723f13f93f8ba4ba656164b1bd96fe5b59a0b24e8f7169e2574d0b9b394f68a2e8a8545012c070b8798026e4089dbec669b2cb31386215c4eda212a5382b48353165ff5d428ab8625e39c1c5c82118451e059038c758845bfe26e209efbdce93377c14fd4a6765f5252bb66671a4816fb3dc2a72d94014f882f69256f4913c88d375646488421ee2d1250deaffa2a97039a5be8a7872e1a43b464a4fab6c498b358c841e20f26418445edf0972ffdbda1df9bd4231523062f3e55d4f9184f97866859bcd156ee637b43302187c3a518eca6d585ce3c727d2c83754e8c8d7ebdef1d85d5e0a35de0c0fe758a456c81086208e07802a34f6af1da04249a181a8f070d6d6596e08bb2ecbb7242d846f6e6210f43b035cd45d10eba90c0cadc4f8da06f4c4e850d64599c4316af6c2cb1c7b3b8ae2ea32980462eb85bd2798a9485c9642e8fef2fe26a9636c84bc718c9d62c371e5252a39c0cafb8658ce101bb1ab090990358d53bc4675170b403644e9f24c132063cf035dbe17878b1bf295f104a239318bb19a9b3ab43e81812736021880ade3d2fe9c1a545cc959decb7933f924cb5df334beacde1557d1e144ae15223cd5b3ebcd5b68d6ac967b9fe6156d3d508518697db2765601766ab826b4faa17bf2866bc1f625aa85142fdd3688d1daa47db851a64fafab541d6adfc9aae937a960a69be95bff9eee34b91a4c6a212acb8c5f55804a7946a750bcef0f76811e5292cd979ea59b7b45ecabc642bb4f0b3b1939e55cd6c8c8fcd3d2f1f62dd402fba8d8df1264fbd50c265eef9ffb22a5d260d44981232ad89cdac1f27df0df605028c1c1c58d4501aa4cd06507e17e10a1d76b24b1cff4252b5f3715640e760a4cbc581fa7f735149380b3458f9fe6d29ba163332440bbd73e3d6b93b8b05c5ab76e6b69edc75e89dcc7e3b9ac6f6b337e7f0a255db7fe788e1d8e2200e3be51ffb404244cb81aaa04f861c09f13424d9e51d3fe5332508d0262fced43678420197af7f2aa91abf94c94cc5e49623dcd16df570faedfd9f7d092ff2e80dff90a7f620731c387f3ebf29f6c154b12361ec32d7fc78d4d7443fdce3e2c1927443e2488ce90a8b1ad6d2b049f4e7309efe7a4ed5fe20685dd4fae47042800944a197894761cad84a8900051bb9ac9e10bc5da5907e314f1710bbc65cab4b7b0824233d9e0fe7e78d24779df23637325e14f36278230ca80bb10b8cf7954d475438e04dcdac7f80ee0dfcf386be5da5de97dfe10a4a8f5ec91fa45fd767610ac1b225c7d8b96cc29a3a75cfb65043c010df39d9f6c5d681470c1f56083554549d12fa563a5355f1d81faffe6eb9e3eb18ec75b8fea917709fe90c21039980488058f60bfb5a301b0f167148d7def83356c275a4b05a98c45cb5f37ce15f4944c7bbe7bf9b255acc83435c02a70caa7b3d81dd5dc563bf06f660942c380b1c4613472f476194d22f52420d9786d2541866595c33df24b431e08afe395bdc5036eaa6ada2b5920d92c306264de253ab1d16eee9631e51d6c5d2ffdae6a318444b219b42680f4f13f148f6040767f161fd9da4dce932f6148f7bf7a9736ce33d9f54433e103bf21d565fc00fc6495bc1023807fa83dc2379ec1d6ddb2a22a6112af5fe426d7efb60df0c29d20a4ed15713251ed8230c60db9f6", 0x6e3, r2) r3 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="453a08ca4f8b53e7bd859c78b65051a6b2ef893d2e1979c2f778cd22a109cca38467dd7d822d3d0632f8c18a88b384e3559a8921757aa219875751b88c87c5d728e53fcb0b3880acd19c02498a66737eb3c3dc7a893703763d0d298c03317215bdea740429b29091154766c716e5d8f11125b3a121a858af53887ac905304a939fae1803db6127f2b1ac91bf79ff3244cfbdbc29b61ac91a6234d9e3888152d8c36531695e9b1191eb380eae949c18e0859543fcdc5c568934d6", 0xba, r2) keyctl$invalidate(0x15, r3) 22:33:34 executing program 4: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0), 0x3) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20001003}, 0xc) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) ioctl$FS_IOC_RESVSP(r0, 0x402c5828, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x81}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r7, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r8 = dup3(0xffffffffffffffff, r7, 0x80000) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080), 0x4) r9 = creat(&(0x7f0000000180)='./file0\x00', 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r12, 0x0) getsockopt$inet_IP_XFRM_POLICY(r12, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000700)=0x30) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r13}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f00000004c0)=0xc) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r15, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r16 = dup3(0xffffffffffffffff, r15, 0x80000) setsockopt$SO_TIMESTAMPING(r16, 0x1, 0x25, &(0x7f0000000080), 0x4) r17 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r16, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r17, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r18}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000000540)={&(0x7f0000001480)=ANY=[@ANYBLOB="c8120000190000042abd7000ffdbdf25fe8000000000000000000000000000bb000000000000000000000000000000004e2200004e2400000200808032000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="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", @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="00000000000000000100000000000000ba00000000000000000000000000000007000004000000000600000000000000ff0100000000000000000000000000007a0e0000000000003f000000000000000000008000000000ff0f00000000000008000000b86b6e0003000303000000002c001300ff020000000000000000000000000001ac1414bb000000000000000000000000000000000a00000030001100ffffffff0000000000000000000000003f4e0ecb682c757d7a511b4042e041062bbf0000ff34000002000000"], 0x7}, 0x1, 0x0, 0x0, 0x4008001}, 0x40) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@remote, 0x73}) getgroups(0x0, 0x0) socket(0x0, 0x2, 0x0) lseek(r3, 0x0, 0x3) recvmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000bc0)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @netrom, @default, @netrom, @rose, @rose, @rose]}, 0x80, 0x0}, 0x5}, {{&(0x7f0000000e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x2, &(0x7f0000001000)=""/76, 0x4c}, 0x5}, {{&(0x7f0000001080)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001180), 0x0, &(0x7f00000011c0)=""/93, 0x5d}, 0x7}], 0x3, 0x1, 0x0) getresuid(&(0x7f00000012c0), &(0x7f0000001300), 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r21, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r21, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) setsockopt$inet_IP_XFRM_POLICY(r21, 0x0, 0x11, &(0x7f0000001380)={{{@in=@local, @in6=@mcast1, 0x0, 0x1, 0x0, 0x5, 0xa, 0x20, 0x80, 0xc19253788b6d1bbd, r20}, {0x9, 0x10001, 0x8000, 0x0, 0x7fffffff, 0xff, 0x2, 0x7ff}, {0x401, 0x100000001, 0x100000000}, 0x40, 0x6e6bb8, 0x3, 0x1}, {{@in6=@remote, 0x4d4, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x7, 0x1, 0x5, 0x3, 0x2}}, 0xe8) ioctl$TCSETX(r4, 0x5433, &(0x7f0000000140)={0x3a, 0x0, [0x8, 0x3, 0x0, 0x400, 0x7], 0x3}) 22:33:34 executing program 5: futex(&(0x7f000000cffc), 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fcntl$getown(r3, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0x3, 0x1f, 0xc4, 0x5}, {0x5, 0x0, 0x20, 0x3}, {0x0, 0x0, 0x0, 0x2}, {0x3, 0x3f, 0x9a}, {0x80, 0x2, 0xff, 0x79}, {0x3, 0x2, 0x40, 0x26000000}, {0x0, 0x0, 0x1f, 0xe59d17f}, {0x0, 0x40, 0x7f, 0xffff280a}]}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0xdc, 0x4, 0x9, "98c19ae2e31e33dece9cd9627a73b983", "951b6863371f6230718402d3491393ed281be0c143e8a7c16b7d3d39ba93a051c371e01c56d127737a0f3ee1991340be4cac0c11e6e06368577b721bd24715431fa783d88bf43409a107030fa110eebc61f96bd4c71c67b5a2d3024b8bd844228b49d297ae22abdc8f4d7f2bcbaa470affe132ce5cebda3e003157573fc1fbf2b955e50828fe78e1dd345832814e43a1693116dfe41cec0a473fbb7c2c2e9da4e07c36bcb53c428adebba2250ee53018547bdc3f765486f25878a1e1c6151a5fbcfcf3ba149b54"}, 0xdc, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$ipvs(0x0) syz_open_procfs(0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x1000000000016) [ 503.576829] binder: 22739:22741 got transaction with invalid data ptr [ 503.589172] binder: 22739:22741 transaction failed 29201/-14, size 16384-0 line 3155 22:33:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}], 0x11, 0x0, &(0x7f0000000040)="f4be0759dc34cc605d8d2c45e5abdcb627"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 503.632358] binder: undelivered TRANSACTION_ERROR: 29201 [ 503.640198] binder: BINDER_SET_CONTEXT_MGR already set [ 503.653236] binder: 22739:22746 ioctl 40046207 0 returned -16 22:33:34 executing program 5: r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r1) r2 = socket(0x1, 0xa90dbf012d5bee4c, 0x0) write(r2, &(0x7f00000002c0)="2400000021002551071c0165ff01fc18d7220202001507000100ffffffffffff000a00f8", 0xffffffffffffff61) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000140), &(0x7f0000000180)=0x4) 22:33:34 executing program 2: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r4, &(0x7f00000001c0), 0xbab230cf) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = socket$inet6(0xa, 0x2, 0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r7, &(0x7f0000002340)=[{&(0x7f0000000c00)=""/4096, 0x1000}], 0x1) readv(r7, &(0x7f0000000580), 0x3c1) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$setown(r7, 0x8, r8) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') readv(r9, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000580), 0x3c1) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000180)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$setown(r9, 0x8, r10) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r11, &(0x7f00000017c0), 0x3a8, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r12, &(0x7f00000017c0), 0x3a8, 0x0) dup2(r11, r12) sendmmsg(r5, &(0x7f0000000600)=[{{&(0x7f0000000ac0)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="64000000bd8a978c8100000077f97c9b2be9eb81bc601367526f4d7d1b81085bd2b0c56e032268e6dc4d02a3f0fd40f2cbe9e6fb5d1f3cb77973ee3c50cc0459f7bb8ed6072ed1bcaed4ad79ec0e56e18ec293345a504b5e6620464304299900dc0000001c00000000000000fd91d22644b957ae1eae7803e37d3d75d24f7d003c000000e62a054608000000b75d27ad4c17e28fb2234cb1275e7b33225a88efd49790df847d2d4c26477a2a43af01c3d3edd204b93e6075510000000c0000003d010000000000009c00000001000000cf0f00000a43b18b492307ce8256c9b25e0ab86c7ab4203b7c4b09d265c43421b14f3e4f2606c70e46db517299f6e8c29d1910d0cdfcc6b3de83e929296d83669ecad7ae3de84fd712324bd005b2cfac8566d7bf351411d933fc2ea29cc021349cf20d9726cb3dbfbf8e1f2e2e15d16e992f2ffa66114fdd6e8133576604626c0b064849f61af6f7bcc290a0f6c0a09a633a0000bc00000015f7ffffff7f56c28f11baa554e7f55443f169788776e38ad86a4efd993ffc1147e6e4bd2480a919426ca2ecda81a8a853805148af89a40693b3885672d0955d551e36e49c66a6bf50182f109f2b60b3d81810e2e6d2db9121a3b9b7cd76e10fac7914b59a04af563765389ca786b6eaf0ac079c06fda73fbde776c8a884da4259567ddc36690fdf0ba2ff893121bbae84bdd378e9ab86708a95008f51f804e782c977a2898f44b3d8b8540130dc1b5976f9905161000000"], 0x220}}, {{&(0x7f00000009c0)=@llc={0x1a, 0x7, 0x4c3, 0x2, 0x1, 0x1, @random="5f54c77a9fd3"}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000a40)="85b36f10dcb1a33832e3fb4892757d3cba4e3238c324c9596ee9695cd44d6b1098180799725bcc834ebcbc65f6b2ce8abec4cd3088b19540d628a9774fdb3190f30c6985b7d556c2514a5bb87cb35ebad5200df1840211fefa78f409526456", 0x5f}], 0x1, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=r7], @ANYBLOB="f5d1555f817fa07ca7377d597df85b57ab8b3df8b0d78a622e42966f6c304985c9747489b6c1b51288c3a484a8b07dc6335348f5eb240a138344dc8cc1c3ed1418e2907f5a1439c2c369d894cb9ce94de46c7c06b6661675335e80c6f836e971c40cd0184404580cd17dc0bc81ce587b1ef8ae6df6cc68ea3868444c58cda8eb9fb5d3", @ANYPTR64, @ANYRESHEX=r9, @ANYRES32=r12], 0xad}}], 0x2, 0x20004000) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000140)) syncfs(0xffffffffffffffff) getuid() sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, 0x0) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f00000004c0)=""/105, &(0x7f00000001c0)=0x69) 22:33:34 executing program 5: getpeername(0xffffffffffffff9c, 0x0, &(0x7f0000000680)=0x8c) bind$unix(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000001680), 0xfffffffffffffe63) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_emit_ethernet(0x1, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000640)={0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$inet6(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000340)=""/25) connect$packet(r1, 0x0, 0xffffffffffffff65) socket$inet6(0xa, 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000980)=""/97) sysinfo(&(0x7f0000008c00)=""/4096) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r2, &(0x7f0000000000)="17dd06db84814adfafc4a2306aba7fb09ccb36a9", 0x14, 0x90, &(0x7f00000006c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = socket$packet(0x11, 0x0, 0x300) getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000001ffc)) recvmsg(r4, &(0x7f0000000900)={&(0x7f0000000380)=@ipx, 0x80, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000400)=""/239, 0xef}, {0x0}, {&(0x7f0000000300)=""/50, 0x32}], 0x4, &(0x7f00000005c0)=""/127, 0x7f}, 0x42) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}, &(0x7f0000001a80)=0xfffffffffffffe39) vmsplice(r5, 0x0, 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000380)) bind$unix(r5, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000580)=0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000a00)=ANY=[@ANYRES32], 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffffc, @local, 0x2d658}, 0xa) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000092c0), 0x7a8, 0x0) [ 503.872358] binder_alloc: 22758: binder_alloc_buf, no vma [ 503.917504] binder: 22758:22766 transaction failed 29189/-3, size 16384-0 line 3137 22:33:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="020200020f020000000000000000000005000600000000000a00000000000000020000000000000000000000000000000000000000000000010208000080000042ff21fe9a93a1a18cc43b4092e5e724fda908ce258a444270b489513010b7a96dd0d291ad36c29dc407bc8493386ac8b4024a0e308b05ed8cd28aec2c8eb7e8aca9333d6cbf00c5fd615a8e187306e7d804d2482da0359eaa67175973403ebe008e61d5c671f34d3a1ae166065ce8c75d8ea67d1f6985ae492ae18c0b4017bd98b366953c1edaa28562b393825469355b5510e89aeb805e3936d1968b3553921bb59de7abaa499e8f9faeae16c573966f9112034addc4f36b63a77ccf56d7f8f1f28dbc69c9178a3b286cbe847db5bb290c2831040241b5258b8dfa6fedf7d3960250baccf40386c56cdd0e6a21fbb389f7b51dd4038afe010cd533407423582bd5e6e6609405fb557b005dc05f6ec121ef826a5019ff7bd18dc4a4a307fa48af12b16a89e58a8728ba5bbe55098572f96ee5a18692197a52789af9ffaee749c984732db25d6f4f9ddb5384b3426d26aa0a045f2ea950742e9ec55200b30a85a8ea109b46e3749f24603292034e764a6bb09642f43a793bd7cdd87cc9f2b46d84c65d3677eb15b5c451648abcdf0e63220b5403423d244721c4788e08a7ebb00caece249bb46357bf8c3375cf1c6f336856c248efd9f0236e7f0f7aa8cbcb721b6f92a96ed0ae45d295fd5a29b2a70724465785896a9d160ffd985fa607d5b3e9dcbe5fc9af93f83ae8be5e06dc6cf1958fd193d900e5c2c98c8740d447231b2e858329eef6a2ca3f5c39fa43fd46c4bad48957cedc07383b64378d0773815d323f6477d7f50954a5fa4923682afa87d0f7c5340f548df7786d4d931a54df4a708bbb0d044d0c7b52f912a8b71d28a80126fe31cff28884e26f9ad3f04790b4d2644c03812c44e416d02a898d4045f06dcce7baa41509fee366d1e61c557e8601141e661485e8b0fe7591e0384d86edd84d7b6080851ba0bab1de3615a80c9d1b0bb8fe367faae347e6c1dae996bf5fb6def7fcc5d1520ebed7e5a6b50ddb6fc1c92c88b9e2272b3e4fe516d690922801c1edb112f47ff86fb422099b417040bb8adc94a3630c2378c2911bb40f3d3109f9c4584a490dcd2f0b7e4994596f87a633767d3d229e7461773a9d0647dd92ac4189ce06b3ea0e2de7d809501af537b64891f220e5674260a822bc0abd2eaa695b71687918aa2ee032f4b9115ffd908a20b2922813db5364557cb7b51508694125087b91c5b7807b5277ac1ba890108e4b0e87272c521dda75537de70c5ec5d5edddffe3cd5b335e08b2a355ce9d1c81a81572da75ce918889f5031f36719f2f9d31b93f2526f0a2c877f4e7b5a4f82e003a29996e908f20964f714c7b2dbeefd4b87c0d35927983ceb6a71f6be7a886f4d8820c38c18df41c6849c77a3edf3970766ef16ae9f42b58471f570b20c2331efff817ccae088bfe17ef5ef7659c28a94349d33fdfe8a9a4924c0f8d1ed2c8ab2ee7f15099c39fc04ae0d81e600caea0cd5962804e66038cd8de687b65562e460df375f2e269d1b9f8023eeaf79fb5f8bca32a4102bbf8221a7e0ecd1a5cbefb7640f907c8c4e071178627ba3a170d10e4179f91fb967d5093205bb48b930ed5a5dfeb9650ffd83137eec54f9787b3598b6ac1216f50639f2f27073fda3bcd0d29423770d5ceb5bc3bf207cca69226d54d10bbfedef98b0f5aecc85445c62c27159e07d33f7bd0ec3803b0f4baf205a952333b4126aeb7c89875707d4a204674b72817e126d90937a11bf323ed14ec6a0aa9ad95c602d3e58a3431811f53e83854dd40d8863f73b25a5b3dbe20a5abe31d748af804fc8e78d7656abe78ea4dc46a2f9150e161f446bf9e050ec49d7cacf215a8cc3a3083fe7728d7d4e3315ebc5fa43e09365c41724ea10af134487e59855cd987c873fbfabbbaf0f0fdec1ead6771c634dc432c38dda45aa3707e69e17439d114bbd802117b114b80058325da40f096e825550604f7c696d8f1ae3283361d19899d98dc6bde787794554a71c1867243cb718a469b5577b8f960bfa30f6dd164f47b92fc5f2696637046be3c55b68004740f3df71c9a7b9f5b7c58a17f8b6b1bbf895584392d5eac4105493e1331795f8e5e01230a467f82ce431f0e24739af6731485e1bcdbf6ea90406ebc01dde51f7c274e8cc8e8a96aa2214ef019f1940266c82807eba74111e2b64ea6e50cb6e31b872493deea23e0987d68bf7146712aba83d756abeddf09ecb64b91552fff4e6a5a2e4ceb483fa315b41da2d52b500e28fd62b48992a5ad2bb467677d529d2888985e4fd3e919b1558d259562f73bb0a51c85e8be85ed327875392997c865896ad75b994cf1532fab8cb324f233a370e44f28e1dee36042fc2f1ff53f77a80ffcf26e52d56e1d636f330a432e64b1b3458769ac60196445d3561fbb1a4f67d82db95c0414e64e519d8853cf216c5511000a8c8e8a3cf52f2aee8b2e465f76016bbe6286bb28f3ad43c8b8a2c97ef29bcfdfc2a053324dbf5c0a102c3766ab0bcb41ca411caee3c3902266440a1198e3fe75b25ee6b5b0fdb0684e7505b8f96841e299153fee5836ccd5bcf7f81848f809c93fed2b535aa12bb8c4dc77995d5251938d0ff8c6e002f600a2b59cfedd94146d2d13d61f79c1c2689c56f7b36b29956771150ee5cf63cdd15f4b84f1dc952d841fcc497854d82a4045eef9571f46052c11cca85d8afbf716f1e51bac7132c49b5b5a1075c92813ddeb70839772aca741919a307fed527645ad787a9c5030d870ed680d8f5e0d605b52b8ab9f2ae59088b3a28a057407b551c0002f53217c9406bb6e7f2531ce5721ae2d0f11033e375511918651d2ce20d9200e646379ff9e039bce64349f87038d3979293cc1be0c59255ef5cbeb471f1cad209a08cb9f875e3e2967b31253094e5fbbfa8b160df33b6ccef861540c7a090ace0071d3b8f19766d2439e9b993b1513cf287178d7570aed4a33abd528e44bc6e84f128fd067d6754aeaefb0714265bca393811e59bc62f9f6fb80891ce21059b6488bb6d1f1be6e5cbc4ff6b21a1b7744573bd4f81c5218fdb66c59ec559200b6346b82dacadc83bcb9876677b142a846151afadc8cf2e846a24f18dedc317fc19bd4a59aaa09f51a2cd52d1906deac2bcb17c5d8c02ce201522641b49b85f1b4afe650d002167072287737ec7cef7b57c995dd8b54ef9f085fd355dd5b0b45a160b382e78d5f37ef75e693cffd3fce60850d7375f10d55713d82970fba0ed168dedaf00645760685785a10bf9d3dd8c86f01e1f958e362530fb604afdc5d1e80274f9d171880caf70bee907ffb0537502d77733f77541d22fa364cde62f3b7dd4e1b0c47b61aaa407c806a3233f577fe4ffa1d5b12311791f8cdb24194a8a9c7b52b651ccf6ec0dfacac7d3a8430865f6f41f4f7b48bc6ae4b1586c387d6136f5da033dec15c3f4451100e84a5196e775092bdd36d58ec7b839a8a5d7753f84445f2af0e49ba05bf651c11db477887767406fd3b011b1e03fffc39faea6629311ca7acf25de0f92b79a6ff6bf4e174eb0bce2d55fd13e218cfb3722e036dd597043ac8a127af49af7d29fb69ba467bc938d25f29291efa676f63380a14abb849fcd63d4be5df7662019c8ff86b0dc67c0809c0808ff919908aec61c6115e3e081c907d75ff1451e27941845bd18a8a2d922a8dd46c29125049debcb0581c139cb4a6771142132282569abd4f6c9c6de01a0fda19a0db78a00c68c78a4fe11512071b9aa5b9505b7f440a21bc90f463a352cc3958583b3db84101b8f7448eff87d042fae68e1a5e164ce6afc1d89ba63ce0d5778ae8aea672ef2639f3cf6c02be89e06225a9e3a2d66a330bccc234f78bc6634b6b7143b1013fef38f3eca12fcf022ad8eff96f78db53f6af531661ab816cf19fc94476deb097d29354fef597a8568da9f83280d09ba0362a2470acb3eab2ff1754940ff5ebff9608d79a3907169ede6d0a331e39263d9c7c3fe9c0d68360c1affe77c8e1c88942502b7e5cc1756358d9c396006b4208c2d9ddb58cb5079ef91cd2649f1cb1b5ce1ee066172cebe114121b33a4188737dcadbaf0277c99aa271c691f98845f04eeaa785e3d044bbb0a161f90a761f1fa1d2765c827a98514e815f2881ca36b3649bafd19ae758bf2efe351d8233348a6d181b3fd7bdf2cfe4381713aac3c594d99c411b59079f458ed1c2ea492ef22f35a586ce8476a52b9a73b7557c1759ba41d75a0756bfcadb62b801ada31235dadbd29bc4472009e10f6228c7acd1dc3f1d9b937292ad008229fcf612583ba2fc1a557386e6d6ce83b146017501efc53352a93a27868f1f9dc620e600f9ace5a0711714f5022b07c1d9b1a6e2552223823769666a513f2f32b0db30dde71f35a6e88ae450cf247cd4490add6d678193bf57bf1dd4b8a24ba42669b4381ae4e99dab038d926e2e064be413d3b392d0c88ea70e7c166a870786fe773024995fb85fb94e7158524b90c547c8ba519aa38ebde5ce338c3062fc516925d1407dafe1dacbaa58c88a4dc07b680c4507bea737c266382d9d0101894d27655c4845d2e93f40ae931ad237093033207bd0a1d33fb8bbbe5a74efe5a716e534cf5c5b240b9a6c5d90594d90e4f79f083d95617ea645e66b46e4b23f9d1e10bdcb1a7d8e36aa9a09b91d2cf67b1dd9a2ab80fcbf6aa56fa9827a5712bf6c89d390afaf2f5678741f755d76ff4b75d27ce7fa4c09b0e4a40055ef17ff1b3a6f68b13de9e2d762ed3c9adc751945ee5cbd7f883bc218a2d02ddad3aa49b9e5bed88df57a614b971209f6289ff75d6b959bb2f53769a4e30e388d2132ef97e432b4b715a7254492466b0d0823c2cd1391fe5ebca2a5e84c74cbf6572479a1c642e3f21a584ec41aeb73a99c5790dcdbf3264c2b3238bb4ebcb9b0ca3b48fbd1bc99bf7f49472ab59d31d72004caac2bcefdf755d08bc33829e83476fb16e2c9e195297646b0e2e18b321adcff7836e5a8346d412691d760361c3f3b30965013f5c415cfc89609135df19b2e92b50f815637c175de43230036eb151224cc3bf9ffac8ce4bffeee905af67816f10c3e59d041390cb6f8e9985fce26dc1d31daae2dd42a8b1c71d48cb74fc29d0f10300000000000000611f50e80af3d79859b6fdb52cfd7c3eece230853a4b1aa78cd6b2bc04d9fd53fa4ae404c317cb7af85138c8bacaca21d0a260a233d8f4c4aa161a5d9a71c37dab7743bbcc56e3743057deed2cc45cbd84cd0d7691cc58ba15dfad1204169abfbfe2bc9f958524e93450345b76e57002bd666523a4c1ee84194efe5905d525001c5c1b4094841b71c41aaa2ff1280b588db8c76ab40b6c28bec3a929bf6b429d57ec8afcebe5b3ffbd9901b7984daf1186ca31a8ed4b978f101b8203adbd47700686f5b8b9eac202bf236e6a2801748c78263beda06b7492e0c7f2a6b7d2eb7efa7aa5ea57b57fc9813239e9f9d9430c29355e5f017647cf22969b66b798c09c2b7cae80e2484dcac3ff0d877a2adfc4660bbfec7addc33e493750286d3cc973e842ddc9acdfbc469d5574ebc6ffccf2bb818cdc5a9a87bf31557907475e8b652f1ae265002458e677510da571780ff1f3d94b896894a778d21622b6e6b0817d48b2cfea23cc70f45870cd36f15bbdae7931035c011e8599c0eea9f08bc95b0a51ed49edf6b7f0e7035c7a49ca5f48794a40c2cb1117c14742fe398f1abb5369dd550587d02651064522f1e84b65f02fde05a4c495b15ec1cd7dcc657a4c713bc57295ccb491ff274d2ce51dfaa151b91b605a132aba366dc57c124ee0850931c0fbc4bf340f100200010000000000f8ff02000000000005000500000000000a00000000000000fe8000"/4219], 0xfffffffffffffff6}}, 0x800) set_tid_address(&(0x7f0000000000)) 22:33:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) connect$inet6(r1, &(0x7f0000000340)={0xa, 0xfffc, 0x0, @remote}, 0x9) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x10010000000031) fcntl$setstatus(r0, 0x4, 0x590b302e4c793f6f) 22:33:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000001700)=@l2={0x1f, 0x4, {0x0, 0x2, 0x4, 0xef, 0x0, 0x9}, 0x36, 0x5}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[{0xb8, 0xd09c60bbc498b2a2, 0x9, "22db2db21299b4f1a67d662c33855dc509c6cc40e913128e16a84bc2a39aca184960fbd7dfc79cd3a0c04f80f9b562f28306f9f88fef666486c4db662285b4c7cf5798874bec0288f3a8740f01c3df04f9c9dc5ef0f459a3b0564ccc2fef58919be110648bf58ae6a124f84be254a31ecc661ab804bf5fe73c782bced83db18e7f75dfd241be19461595db255b31c288e599503613b76ca7232468f6246067f92a2f88c9aaabc63a53e18e63"}, {0x100c, 0x0, 0x80000001, "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"}, {0x4c, 0x106, 0x211c0, "ef0193d49006a0fd1125b32b96d9ed66a64197f7d8325f4e877ec562affa45ca7b8e2e7e7f40843ac191dbb04b7cd30141350e7208375ff4c1e910cec4"}], 0x1110}}], 0x1, 0x8000) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xfffffffa) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) ustat(0x0, 0x0) socket$packet(0x11, 0x0, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0xfffffffffffffe56, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) pipe(&(0x7f0000000140)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000001680)='vcan0\x00') shutdown(r2, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r5, 0x0) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x1d0, &(0x7f0000000380), 0x1}, 0x1001) write(r1, &(0x7f00000001c0), 0xfffffef3) poll(0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xffffffffffffff14) read(r6, &(0x7f0000000440)=""/250, 0xffffffffffffffed) ioctl$KDMKTONE(r6, 0x4b30, 0xfffffffffffffffb) getsockopt$SO_COOKIE(r6, 0x1, 0x39, 0x0, 0x0) getsockopt$inet_buf(r6, 0x0, 0x10003f, 0x0, 0x0) ioctl$TIOCSPGRP(r7, 0x5410, &(0x7f0000000200)) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) 22:33:35 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) creat(0x0, 0x10) read(r0, &(0x7f0000000200)=""/250, 0x50c7e70e) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, 0x0) syz_open_dev$rtc(&(0x7f00000005c0)='/dev/rtc#\x00', 0x800, 0x400) vmsplice(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000600)="f15837e8ce2fda87a1c89b8a770eda134db3e28d699a6ac5db5a2cf89bab866d0cc60804de46203f507553313f6b7e9570d8cc8b4aa6343b3ee13f8335b3a8bf16f4f1cf0d669fc2b1fd20c9cc1207a5ef2dd06831e65eda774634acfbf19bd81d76f72ea719637ddf71f4f72d8fa4bf4b6eccf6c0a5bd2b7ea3b1c3a8384dc313b6cadaeceffe720ff26533db2716a198b5d447be3342c3a59bcbaba04238", 0x9f}], 0x1, 0x9) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x5) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000440)={{0x8, 0x2, 0xd3, 0x5}, 'syz1\x00', 0x48}) fchdir(r2) r3 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xc000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000004c0)={0x60000000}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xffffffff, 0x1, 0x4, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x69eed86a, 0x2}) r5 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioprio_set$pid(0x7, 0x0, 0x5) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000180)={0x1, &(0x7f0000000500)=[{}]}) ioprio_get$uid(0x3, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, &(0x7f0000000380)) unshare(0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000580)=0x401) fcntl$setstatus(r3, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) eventfd2(0xfff, 0x856cca6e2cdcb2e2) setxattr$security_evm(0x0, &(0x7f00000001c0)='security.evm\x00', &(0x7f00000003c0)=ANY=[], 0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) [ 504.571689] binder: undelivered TRANSACTION_ERROR: 29189 22:33:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 22:33:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x100000000003, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$KDDELIO(r2, 0x40004580, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x72df8a2b8f21be1, &(0x7f0000000440)={@initdev, @remote}, &(0x7f0000000040)=0x148) connect$netlink(r2, 0x0, 0xfffffffffffffc75) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0xfff) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000000)='teql0\x00') socket$key(0xf, 0x3, 0x2) r3 = accept4(0xffffffffffffff9c, &(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f00000000c0)=0x80, 0x80000) connect(r3, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000900)=""/246, 0xf6}], 0x1, 0x4a) mlock2(&(0x7f0000953000/0x4000)=nil, 0x4000, 0x1) connect$netlink(r5, &(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x1045000}, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000100)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000580)={0x7, 0xffffffff, 0x800, 0x890, 0x40, 0x6}) write(r5, &(0x7f00000001c0), 0xfffffef3) setns(0xffffffffffffffff, 0x40000000) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000540)) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_mreqn(r4, 0x0, 0x0, 0x0, &(0x7f00000001c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 22:33:36 executing program 5: r0 = socket(0x1000000010, 0x2, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000200)="1f0000000104fffff13b54c007110009f30501000b00064000002023020060", 0x1f) r4 = getpid() wait4(r4, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000040)='schedstat\x00') 22:33:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200200, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040)) [ 505.043626] binder: 22816:22819 got transaction with invalid data ptr [ 505.061250] binder: 22816:22819 transaction failed 29201/-14, size 16384-0 line 3155 [ 505.087335] binder: BINDER_SET_CONTEXT_MGR already set 22:33:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000800)=0x8000, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x104) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000005c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f0000000180)='./file1\x00', 0x18) socket$key(0xf, 0x3, 0x2) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r5, &(0x7f0000000500)) [ 505.130360] binder: 22816:22823 ioctl 40046207 0 returned -16 [ 505.130424] binder: undelivered TRANSACTION_ERROR: 29201 [ 505.151857] binder: 22816:22827 transaction failed 29189/-22, size 16384-0 line 3014 22:33:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000740)="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", 0x6e3, r2) r3 = add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="6f5e43f18e00d22ac60987d887fcf2991309e9dd8257eacbefa1540156b321d3d964a9b384470ec1a9b69a96bc005af7fb9dcbddb1bb0701090a5db55bc3a5c3ed0fadb620fa72f178b09b6bc25d20cdb472130c872429a275f6ecccd0b99b548fb952508660b5eb5acad09448701d75581613c128756abfba830d2fe322f66eabbe7aee8e5fe21f6b378c36ab9c1412a33fd77a62093343d7667fa90d1e83d512702e65d35e52f2d50a73dc44b2532ce0f87fa898bee39f6808c2f13f37b976f1b3745218aeedc39af0ba96", 0xcc, r2) keyctl$read(0xb, r3, &(0x7f0000000280)=""/82, 0x52) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x480000, 0x100) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x5, 0x6, 0x3000}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 505.190158] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. [ 505.203139] binder: undelivered TRANSACTION_ERROR: 29189 [ 505.351144] binder: 22834:22841 got transaction with invalid data ptr [ 505.357799] binder: 22834:22841 transaction failed 29201/-14, size 16384-0 line 3155 [ 505.367733] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.5'. 22:33:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x1, 0x3) socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) fsetxattr$security_ima(r2, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340), 0x1, 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) fcntl$getownex(r4, 0x10, &(0x7f00000006c0)) fcntl$lock(r4, 0x7, &(0x7f0000000300)={0x2, 0x2, 0x7fffffff, 0x800}) r5 = openat(0xffffffffffffffff, &(0x7f0000000440)='./bus\x00', 0x484801, 0x54) getsockname$packet(r5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x9d8efb05f6f2cc22) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r6 = getpid() socket$key(0xf, 0x3, 0x2) prlimit64(r6, 0x10, &(0x7f0000000140)={0xffff, 0x3}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000002480)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) fchmod(r1, 0xc0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8002, 0x0) read$eventfd(r7, &(0x7f0000000580), 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000026ff8)='./file0\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./bus\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(r6, 0x0, 0x41000001, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) 22:33:36 executing program 3: socket(0x18, 0x0, 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x352) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='bond_slave_0\x00', 0x5, 0x8, 0x7fffffff}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="a65c41031cf925b816b9b0fbb82c6a92ec55a2340bbd9eb316b66ccd14d45f2f184e55589c24b3bae4f7c8d425a5d5d2f81637a0867ccbe69fb5a5c809aedabb07d184b548644cc7f101b67fafed9b93947875b026dbe86d257b1a22f9b4e1322205113f811eb4a8388ec9f623cf"]) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r4 = dup(r2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x352) connect$inet6(r5, &(0x7f0000000080), 0x1c) r6 = dup2(r5, r5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000440), 0x132224) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) io_setup(0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000004c0), 0x4) creat(0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) 22:33:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000380)={0x0, 0x2000000229, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) splice(r2, 0x0, r1, 0x0, 0x3cceb668, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f00000043c0)=""/4096}], 0x200000000000002c) readv(r0, &(0x7f0000000580), 0x3c1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000240)=0x0) fcntl$setown(r0, 0x8, r3) socket$inet(0x2, 0x2, 0x2000000003) syncfs(0xffffffffffffffff) r4 = getpid() wait4(r4, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000300)='setgroups\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r6, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') socketpair$unix(0x1, 0x8005, 0x0, &(0x7f0000000480)) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000080)}, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) fremovexattr(0xffffffffffffffff, 0x0) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000640)) clone(0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = getpgrp(0xffffffffffffffff) wait4(r9, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x40000010000013) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) 22:33:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x5ae) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair(0x8, 0x3, 0x1, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000780)={'filter\x00', 0x7, 0x4, 0x4dc, 0x0, 0x15c, 0x15c, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f0000000740), {[{{@uncond, 0xf0, 0x15c}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x9c7, 0x7, 0xc851, 0x0, 0x0, "5c8ed189fcde38a789c6cc2d2c4b61580a7e01f97e19726b264f07b618e149c33d2e266d6925fcef09ed4df7decd741eafcaa54aa1f55cf5f4c45b2cbc775038"}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @local, @local, 0xf}}}, {{@uncond, 0xf0, 0x15c}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xe00000, 0x2, 0x9fc, 0x0, 0x0, "61311d1d61a4f1a6b7e1ad1531fea793c5e7d55079d6136add5dc1b044d83636c774ff92138b4fb0a9005eac2a647d8c4e3d7b8770f7f0226e4720017fb0687b"}}}], {{[], 0xc0, 0xe4}, {0x24}}}}, 0x528) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x3c, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @dead_binder_done, @dead_binder_done, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x3}], 0x72, 0x0, &(0x7f0000000100)="7f737223f7d0149f5cd9316cf6c5462cd132c75be8f558fa6536e7fc6128e7773d02587d3b50068cc2263d395703ce3c273d279ec27f1466c47a665d014c0a89cfb76babe4aef3f70f38d679681ae688b07ee280202fa7eca18438b99119f7252dc442cdae7668b799ba7af6227791573a6b"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat6\x00') write$P9_RREMOVE(r5, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000009000000000000050000000000400000000000000000"], 0x0, 0x0, 0x0}) [ 506.085822] binder: undelivered TRANSACTION_ERROR: 29201 22:33:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000800)=0x8000, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x104) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000005c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f0000000180)='./file1\x00', 0x18) socket$key(0xf, 0x3, 0x2) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r5, &(0x7f0000000500)) 22:33:37 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r0) r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="650000007500005a000000e9667d65872e5c70329e077bf6969437a260fe155c0229fc60c36767a84e7fa2e63352556570470d912726cb6f26cccc07133f5076afb74d55da442c23a2bbe6c040c846158e8ff50a608a183aa5cb09e0d6c51f79d1020900c0545174a173846d76a54771bf595a97aedcad09bad0c3d19d67be4a7d88c733c9077f2c78c0fa227a574fbe933cbfc623b735d340c12c0ec61968370793d056de16432d530550b4bcaa18914f74e7ccefffee9922a8d31c9400"/204], 0xcc) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001900)={r3, 0x0, 0x8, 0x10001, 0x4}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x6}) r4 = gettid() ptrace$getsig(0x4202, r4, 0xa2c0, &(0x7f0000000400)) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syz_emit_ethernet(0x12b, &(0x7f0000000780)={@random="42be4ee4bbc2", @local, [], {@mpls_mc={0x8848, {[], @ipv6={0xd, 0x6, "7b02ca", 0xf5, 0xff, 0x3f, @dev={0xfe, 0x80, [], 0x13}, @loopback, {[], @dccp={{0x4e24, 0x4e20, 0x4, 0x1, 0xd2b0, 0x0, 0x0, 0x2, 0x5, "3887a5", 0x5, "9a2e21"}, "84d913e12c046cb01ae95a10b3a53afc560f5881f9f6ce7f75c6a1d5299d3d7c430bf1fb7c270d2771e42d3d24bbd58b92dd13ed7cc256361606735e3e6c5c4646e40de9ab06d214ced55a0fcb320020cf1c3644dc3f9578ca9fce48b0b47eb230a55173323aa9d3701b0d428b2c98a49946189eba44d0c1c22b90d465c0e79ed376ea80169b1bc1be6790805891376606a54560ba72cc6597555e999b15e008e5206c1440e5e3a76d53196b1b451a540d0512dcc2ffd86bec7aa1b6f561172f2e93d5356e5387cd1ce508f8b86f0fadc879c1ff0f5f18c121c620dab72b936332963edbf2"}}}}}}}, 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) fsync(r3) r5 = getpgid(0xffffffffffffffff) get_robust_list(r5, &(0x7f00000006c0)=&(0x7f0000000680)={&(0x7f00000005c0), 0x0, &(0x7f0000000640)={&(0x7f0000000600)}}, &(0x7f0000000740)=0xc) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4) ioctl$UI_END_FF_UPLOAD(r6, 0x406055c9, &(0x7f0000000500)={0x3, 0x0, {0xef2c12bf37334b96, 0x2, 0xfffffffffffffc00, {0x20f6, 0x2c}, {0x4, 0x5}, @period={0x5b, 0x100, 0x2, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0xc4}, 0x0, 0x0}}, {0x53, 0x100000001, 0x2, {0xa22, 0x1}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x5, 0x2}}}}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) clock_getres(0x7, &(0x7f0000000380)) r7 = add_key$user(0x0, &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)="d03e559f6cdb5f783badd470585c7f2d19409e20a0d7aacdd66d035cc3994926d1070490ab02ba7d0fca1d5720ad10", 0x2f, 0xfffffffffffffffe) keyctl$reject(0x13, r7, 0x1, 0x201, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'erspan0\x00', 0xfffffffffffffffe}, 0x18) read(0xffffffffffffffff, &(0x7f0000000280)=""/211, 0xd3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001b01ffff0000000000000000000000005a412c921fd6127c2f92c98a2df82af62c3039bf8a51bfa4661c8cb73713622631b6111300ed126be52a2f0f01c87c369ef14412bafde2993dba6b046b14a8a0a563d6548c762d687933203605e2737b9aef75b81944a78c2dab51f615c583f835d0fcfa20a047f8"], 0x14}}, 0x0) 22:33:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 22:33:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 507.164999] binder: 22899:22900 got transaction with invalid data ptr [ 507.200621] binder: 22899:22900 transaction failed 29201/-14, size 16384-0 line 3155 22:33:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 507.244281] binder: undelivered TRANSACTION_ERROR: 29201 22:33:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000800)=0x8000, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000140)=@generic={0x3, 0x4bc7b0e2, 0x2}) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) fchdir(0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x104) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x6100) truncate(&(0x7f00000005c0)='./bus\x00', 0xa00) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r5, 0x0, 0x2) sendfile(r5, r6, 0x0, 0xfffffffffffffffc) sendfile(r5, r6, &(0x7f0000000040), 0x8000fffffffe) mkdirat(r3, &(0x7f0000000180)='./file1\x00', 0x18) socket$key(0xf, 0x3, 0x2) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(r5, &(0x7f0000000500)) [ 507.334068] binder: 22905:22906 got transaction with invalid data ptr [ 507.356864] binder: 22905:22906 transaction failed 29201/-14, size 16384-0 line 3155 [ 507.398091] binder: undelivered TRANSACTION_ERROR: 29201 [ 507.408971] binder: 22905:22912 got transaction with invalid data ptr 22:33:38 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xfeffffffffffffff) socket$inet(0x10, 0x2, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000580)) capset(&(0x7f0000000000)={0x20071022}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffdf0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000480), &(0x7f0000000180)=0x4) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x45060, 0x0) ftruncate(r5, 0x200005) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x20000000032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000100)) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000ffffffff) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = open(&(0x7f0000000380)='./file0\x00', 0x141042, 0x0) ftruncate(r7, 0x200005) sendfile(r6, r7, 0x0, 0x8000ffffffff) write$FUSE_NOTIFY_POLL(r7, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x7d, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) 22:33:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) setrlimit(0x6, &(0x7f0000000200)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 507.447299] binder: 22905:22912 transaction failed 29201/-14, size 16384-0 line 3155 [ 507.478117] binder: undelivered TRANSACTION_ERROR: 29201 [ 507.589522] binder: 22919:22920 got transaction with invalid data ptr [ 507.613174] binder: 22919:22920 transaction failed 29201/-14, size 16384-0 line 3155 [ 507.643235] binder: undelivered TRANSACTION_ERROR: 29201 [ 507.666098] binder: BINDER_SET_CONTEXT_MGR already set [ 507.683705] binder: 22919:22925 ioctl 40046207 0 returned -16 22:33:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r3, 0x0, 0x20020102000007) r4 = dup3(r1, r3, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STOP(r4, 0x54a1) 22:33:39 executing program 4: fchmodat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f00009adf60), 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xf6, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\x06\x00\x00\x00^\x00\xac\xd8\xfd\xcc\xeeq\xe5\xf5\xcb\x801`\xe48\x85\xa4\xf5\xd0\x1b\\\x04\f\xf8F\\\xb4\xba\x8d\xef\x12d\xee\xa5?\x00kZ\x8b\x19h\xd7|\x14i\r\x18U9\xc1\xd7\x10\xf0G\x12\xa8\xbaa\xb2\x94|%n\x1e+\x9f\xbb\xb8\xac\x81\x8d\x93q\xd4\xd4z\xaaZ\x0f\xaa\xc7\x97#\xe5g l\xd55\x15\xbf\xfc\xf5\x83\xb72\x00Y\x15\x92\xb1\xb6a\xf4\xe9u\xb2\xe7\xeciy\b\xdb\xc7\xf1\x87\xc9\a\x91\x04J\xc8\x0e\xff|J\'Nxr\x00\xbc\xab5\x9b\x85>\x99\xcaz2\xabKI\xdc\xe4\x9f\xa5\xd0\x0ewm\xe7\xccK\xc9\x8b\x8bE\x89\x03\x00\x00\x00}@Ry\xa69^\xdc\x9d\xa0\x04\xdf \aelO7\xf1\xda\xcc\xa2x\xc2\x9a\xf5\x18F\xa0\x80M\xf9,+\xc9\xf7/nt\x9ba\x14\x1b\x18\xdd\x18X\xd2o\x15\x97L\xe6\xb5\xba\xc7\xf2W\n\x7f\x14ZIL:T\x1bd\x19\x8dE\x9c\xb1\xb9JK\x1do\x85\xe9\xa2\xca\x9cd\b\xc8\xbdiQ_L\xb0\xb9 \xf7/F\xfc\'M#,\x84M\xba\xa9\xa2yr\'?f\tb\xdai\xfd\x8c\x9aoj\x84\x03i\x8a|\xf7T;=p\xa2\x98f\xc7\xefu=\x96\xcb\x11\x91\xce\xce\xbev\xaa\xbb\xca\xfa\xa3\xde\xd5\x1f\xd7\x03:12\xf2\xfd\rN\x84=A\xae\x9b3\x81\xa9~\xb7\x80\xd1\xe2\xf6\xf2\xb8\xc9\x8a\xabC\xe2\xec\xb8,j\xe1\xbb\x1b\x1f@', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @multicast2}, {0x306}, 0x0, {0x2, 0x0, @multicast2}, 'teql0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 22:33:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x200000000000043, &(0x7f0000f39000)=""/30, &(0x7f0000001000)=0x1e) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000180)=0x0) syz_open_procfs(r5, &(0x7f00000001c0)='net/tcp6\x00') setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}}, 0x8) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) linkat(r1, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x1400) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000340)) 22:33:39 executing program 5: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x2000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='personality\x00') ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioprio_get$pid(0x3, 0x0) listen(r0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = creat(0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) write$selinux_context(0xffffffffffffffff, 0x0, 0xffffffffffffffbd) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) write$P9_RLOCK(r3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioprio_set$uid(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) ioctl$KDGETKEYCODE(r4, 0x4b4c, 0x0) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe(&(0x7f0000000140)) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x234) ppoll(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcdb) open(0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000000280)=""/31, 0xfffffffffffffe11, 0x104, &(0x7f0000001880)={0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}, 0x1}, 0x414) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:33:39 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000a1aff7)={@remote}, 0x14) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x4e21, @local}, {0x85e4a290fbe114a7}, 0x14, {0x2, 0x4e22, @loopback}, 'ip6gretap0\x00'}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r2 = getpid() wait4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCCONS(r3, 0x541d) fcntl$setown(0xffffffffffffffff, 0x8, r2) 22:33:39 executing program 4: r0 = memfd_create(&(0x7f00000005c0)='cgroupselfvboxnet0vmnet0systemselfeth0\x00', 0x6) write(r0, &(0x7f0000000080)="a85883156f794c05e0b02a03983b5addde9e46e1145c5c3fcb185a36d20d52d097399fd15648c6641aa8", 0x2a) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x23, 0x206}, 0x161ac83420c750b8) socketpair$unix(0x1, 0x7, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x0, [0x20001b40, 0x0, 0x0, 0x20001d00, 0x20001d30], 0x0, 0x0, 0x0}, 0xe0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x890b, &(0x7f00000000c0)={'ifb0\x02\x00\x00\x00\x00\x02\x00', @ifru_settings={0x0, 0x0, @fr=&(0x7f0000000580)={0x3ff, 0x10001, 0xe7, 0x0, 0x2, 0x4, 0x1}}}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f00000003c0)="e8ae7496800f3b508300d5b8d8cf67da92965e1a093f3dd4ff3fe994c22d8d49ee6cf8f014629e953d252349b1d05bff2123449eabe106a6452a224350efaeb8ecb7a28635bdb346dd9bd799f8aacc88e4f71aa5f1a7183e6dc3aa61efc04006e2ea8a0fbc03afe1c4a3aed6a9b9e3801166b668773e0f9ef4818cedc74ccdfc7fc677aea01d37359eef17425eea736c3c", 0x91) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='fuse\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="bcf117b273ae49d705"]) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f00000001c0)}], 0x1}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000480)='y\x00', 0x2, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$netlink(0x10, 0x3, 0x1f) dup2(r5, r2) r6 = socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540), 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000380)={0xa, 0x4e24, 0xfffffffffffffffe, @ipv4={[], [], @loopback}}, 0x1c) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, 0x0, &(0x7f0000000340)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000540)='teql0\x00') sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0800000000000000000000030000"], 0x10}}, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, 0x0, 0x0) 22:33:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x52) r1 = open(&(0x7f0000000300)='./file0\x00', 0x20000, 0x48) write$P9_RLOPEN(r1, &(0x7f0000000340)={0x18, 0xd, 0x1, {{0x24}, 0x4}}, 0x18) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='tmpfs\x00\x80\n\x0f\xa0\'\x87\x9e\xee\xde.$^\x19\x15\xb8.\x19\x1c\xae\xf6\xbf\x9c\xda~\xf7\xb4lE\x82j\x00\x88\xfb_\xab\xf8\x9c\x1f\xc59\xd4\xb5\xd9\x19', 0x2008402, 0x0) chdir(&(0x7f0000000040)='./file0/../file0/file0\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)='./file0\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x2) syz_genetlink_get_family_id$tipc2(0x0) umount2(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x80000000002) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x280c00, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000140)={0x4e, 0x4, 0x1}) fchdir(r0) [ 508.706558] binder: BINDER_SET_CONTEXT_MGR already set [ 508.737023] binder: 22939:22949 ioctl 40046207 0 returned -16 22:33:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x18000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@broadcast]}) sendmmsg$inet6(r0, &(0x7f0000006f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1000000029a8ae985a5d0bdeff00000310000000290000000b0000000000003fea3400"], 0x20}}], 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) fdatasync(r4) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) setsockopt$inet_buf(r3, 0x0, 0x3e, &(0x7f00000000c0)="779cddb360ffd65bfe0ada3fda4c81402b", 0x11) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) fgetxattr(r5, &(0x7f0000000180)=@random={'os2.', './cgroup.net\x00'}, &(0x7f00000001c0)=""/147, 0x93) creat(&(0x7f0000000000)='./file0\x00', 0x14) 22:33:40 executing program 5: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) r1 = socket$inet6(0xa, 0x5, 0x7f) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e20, 0x20, @rand_addr="f1086b8df1bf95aad480cf8b33be437c"}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/mls\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r4 = dup2(r3, r3) setsockopt$inet_int(r4, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0xa3) getsockname$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x0, @remote}, &(0x7f00000004c0)=0x1c) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)='bond_slave_0\x00', 0x5, 0x8, 0x7fffffff}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr="ac021c0158eab1caa6e4f4989e3495ca"}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') sendfile(r0, r5, 0x0, 0x88001) sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x800000004e22}, 0x1c) listen(r6, 0x80) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x402600, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) r9 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r8, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r8, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0xffffffffffffff7a) setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:tty_device_t:s0\x00', 0x22, 0x6) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r11 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet6(r11, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 509.220583] Dead loop on virtual device ip6tnl0, fix it urgently! 22:33:40 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) add_key(&(0x7f0000000680)='trusted\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000500)="7b81944008633a50d639bb00cbd2861e1ded07a2c717864c19f8eb1f2b282e4952448cff49d3d809c1708fb7da0cbbdf13b2d4139a168b7be506a9b1718a067df8864b32d6b149a96d0a4ce96334c517391842c81978fc0a3c", 0x59, 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000580)='id_legacy\x00', &(0x7f0000000600)={'syz', 0x3}, &(0x7f0000000640)='^vboxnet0vboxnet1\'[[posix_acl_access$&\rnodev\x00', 0xfffffffffffffff9) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/loop-control\x00', 0x200, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x2, 0x1100082) r4 = memfd_create(&(0x7f0000000440)='\x00\x81\x00\x00\x00\x00', 0x2) pwritev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) sendfile(r3, r3, 0x0, 0x2000005) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000040), 0x4) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r7, 0x0, 0x4000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={0xfffffffffffffffe, 0x27c, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0095", @ANYRES16=r8, @ANYBLOB="c54c00000000fedbdf250100000000000000014100000018001700000013000000047564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x9, 0x0, 0x0, 0x9, 0x4, "f8ca781d5f7e93117b52fa936f014929d175a4e80426585243b392f26e839018d8343d49d4273cc82ed2a2ef63524fc21d71047600", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da", [0x0, 0x20]}) dup(0xffffffffffffffff) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) ioctl$BLKTRACESTOP(r9, 0x1275, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) write$FUSE_BMAP(r1, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x4, {0x2000000000000}}, 0x18) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r10, 0x29, 0x2a, &(0x7f0000000300)={0x3, {{0xa, 0x4e20, 0x0, @empty, 0x5}}}, 0x84) 22:33:40 executing program 3: r0 = socket(0x10, 0x80002, 0x0) write(r0, &(0x7f0000000340)="2600000022004701050000000000000005006d20002b5fee839cd53400b017ca5b0000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000b4bffc)=0x4, 0x282) recvmmsg(r0, &(0x7f00000056c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/159, 0x9f}}], 0x80000000000034c, 0x0, 0x0) [ 509.478386] binder: BINDER_SET_CONTEXT_MGR already set [ 509.485394] binder: 22939:22959 ioctl 40046207 0 returned -16 22:33:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000300000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x84) getdents(r2, &(0x7f0000000140)=""/85, 0x55) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000000)=[{0x3, 0x3, 0x7, 0x1}, {0x800, 0x2e, 0xe2, 0x1}, {0x8000, 0x29, 0x3, 0x7}, {0x0, 0x7, 0x3, 0x4}, {0x6, 0xe3, 0xcd, 0x72cb}, {0x100, 0x5, 0x1, 0x8}, {0x1, 0xa9, 0x0, 0x800}, {0x95, 0x84, 0x7, 0x7fffffff}, {0x1ff, 0xc4, 0x80, 0x401}]}) fsync(r2) 22:33:40 executing program 4: socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400204) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) read(r4, &(0x7f0000000940)=""/237, 0xed) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x5654807, 0x0) stat(&(0x7f0000000540)='./file1\x00', &(0x7f0000000300)) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hoop-control\x00', 0x0, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r10 = ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r9, 0x4c80, r10) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, r10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r10) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r10) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r8) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8) clone(0x20000000, &(0x7f0000000500)="f35e8fdd0dce633a241a37faec12072bb9085225665989cadec04819beca21ef419c8e90549a941d2c1cacf4f87b785c756fb973410347a0", 0x0, &(0x7f00000005c0), &(0x7f0000000600)="64411adeaac9c9295a423ce94b2d484c807c13431bd8293271f4124a5c19c90aba601fd546c905533b65a1b19b761404a1db00f1c65d67c108da8f5328fe9892ed81d61484387db401fa45f99ffc8306236611b27ca1b2f4bd234790a4bb93b740161fd377f891ef519519a4c6086fdcc7b3d1586bd0792e5f65961170085417d533e54d9549502cf412828c77bd86e61eae411dd7583e203cce01b271e86921d745c29fe7473c17d064430cb65269a27d159db5ce2285795b20fefba014a1821d82f9fa4a579b015dba3669bbf82718973031b82585565fcf0d72b5cfc88c6276def2c55d1ce188c13fd8ca5b90ebb2") statfs(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=""/20) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/member\x00', 0x2, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r12) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x2) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000140)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='iPVS\x00') getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000044c0)={'ip6gre0\x00'}) 22:33:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:40 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x208204) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f0000000100)='./cgroup.cpu\x00', 0xd, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x180000f, 0x11, r2, 0x0) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x40000141041, 0x0) r4 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, &(0x7f0000000140), 0x8fff) [ 509.917023] binder: BINDER_SET_CONTEXT_MGR already set [ 509.935916] binder: 23012:23015 ioctl 40046207 0 returned -16 [ 509.955986] binder: 23012:23015 got transaction to invalid handle 22:33:41 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x5, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {0x4, 0x800, 0x200, 0x6}, 0xb, [0x401, 0x7, 0x100, 0x0, 0x6, 0x0, 0x5, 0x101, 0xfffffff7, 0x80000000, 0x5, 0x3f, 0x4, 0x9a6, 0x0, 0x401, 0x1f, 0x4, 0x9, 0xfff, 0x7fff, 0x80, 0x101, 0x41, 0x9, 0x10001, 0x3, 0x8, 0x1ff, 0x2, 0x9, 0x8, 0x658, 0x7e6, 0x200, 0xffff, 0x8, 0x1, 0x10000, 0x4, 0x10001, 0xbd, 0x0, 0x8, 0x6fa, 0xfffff29b, 0x3, 0x4, 0x93, 0x4, 0x65, 0x4ce, 0x0, 0xe8a2, 0x1, 0x800, 0x4, 0xffff, 0x9, 0x7, 0x81, 0x7fffffff, 0x6, 0x27800000], [0x9, 0x5eb05b18, 0x3, 0x6, 0x800, 0x7, 0x4, 0x2, 0x101, 0xd7d, 0x5, 0x800, 0x8, 0x0, 0x400, 0x9, 0x1, 0x2, 0x8, 0x6, 0x8000, 0x9, 0xdae7, 0x1, 0x3, 0x10000, 0x8, 0xa09, 0x2, 0x1, 0x8, 0x301, 0x360, 0x0, 0x1, 0x4, 0x0, 0x62f, 0x101, 0x1, 0xbe, 0x91, 0x2, 0xffffff81, 0xffffff7f, 0x8, 0xffffffff, 0x401, 0x1, 0x1f, 0x30, 0x1, 0x6, 0x8001, 0x20, 0x0, 0x8059, 0x80000000, 0x1000, 0xa22c, 0xffffffff, 0x7, 0x7, 0x8000], [0x7f, 0x3, 0xffff, 0x3ff, 0x6, 0x7f, 0x0, 0x22e0, 0x200, 0x3, 0x1, 0xffff6fb7, 0xff, 0xffffffff, 0x3, 0x6, 0x5, 0x0, 0xeff, 0x1, 0x4, 0x6, 0xff, 0x800, 0x6, 0x2, 0xb1, 0x7fffffff, 0x4, 0xffff, 0x5, 0x7fff, 0x101, 0x3d96, 0x3ff, 0x400, 0x0, 0x9, 0x7fff, 0x1, 0x2, 0x2, 0x7, 0xb, 0x80000000, 0xffffffc1, 0x3f, 0xffff, 0x0, 0x720, 0x0, 0x63, 0x9, 0x2, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x1, 0x6, 0x8000, 0x1f, 0x7], [0x6, 0x8, 0x3, 0x401, 0x7, 0x1ff, 0x2, 0x3, 0x0, 0x36f, 0x3ff, 0x81, 0x5, 0x0, 0x5, 0x3, 0x7fff, 0x7fffffff, 0x5000, 0xdad9, 0xfff, 0xd56b, 0x0, 0x10001, 0x1bf, 0x6, 0x1, 0x0, 0x4, 0x7, 0x6, 0x80, 0x6c, 0x100, 0x101, 0x2, 0x81, 0x5, 0x100, 0x1ff, 0x101, 0x0, 0x81, 0x1, 0x5, 0xfffffffe, 0xffffffff, 0xfffffffa, 0x10000, 0x3ff, 0x2, 0x100, 0x9, 0x20, 0x8, 0x8, 0x8, 0x5, 0x4, 0x0, 0x0, 0xce4, 0x7, 0xfffffff9]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) prctl$PR_GET_SECCOMP(0x15) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x0, 0xa4c, 0x0, 0x3fe}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r0, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x80000000002c00) ioctl$UI_DEV_DESTROY(r1, 0x5502) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r4, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0x6}, 0x1c) select(0x40, &(0x7f00000000c0)={0x5, 0x400, 0x101, 0x0, 0x9, 0x7f, 0x3, 0x4e2}, &(0x7f0000000100)={0x2, 0x5, 0x3, 0x2, 0x1, 0x4da, 0x1000, 0x3}, &(0x7f0000000140)={0x1, 0xe2, 0x7789, 0x100, 0x1154, 0x10000, 0x4, 0x9}, &(0x7f0000000200)={r2, r3/1000+30000}) [ 509.972278] binder: 23012:23015 transaction failed 29201/-22, size 16384-0 line 3014 22:33:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "3064c9cb5764e59a", "f9717f1145fcc18a60d4d3cd82503d19", "341c104c", "384891f5563c5df6"}, 0x28) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') r4 = getpid() wait4(r4, 0x0, 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0xa0f89e80ddbb9309, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r7 = getpgrp(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8a, r7}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x1}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 510.012665] binder: undelivered TRANSACTION_ERROR: 29201 [ 510.012885] binder: BINDER_SET_CONTEXT_MGR already set [ 510.012892] binder: 23012:23024 ioctl 40046207 0 returned -16 [ 510.013221] binder: 23012:23024 got transaction to invalid handle [ 510.013234] binder: 23012:23024 transaction failed 29201/-22, size 16384-0 line 3014 [ 510.111373] input: syz1 as /devices/virtual/input/input66 22:33:41 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev\x00\xf8\b\xbe\xdeRB\x10d\x9b5\xe0\xa42NTr\x9e\xb6\x97\xd1\x0f\x04\xf7N]\xa2\x02B35\xbb\xedv\x8f\xad\xa6# \x11\x9chB\xd7\xefu_S\x81\xf6s') fcntl$getownex(r3, 0x10, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f00000001c0)) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000180)=0x13e) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000300)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b16679ba0"], 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r8 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r8, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r7, r8, 0x0, 0x20020102000007) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40046602, &(0x7f0000000380)=0x400000) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) r9 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_GET_RW_HINT(r4, 0x40b, &(0x7f00000001c0)) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r9, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r9, r9, 0x0, 0xffffffff80000001) lseek(r2, 0x0, 0x2) sendfile(r2, r10, &(0x7f0000000040), 0x8000fffffffe) sendfile(r2, r10, 0x0, 0xa5cc554) openat$pfkey(0xffffffffffffff9c, 0x0, 0x42602, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) gettid() ioctl$TIOCGSID(r10, 0x5429, &(0x7f0000000940)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) [ 510.187825] binder: undelivered TRANSACTION_ERROR: 29201 [ 510.235221] binder: BINDER_SET_CONTEXT_MGR already set [ 510.264069] binder: 23029:23039 ioctl 40046207 0 returned -16 22:33:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40104593, &(0x7f0000000000)) 22:33:41 executing program 5: syz_open_procfs(0x0, &(0x7f00000000c0)='net\x00') socketpair$unix(0x1, 0x8005, 0x0, &(0x7f0000000480)) r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x800080}, 0xc) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1002000}], 0x1, 0x0, 0x0, 0x3f6) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) fremovexattr(0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) socket$inet6(0xa, 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000640)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) wait4(r3, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x80000000000000, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r5, &(0x7f0000000080)=[{&(0x7f0000000500)}], 0x1, 0x0) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/member\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], 0x1, 0x3) fchdir(r4) creat(&(0x7f00000002c0)='./file0\x00', 0x5) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) timerfd_create(0x2, 0x800) 22:33:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r3, 0x0, 0x20020102000007) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="66a6751e9ca9a165893284da9dfca078f4fe7ad1c0677da87cdae1c7896c525421b489cabcce59ad08ac74a71a626c0fa9844be3f04ed2cf881ecee68e7f360f7f016a3e62040a1b88f158893c63c060c4a85909c9a7807aabfbdd4d1317027aa1ec1e8216a7a7ab393650dac12fa0d07baa99f3d806570bd057dc1749d74a6dacdbcc20aebcab354c099a40ea1f26aa1ac74cbe67327ad4f4622e9dd06657cecc5fb1863a6bc2b2b4bffa30047370912355fcf7b40726eac981da48c215463c4a2d4e9b21608698fa6ba894b5bf28c6bc9cb54d", 0xd4}, {&(0x7f0000000280)="5c751a075d08de314e4209cc1092331b187cfa3f9ad367db3dd1f46e01f887606bd2aebb388427c80ff4f6d96ad4ea75fad2a5428dcaedc7e4646c1c346a4ad644278f76ac105dc1d0c48123bafb702682df2bb9f57976e6fb2eda7ae6d40aa6233cf97d53b2b66aad796c940c355ced93cb943afa402aa1356e8dcd8784b8db682f4c6ba1888bd8249934435d1a07622acb1cfa2875a90b74b60bc99ba11c2944cc198aab7e449a178d80d3b82ca7abdfa8", 0xb2}], 0x2, 0x8) 22:33:41 executing program 4: get_thread_area(&(0x7f0000000000)={0xce, 0x0, 0x400, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x284c1, 0x8) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000080)=@routing={0x4, 0x2, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}]}, 0x18) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000100)={0x4ef5, 0x3f, 0xff}) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000200)={0x9, {0x9134, 0x3, 0x7, 0x2, 0x3ff, 0x80}}) r3 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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") syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0xffffffe1, 0x401000) r4 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$TIOCLINUX5(r4, 0x541c, &(0x7f0000000380)={0x5, 0x8, 0xffffffff00000000, 0x4}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/status\x00', 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1b5, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x20, @remote, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/enforce\x00', 0x400, 0x0) openat$cgroup_procs(r6, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40246608, &(0x7f0000000600)={0x1000, 0x9, 0x8, 0x0, 0x834, 0x4}) inotify_init() r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, &(0x7f0000000640)={0xa, 0x4e23, 0x40, @empty, 0xfffffffd}, 0x1c) r9 = getpid() getpgrp(r9) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0xc080661a, &(0x7f0000000680)={{0x2, 0x0, @identifier="553a09677933c3045f766b2ef8060a05"}}) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x517080, 0x0) ioctl$VT_DISALLOCATE(r10, 0x5608) 22:33:42 executing program 4: socket$key(0xf, 0x3, 0x2) setreuid(0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x6}, 0xc) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x5dd7d56a, 0xfffffffffffffd3d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r3 = openat$cgroup_subtree(r1, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) sendmmsg(r2, &(0x7f0000007fc0), 0x5654807, 0x0) syz_extract_tcp_res(0x0, 0x9, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000300)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x10000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r5) statfs(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)=""/20) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/member\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xffffffff00000000) getpid() ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000080)=0x4) ioctl$TCGETS(r0, 0x5401, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='iPVS\x00') getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000044c0)={'ip6gre0\x00'}) 22:33:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) set_robust_list(&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x3, &(0x7f0000000100)={&(0x7f00000000c0)}}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 510.888479] input: syz1 as /devices/virtual/input/input67 [ 511.010746] binder: BINDER_SET_CONTEXT_MGR already set [ 511.040585] binder: 23082:23085 ioctl 40046207 0 returned -16 [ 511.078565] binder: BINDER_SET_CONTEXT_MGR already set [ 511.106599] binder: 23082:23087 ioctl 40046207 0 returned -16 22:33:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r3 = accept4(r2, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80, 0x17da17f2d572598d) lstat(&(0x7f0000000300)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) fchown(r3, r4, r5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163a2f300000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) r6 = getpid() wait4(r6, 0x0, 0x0, 0x0) fcntl$setown(r0, 0x8, r6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r8 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r8, @ANYBLOB="02000600", @ANYRES32=r9, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) r12 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r15 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r15) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r12, @ANYBLOB="02000600", @ANYRES32=r13, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) r16 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r19 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r19) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r16, @ANYBLOB="02000600", @ANYRES32=r17, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [{0x2, 0x2, r7}, {0x2, 0xa, r4}, {0x2, 0x3, r9}], {}, [{0x8, 0x0, r15}, {0x8, 0x2, r19}, {0x8, 0xb, 0xee00}], {0x10, 0x3}, {0x20, 0x3}}, 0x54, 0x2) [ 511.247688] binder: BINDER_SET_CONTEXT_MGR already set [ 511.278347] binder: 23092:23094 ioctl 40046207 0 returned -16 22:33:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) socket$key(0xf, 0x3, 0x2) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:42 executing program 3: ustat(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0xb8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') readv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xfe, 0x80, [], 0x2a}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @dev={0xfe, 0x80, [], 0x14}, 0x2a, 0x7f, 0x9, 0x400, 0x1}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r5, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40047703, 0xffffffff) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r2, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xf06, 0xfff, 0x0, 0x200, 0x6}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) write(r1, &(0x7f00000001c0), 0xfffffef3) write$eventfd(r1, &(0x7f0000000340)=0x2, 0x8) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300), 0xc, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00']}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 22:33:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r6, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0xfffffff0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09d4d552a3c421678371ee65e3f34504944dd0651d759dd2546ac3b9d8af9ae0de5c48369b086bc538af73714fe72d255f974a91326a985f3187744d56e95a9bc6b77c03528fd2a4159c94dd91dd8bb442881def17b2da768912c9adb1ebb952bbaa2128d369fa02df56aa9798b9498475b6e0e1fbe345089ed517de23c7e7595ec71a98c8a3985e5814ce507f727d8d67b21c77d1744cff350eafc31e109963c9d5f7d2ad5d3b2c5870d22e6122920d3d3d74b7f149b50368c26515b35a90c52639308e5b133474c93fd28ab5f3a1702907c3814cb09b6cb6a8"], 0x28c, 0x0, 0x0}) 22:33:43 executing program 4: clone(0x1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) tkill(r2, 0x36) 22:33:43 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/248) r2 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000340)='L-', 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000380)={r2, 0x76, 0x1d}, &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'sha256-generic\x00'}}, &(0x7f0000000440)="e9b6ef521c97cef5520d53412b53c101fb2e053f77b5056d3c56f73e5dacf176b8bcf1c5848ddd6812a77908b5ee206b4ea01d1913adfa4a0d1a48a0142018d1bb3bcdd5625f421b6edeae60eac8754216cce6c42deeb5c88d5f6d671f42afa009182c1d2fd45802df068ddddd9d7b2eded618f9a260", &(0x7f00000004c0)=""/29) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) flock(0xffffffffffffffff, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="e1ae9c44745a415e509d6650c7", @ANYRESHEX, @ANYBLOB="2c726f7d746d6f64653d30303030303030303030303030303030303031303030304bf50000870000003d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',fscontext=unconfined_u,\x00']) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, &(0x7f0000000480)) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000500)) [ 512.335379] binder: BINDER_SET_CONTEXT_MGR already set [ 512.352644] binder: 23117:23130 ioctl 40046207 0 returned -16 22:33:43 executing program 3: clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x40000000) socket$inet_udplite(0x2, 0x2, 0x88) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1) read(r0, 0x0, 0x144) alarm(0x3) [ 513.074017] binder: BINDER_SET_CONTEXT_MGR already set [ 513.093373] binder: 23117:23137 ioctl 40046207 0 returned -16 22:33:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r4, 0x10, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x80) sendto$inet6(r0, 0x0, 0xf7, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22, 0xa0c, @empty, 0x5}, 0x1c) write(r1, &(0x7f0000000380), 0xfffffffe) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa800200f7b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f0000000600)={{0x0, 0x0, @descriptor="ee801681bc99068a"}, 0xb7, [], "4756ecd7064cecc4f5cd4cc6652f2c38d3ead0e88b081a8b2483b3c8f3195db2bd49a4f4736b81531282c1445cd5f147001dd966cac093379d096fe15ac685984f237ccba7a574cfbe6716f412e7c0b3ae1bd18c7b33ba56df4219e226fc41a8fea90cbfaa452aa3129504c7e6138c98ff1e2abf7b4f770103db845fd7b67f4f0b641b8af61c40e32f01fafc9c157ae9a357a29cf8d637bb365b75464fbf91005849ee9c10f53ed1483b49a4b846b9934270f795d772bd"}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r7, 0x104, 0x70bd26, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4040808) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x0, @link='syz1\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x800) 22:33:44 executing program 2: syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8004) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/162, 0xa2}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000580)=""/154, 0x9a}], 0x200000000000006d) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x4}, 0x4) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x4, 0x1}}, 0x14) 22:33:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:44 executing program 5: syz_open_dev$loop(&(0x7f0000000640)='/dev/looq#\x00', 0x3d, 0x8100) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x1}, 0xc) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x100000004) ftruncate(r1, 0x8200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x7e1c1, 0x0) lseek(r0, 0x0, 0x2) getpeername$inet(r2, &(0x7f0000000840)={0x2, 0x0, @multicast2}, &(0x7f0000000600)=0x10) r3 = open(&(0x7f00000004c0)='.\x00', 0x40, 0x10) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000200)=""/48) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r7, 0x0) r8 = fcntl$dupfd(r7, 0x0, r5) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0xffffff8c, 0x1) write$UHID_INPUT(r5, &(0x7f0000001740)={0x8, "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", 0xfffffffffffffe1a}, 0x1006) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000002940)={0x5, 0x1, 0x0, 0x0, 0x5}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000003c0)="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") ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f00000001c0)=0x10000) sendmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7a66d805004bb0d6ad22"], 0xa}}], 0x1, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) mkdirat(r2, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x16) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00') write$P9_ROPEN(r2, &(0x7f0000000300)={0x18, 0x71, 0x2, {{0x2, 0x1, 0x3}, 0x200}}, 0x18) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000003880)={0x9, 0x0, 0x8, 0x1f}) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x7fe, 0x0) renameat2(r1, &(0x7f0000000540)='./file0\x00', r4, &(0x7f0000000580)='./file0\x00', 0x6) write$P9_RVERSION(r10, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1bf) 22:33:44 executing program 2: syz_open_dev$rtc(&(0x7f0000000580)='/dev/rtc#\x00', 0x0, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8004) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) readv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/162, 0xa2}, {&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000640)=""/200, 0xc8}, {&(0x7f0000000580)=""/154, 0x9a}], 0x200000000000006d) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x40, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x4}, 0x4) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x0, 0x4, 0x1}}, 0x14) 22:33:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x30005, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffffffffffe, 0x2ffffffff}, 0x283) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x10000008b) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000340)={0x3da}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0xffffffffffffff31) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000140)) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r6, 0x0, 0x2) sendfile(r6, r7, 0x0, 0xfffffffffffffffc) iopl(0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000006c0)=ANY=[@ANYBLOB="01000400ffffffffffffaa0600aaaaaaaaaaaaaaaaaaa283b1bf38c3b22a233f52b3e059879720020024496a7424ac204c741a89245eaa4fbfbca030c78a3852735de97c7cc71191b5f601ef3ff34829b43bd82d7305f2538a1f6cdd3aeb9761e2cd376213d12faa1cf4d3e1caf276b80a3572f12da577cf3f9b28f8d6a66db8018ad3c7aad1a3c9ed927b25c0ef20740a04f9e9d35a1941ff1e4e88a2d3f591490f2d3c3fd402fb8fb43aa0d60c242d72bb005b704966f699423d1780e15564e4f545a7df9247fd759be076a06446dd7152a8fec8b0146aa5e3f84096c28a904b7fe1c208161ba0a2095f938476e14205e09064e62a325b062e17578bc314e0f8c6d581cd6fd6f872bf820ec053f98be0c4f4e6eee0c2c254d67ec179296c3c59ea1f5d0319ccb14456814ee1c10667ce8fd44b1602f23ab11c37570649e19299a168f94af7bb1c5c719796f1eaffed01227d87877fb436ef10013f22cb836fb6e431437971d4bf8e0fe193c1b9e590c6d94e5988e6d6ad8023cc1062e6caa1a78cabc21dcb446da74705f3c81f4fcabfdb7ab3057329e5aa5ca23383541828fb10b894f6fc492de75d03685ffeea201a6767f6262af403d8fd20e1f4534e9ac8de71adfbc4b56ebb6bf8de31b711f4cc797ec24274fb60000000535ed5c566da3445138cd784be19c839f55c3bae180800000018f985bda9d13201cbbd27782492a8afe7ddbaa53552c89b2cef7b39c3ec490f14a593dc6c2b5be947b5f337ad865e9ba9c9a14036cf99d6a097ed4682f20ae1b283d8c2971b736eb68d65fae4c89174025515b72e9f1f852652296e331557d5f9e7e00ff268fbcc1ef75cc3c7d6524728fbad44dba2f7c48eb6566d5ff8461f10ba2973d62b7a16f063f341d2a516b2d0c045cb19814d6f3d0877bc8bfebe5491e0415e0000000000000000000000000000000007cf921a11b074a2620fb481a6621402a2ba55aba05b71617a89d65c0950b72495ed0ba6a294861efb521e0fec9c070000000000000000000000d71ddb480399487df037b04f473d3ca3e5bc6e9fd3b740a09abee25a9108f056bd54095927b07b2a97f7368bceb5296bb714c7474272e2bffdf37231ed4a67cd4e63a251cfa136d0f4f805dbe71523a742"]) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000680)={0x1, r8}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000440)={@remote, 0xbd}) fstat(0xffffffffffffffff, &(0x7f00000005c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') 22:33:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000000)={{0x2c, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'none\x00', 0x11, 0xa6f, 0x22}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4e21, 0x2, 0xba4, 0x3, 0x4}}, 0x44) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634840000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 513.420402] binder: BINDER_SET_CONTEXT_MGR already set [ 513.426629] binder: 23170:23171 ioctl 40046207 0 returned -16 22:33:44 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~IyM\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xecM.\x8dD<\x82\xfc45\xbe\xd4\xde]i@\x9ax\x1c\x86>\x0f\xd8\xa6\xf8h\x92[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\x1a,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xcf\x81i0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4Nc\xe1\x16\n\xf1\xac\xf4]\xb1\xcd\xf4\xbc\xbb\xed\xe7\x95\xdby\x8ca\xdba\xe2?') r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0x90) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x50) [ 513.802099] ¹á6›Íaï~IyMá‡ì: renamed from nr0 22:33:45 executing program 5: clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x10, 0x0) mkdir(&(0x7f0000001340)='./file1\x00', 0x4) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000580)=0x0) fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r0) r1 = getpgrp(0xffffffffffffffff) wait4(r1, 0x0, 0x20000000, 0x0) lgetxattr(&(0x7f0000000440)='./bus\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)=""/81, 0x51) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup\x00&\xe7\xbe\xaa\x0e\xe3\xd3#\xc4\x897\x14\x85<\xf70xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, 0x0, 0x0, 0x0) fchdir(r2) creat(&(0x7f00000006c0)='./bus\x00', 0x0) unlinkat(r4, &(0x7f0000000140)='./bus\x00', 0x200) r5 = creat(&(0x7f0000000680)='./file1\x00', 0x9) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r6, &(0x7f0000000340)="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", 0xfd9) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f0000000080)={0x28}, 0x28) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000040)) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000100)=0x80000) accept4$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14, 0x80000) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000a80)='/selinux/context\x00', 0x2, 0x0) r7 = getpgrp(0x0) syz_open_procfs$namespace(r7, &(0x7f0000000080)='ns/net\x00') syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000100)={0x0, 0x0, 0x100000000000000a, 0xfffffffffffffffd}) write$P9_RFLUSH(r5, &(0x7f00000001c0)={0x72b}, 0xffffffdf) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, 0x0, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000040)={0xf, 0x9, 0xff}) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000180)='./file0\x00', 0x0, 0x12f206, 0x0) [ 514.221454] binder: BINDER_SET_CONTEXT_MGR already set [ 514.227242] binder: 23170:23175 ioctl 40046207 0 returned -16 22:33:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:45 executing program 2: r0 = gettid() r1 = socket$inet6(0xa, 0x809, 0x1f) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) r2 = creat(&(0x7f00000004c0)='./file0\x00', 0x38) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x8}, @sack_perm], 0x2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x10d, 0x0}}], 0x80000000000024d, 0x0) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r7 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="d548166778a08a3ba2e25d58c6f4369524468b53"], 0x6) ioctl$RTC_SET_TIME(r8, 0x4024700a, &(0x7f0000000140)={0x6, 0x27, 0xa, 0xf, 0x6, 0x200, 0x2, 0x126}) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r7) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x8000, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x2, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r9, &(0x7f00000003c0)) sendfile(r1, r4, 0x0, 0x8000fffffffe) [ 514.649862] ¹á6›Íaï~IyMá‡ì: renamed from nr0 22:33:46 executing program 3: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) ioctl$VT_RELDISP(r0, 0x5605) add_key$keyring(&(0x7f0000000580)='keyring\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000240)=""/175, 0xaf, 0x10000, &(0x7f00000000c0)={0xa, 0x4e27, 0x8, @mcast1, 0x7}, 0x1c) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x8d264d94b88cc547) ftruncate(0xffffffffffffffff, 0x8008200) gettid() r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000640)=ANY=[@ANYBLOB="6deb0d8bf2000000000005a3bf4e741600342ebf6bc7fa73bb38fba8e07a2f384eed53ff8d2d54f65d70394b4053c7baa9f31d06d7560d4b9f0c1b4301fba1ea370ddd90703dcfe9d877a2f98931e085deb592b54da0c34c2c565303685f34bd0776c6e4d9503be7add2"], 0x1) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f00000005c0)="685b2a3d97218dce0cb0fae227cb68fa6a125745c67176791ad0d08114dc20896598756cf776a53a60b36f5973c1bb551e99f99c5c34aa97fe62be5aebe9aa29361d5256be67bca08b87b41c0fb5f803b3be8784fcbdecfc813a9a3969c54de786df7f94a13c9a2ec6a3ee2728d60de602ab51b8ddf8161ab7d27ce5", 0x7c}], 0x1, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) lseek(r6, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x02\xdf\x01\x00', 0x40f}) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) r8 = socket$unix(0x1, 0x5, 0x0) sendfile(r8, r6, &(0x7f0000d83ff8)=0x7fffffff, 0x8000fffffffe) sendfile64(r2, r3, &(0x7f0000000380), 0x1) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x65}, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000400)={0xe7f3, {{0x2, 0x4e20, @multicast1}}}, 0x84) 22:33:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) read(r1, &(0x7f00000004c0)=""/84, 0x54) r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r3, r4, 0x0, 0x20020102000007) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xb8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01634040020000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="8561646600000000000000000000000002000000000000002500000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="00000000000000000000000085616466000800000000000000000093374c8bcc327f59880866bc00001300000000000000"], @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="096310400100000000000000000000000000000012634840000000000000000000000000000000000000000010000000000000000000000050000000000000001800000000000000", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYBLOB="852a62772c88857500000000000000000000000000000000852a646600000000", @ANYRES32=r4, @ANYBLOB="00000000000000000000000085616466000000000a0000000000000000000000000000001800000000000000"], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="000a000000000000096310400300"/28], 0xdd, 0x0, &(0x7f00000002c0)="1a8ba9a764204bc844f4e9a644b554d3fafa45b4614660ebc0ffb88b43ada48de9299e7c9cec5b6b5dae713f97b9a5a8e3d63202af1ee3195ee6b5c1f8cf2beb92a71ec48728c7f8cd6273a7ee1144cf6d9abd7385a43a076447d9250cad031e801c17f2ce1431853d528fc1f6bf839096746ccc31d6caf0ac3dcc2076996ac3932c33f61119b702335d2624ab9cf296e336acee22911445e01fe2235c5b0289f30cc4f17e03c7ce1f066f0921d3e16c517b1c71c12a3433ab6d18ef47a6f51464e32f0e3ea7cb759320f297d00a781c60b9e5c730de615fd756b99d46"}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~IyM\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xecM.\x8dD<\x82\xfc45\xbe\xd4\xde]i@\x9ax\x1c\x86>\x0f\xd8\xa6\xf8h\x92[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\x1a,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xcf\x81i0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4Nc\xe1\x16\n\xf1\xac\xf4]\xb1\xcd\xf4\xbc\xbb\xed\xe7\x95\xdby\x8ca\xdba\xe2?') r2 = socket(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0x90) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x50) 22:33:46 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(r0, &(0x7f0000000000)='loginuid\x00') setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000040)="ac60", 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 22:33:46 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 515.817461] ¹á6›Íaï~IyMá‡ì: renamed from nr0 [ 515.904568] binder: BINDER_SET_CONTEXT_MGR already set [ 515.929906] binder: 23219:23241 ioctl 40046207 0 returned -16 22:33:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) 22:33:47 executing program 5: prctl$PR_SET_MM_MAP(0x35, 0xe, &(0x7f0000001100)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x9a24) 22:33:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TCSETXF(r2, 0x5434, &(0x7f0000000040)={0x400, 0x0, [0x800, 0x0, 0x3, 0x1, 0xfff9], 0x1000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0)=0x0) syz_open_procfs(r4, &(0x7f0000000100)='net/route\x00') 22:33:47 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000500)={0x7, 0x4}) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="0900000645f7c88c0400000000000000abe928000000000000034d7ec3dc345f50d86d9202f58ef62380501878e74156276c07d3de18456e91f751876e527a05907cfa"], 0x8) r3 = add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r4 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, r3, 0x0, r4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xfffffffffffffd6d) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f00000000c0)=""/13) ptrace$getsig(0x4202, 0x0, 0x3f, &(0x7f0000000580)) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @broadcast}, 0xfffffffffffffd78) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000080)={r7, 0x1, 0x6, @broadcast}, 0x5) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) close(r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'\x00\x00\x00\x02\xdf\x01\x00', 0xfffffffffffffffe}) ftruncate(0xffffffffffffffff, 0x2007fff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r9 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000001c0)=ANY=[], 0x0) fremovexattr(r1, &(0x7f0000000540)=@known='trusted.overlay.opaque\x00') [ 516.567880] binder: BINDER_SET_CONTEXT_MGR already set [ 516.573870] binder: 23256:23258 ioctl 40046207 0 returned -16 [ 516.581604] binder_alloc: 22919: binder_alloc_buf, no vma [ 516.587547] binder: 23256:23258 transaction failed 29189/-3, size 16384-0 line 3137 [ 516.940539] device syz_tun entered promiscuous mode 22:33:48 executing program 3: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xfb}, 0x4}, 0x1c) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x800) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f00000002c0)=""/89, &(0x7f0000000180)=0x59) setsockopt$inet6_opts(r1, 0x29, 0x32c4f92ea5b5cc6f, &(0x7f0000000200)=@srh={0x29, 0x10, 0x4, 0x8, 0x4, 0x20, 0x31f, [@ipv4={[], [], @broadcast}, @mcast2, @loopback, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @remote, @mcast2]}, 0x88) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @descriptor="3d925a437b57db8f"}}) shutdown(r0, 0x1) sendfile(r0, r3, 0x0, 0x88001) 22:33:48 executing program 3: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x22d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000700)=ANY=[]) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f00000001c0)=0x20484030) read(0xffffffffffffffff, &(0x7f0000000580)=""/228, 0xe4) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r6 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r6) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x38000, 0x0) write(r5, &(0x7f00000001c0), 0xfffffef3) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_gettime(0x0, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)) nanosleep(0x0, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r5, 0x0) 22:33:48 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000040)={0xa, 0x401, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7ffff7f]}}, 0x1c, 0x0}}], 0x1, 0x40) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080)) getegid() r2 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r2) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getegid() r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000004c0)={0xffffffc1, {{0x2, 0x4e22, @remote}}, 0x1, 0x3, [{{0x2, 0x4e24, @empty}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @remote}}]}, 0x20c) fchdir(0xffffffffffffffff) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000040)='./file0\x00', 0x0) stat(0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000007c0)={{{@in=@remote, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x8, 0x4e21, 0x0, 0xa, 0x0, 0x20, 0x6c}, {0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0xfffffffeffffffff, 0x9}, {0x8, 0x7ff, 0x0, 0x58}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, {{@in=@local, 0x0, 0xff}, 0xa, @in=@local, 0x3507, 0x4, 0x0, 0x0, 0x80000001, 0x5, 0x3}}, 0xe8) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e5e2) r7 = socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 22:33:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 517.363341] binder: undelivered TRANSACTION_ERROR: 29189 [ 517.364105] binder: BINDER_SET_CONTEXT_MGR already set [ 517.364113] binder: 23256:23262 ioctl 40046207 0 returned -16 [ 517.371624] binder_alloc: 22919: binder_alloc_buf, no vma [ 517.371666] binder: 23256:23279 transaction failed 29189/-3, size 16384-0 line 3137 [ 517.475502] binder: BINDER_SET_CONTEXT_MGR already set [ 517.491748] binder: 23283:23284 ioctl 40046207 0 returned -16 [ 517.498009] binder: undelivered TRANSACTION_ERROR: 29189 [ 517.514344] binder_alloc: 22919: binder_alloc_buf, no vma 22:33:48 executing program 3: syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) r0 = eventfd(0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000002c0)=0x7, 0x4) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r5 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r6) getegid() syz_emit_ethernet(0x7a, &(0x7f0000000000)={@broadcast, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty, {[], @gre={{}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, 0x2}}}}}}}}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fsync(r5) pipe(&(0x7f0000000500)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r7) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0), &(0x7f0000000100)=0xc) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r8, &(0x7f0000007e00), 0x40000000000025d, 0x0) [ 517.528442] binder: 23283:23284 transaction failed 29189/-3, size 16384-0 line 3137 [ 517.560733] binder: undelivered TRANSACTION_ERROR: 29189 [ 517.591877] binder: BINDER_SET_CONTEXT_MGR already set 22:33:48 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) [ 517.630323] binder: 23283:23288 ioctl 40046207 0 returned -16 [ 517.638142] binder_alloc: 22919: binder_alloc_buf, no vma [ 517.652725] binder: 23283:23290 transaction failed 29189/-3, size 16384-0 line 3137 [ 517.667387] binder: undelivered TRANSACTION_ERROR: 29189 [ 517.746926] device syz_tun left promiscuous mode INIT: Id "5" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes 22:33:49 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0', [{0x20, '#! '}]}, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(r0, &(0x7f0000000000)='loginuid\x00') setsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000040)="ac60", 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 22:33:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r4, 0x104, 0x70bd26, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4040808) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r6, 0x104, 0x70bd26, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4040808) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) listen(r7, 0x1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x880004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x10, 0x70bda7, 0x25dfdbf9, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200000c5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffd) accept4$inet6(r1, 0x0, &(0x7f0000000300), 0x80000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write(r5, &(0x7f00000003c0)="9ac7779c641e7339c45b171a20214f1223cff904db938b6edf5b6716a788d331edebb9b155a9ca4da0fb6d1667d7f209b72cb180f1ea189a52ebe67bdcdda93dd1adb16c0d112e90a5f0ac0fad226a603dee89f2c137c0d63eee99df4ec0bc8ac807cc40d9ed7f848c76f7942d2dc0", 0xfffffffffffffd8f) read(r4, &(0x7f0000000200)=""/250, 0x50c7e5e2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000680)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x0, 0x40, @local, 0x80000000}, {0xa, 0x80, 0x0, @dev}, 0x0, [0x1841, 0x4, 0x41000009, 0x1, 0x0, 0x0, 0x8001]}, 0x5c) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, &(0x7f0000000440)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) r7 = dup(r6) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f00000000c0)=""/34) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r1, &(0x7f00000001c0)) write(r2, &(0x7f0000000140)="25552d0abde13fa6e583cd34449ef05c9edd5166a5b9cf03de98b59763dd24f1358c939d59dd41f4464254cd1eee33b76c21f579f140a84fcd", 0x39) open(&(0x7f0000000580)='./file0\x00', 0x50a842, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0xb6) delete_module(0x0, 0x0) syncfs(r1) r8 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x10) ftruncate(r8, 0x280080) socket(0x8, 0x5, 0xfd) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r10, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) r11 = socket$netlink(0x10, 0x3, 0xe) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000180)={0x0, r11, 0xfd, 0x1100}) 22:33:49 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00', 0x10, 0x0, 0x76}, 0x2c) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) unlink(0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x92c}, 0x1c) write(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffe0) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000003c0), 0x4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x8000ffffffff) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x0) pwritev(r4, &(0x7f0000000b80)=[{&(0x7f0000000300)="be30bc2039f50197fe7e0d77b4a922dc26ae50f85fb4608e99d93a33ef1ee6e105e4e3c2096c076b582c267063ef39d49b6f372665988d4c053455cbdef70b78d3b4650bee299bd667d003aebb4bfef48fb1c5cb9854d92a215949ab1efd5daea45c528c801d6a1c995667d95b709c64c7cdf6cd114649f5edc82a", 0x7b}, {&(0x7f00000004c0)="b286f333f492823d90a779436e4224f6f82c4f64a556fd9b6bba3cdcefd6380819b5dea7dfddfc103985501d2fe2159df33eec2e49ecf4e3d7df2dc36220ceb8d5a4d660e53a936267a374a4fbfc6c0098bf1f6de3436f20e0139f2673d5f0336180726242a9fd7d0da10dbf6ab7bff8dbc24322ac0232a90cfafa1d388d", 0x7e}, {&(0x7f0000000540)="dc71b7e0facab8cd9e59c20a3cc6a3e6e84530869c99189c1d815035dad2a97971b1020621262af55d45e5295725750f863249d070c7aefa9843df55c9b9c298e7990248ebc5dd506b25a25f54689d4f39db4acdb89b4ae75554cd5516", 0x5d}, {&(0x7f00000005c0)="5d27c1ab2eb2728a75b9b8d7d914e6f4b2814fcc1d9999a6277b7f60d90f0b5fcdfbca4319229224d4dce1283d47527fbeac276340bdf4e2066d7cc61fe3baf2aeac30e804090d55a31cd45b322f9db76f36410332b954d3270f730822ba8a27a993b61878b67fbf0b665132fc2ff18479343a1e2e9d52eabcf4bffc9eb8211be0082bb4588cc57ac9b64386999a46a5367f5eefe3b019e37b5d0037bc600506ea4a4c80f4b85d76", 0xa8}, {&(0x7f00000006c0)="b47f0dc671f51b7803180e6a986b07ae9de1e5d461440abf856b190c77ba0be31300244ff3ecc7f7fac7f9976511d589a105fe54a2f0c4c849e0fb3d33f1a8b2afde2a0831ac063553cb52721133516958ca4ad6712a816be2ae825f71fc8058e33777fc65807a308d4b5bcb88ce844f23706c7e764c649357efef778a842abeff75add390a4ff7ae17877ac29cda16c2efa63ff63012094b14e6b44ad81b2f4f87fb7a6", 0xa4}, {&(0x7f0000000780)="a1b3fc84de5f3cebf4ea9e33988ce34c595343f318933975d78f3da31d8750549326089b51fef3fe5f73bdd390dda178324cb78b9a966de15b853309de846ae50821b3392a8e9e5348ba7f725f0427ca16652cf0205d59119a007e04a82a6ad4807fd3b08c93c473ef7153d9cfd1adbcbe5eec5d3ef03504204aba6336093c16b338f71d1c1299e035d870460a784a113c0681f94367d5d884833948deaa6ba98761307afe851fb685031b03cc688615a3848da79d40cacf9c50ae1e182c87", 0xbf}, {&(0x7f0000000840)="40d6430a9faef2e359f030d43f9460243fcdab98a5671ef64bececde4f5c70f325eababaa4a6bde3d4518efbceec52faa0259f10698a954f3468dfc583e5da8760fb9b2db28bc04a9c9b8b02d7495c592332c5e291f540c711aea6a1af9e", 0x5e}, {&(0x7f00000008c0)="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", 0xfd}, {&(0x7f00000009c0)="efba9366e119b0348f24f30643f5c67175612d5ccbef6a446f34994ffe62be8f4c66a31199be4cae2f1694ad110ce9b8716d3901e3f2278df58e6623bfb828323692d40565390b5fcf6a56e31bdb1310680b761629a2acb3782b848298e141e1c2ea5bf6f0444b22ee121f5434ae6bb52635f693875f5794e14e6310e71dfcb42bd0b0c625013e0cd80edddfad3aa8d92490aa32f2c9db92b7569110640d7477c276091aab35bedee0b3237e425d051ad1e8750c67", 0xb5}, {&(0x7f0000000a80)="6c8cbc73ea800b99945fe7df4b5b323a11212e2ed83d1121613e0894f2b2436bd44afa852a7ad5caede83d62e959719fdb450a50a589ccc4ea5301a2ff24927fb1376099574c085f4eca0d46a0eec9e8f16e40a1dd2c1676608860fb84d8659d206e744f76361bb02b3005d419aec4bbd36b0385a1f802e32e5dd02da7e8f2b48df5997a88986ce5549e20c4c22d8fc319f766af8018dc5af71823ca452d4ab9057119f4ba9cd9eab99a17660bc03d50a7c8ae04c8af817eb83217ec483a73feb57b8e7aef82da2b6c7524f13a5daf40e1456c683c95752f4c4441ff3451381b7f", 0xe1}], 0xa, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0xec38ed91f9c7494a}) io_setup(0x7fff, &(0x7f00000000c0)) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000c00)) socketpair$unix(0x1, 0x1, 0x0, 0x0) 22:33:49 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000080)={0xffffffff00000000, 0x0, 0x2, 0x7}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r6 = openat(r5, &(0x7f00000000c0)='./file0\x00', 0x18080, 0x1) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000180)={0x0, 0x1, 0x8, 0x2}) ftruncate(r2, 0x3bb7) r7 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) write$P9_RREMOVE(r7, &(0x7f0000000280)={0x7}, 0xfffffffffffffe93) syz_open_dev$evdev(0x0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) socket$packet(0x11, 0x3, 0x300) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r7}) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc81066}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x40, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa63}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x10000000) clone(0x0, 0x0, 0x0, 0x0, 0x0) INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes [ 518.793476] binder: BINDER_SET_CONTEXT_MGR already set [ 518.836899] binder: 23305:23312 ioctl 40046207 0 returned -16 22:33:50 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x194) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) 22:33:50 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @loopback}, 0x10) r1 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x75, 0x105082) r3 = memfd_create(&(0x7f0000000140)='/dev/keychord\x00', 0x1) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000540)="e5da9147a17576a20fd70497d1b7e16f5ac3872d1e42f90c8e95f2159cf5c0302a848ea6331cce78041cb30fa1f72b23cd130ba13a0eaf34886fb1a728cfd22018e39b23419262d9fc1a9bd3876b78e8f4dfe520d309f74bc7255a43451df16f471a274ba9413e58142dba0f3332c4649161ae8c943fe735dc35c7e4c1861a8f28b1d2549c6c389836324e4958c1a42997e732303a99dab34829357548b77cd61eca239d854ecfacce5b8d9280cac09f703cd2d9a1d5e18bb7e25aa29501acffdc7cb91a8460b2e897be78e449b4bfe282bb68", 0xd3}, {&(0x7f0000000c00)="49cf7cc99dae786370aede94c676fd1f12267c080db690686d47d2b41317dcf734cbe4d5fbf4eea138398129ed571204c985936ae61c1965435c18b4da8f667e39665e933bca165c4165c9e1f3c17e07f61f247fd3d91b5e5ba73be11dc0e7b096392a9981be3c3f9c9f7f466c46d3bc7a3704b4ba6179d104a3528cdf0bdebc6a515d07a7e47e99e5a7c00f01551b389aff9d646349c81bd05bce329367ef6ff1161b9ef9f4801273f69b34704ad44c8451df9e5a063cdffa7a45de6595d88f3462b0557a9964156f459c6c592c869be37b61a0569db1b7", 0xd8}, {&(0x7f0000000d00)="fdce9b2bd182ece7f80f127ad239c76166ba34188c2bdfd8df9f2cbb77d5f642eb2742ee5fdcb684fb505b9af7ec932d422f7cadcd38001d63dbf14dc10508147a871167699a8b140269d5ba833e63e82414378e01f57d879bc992c1ee7e178129694126dcbda1aa86647e3587e9026115703b94662a6154305177124a5d52e5c069314490b243bb7bcc64ecb2c6328b6a45d022a14302a6840b7641f86ba20650a5e97de3d48180545f792900"/184, 0xb8}, {&(0x7f0000000dc0)="9c60093f6a483d1f9715452895907a003e884cfbe05dd8c683bde7f533cfad9bebab364009a7d6aa5883800dc1904682d50fff125de001a7283a69317c4b280205ddfd6424818d2c357de7aba0bbe49bbba2266fa0df4878dd69299709c3b424435a31820b623d25c7d41dd445da5f94c0e2f18e6c076c2898", 0x79}, {&(0x7f00000001c0)="d27b05d0969a6b820e751e99769137437a91103fa30f", 0x16}, {&(0x7f0000000e40)="a04b5287cfc932367edf42cfc9b3ebc3e3400a706ca0b94b2f5c19400fe80091f1a88555307032880ba63733d764ab25a97dc295ea7a032d1be4004c73104fcf5bdd28816756cd7f1ff9eebb53073ce657a88f3bef46b039e8a6b5d3c4a4c7f90ff8560670099fe1281585074aadbe9e58723affb9babd0c642cb5d5ddc6d2215e09bc278e3469a76869965e9a3087dcfd1dc0771af7128fb48de9db874bb58775edaa67d3bb84c17cf1bf54dab2529f3debdf64938cc7392430a79bea84be7426d6a865d07c85100405acb78cfef5a1344637e7ce80453503b73537b750cdb77cac11724c26fc739fe09c74ba5c376cd29d45b8cc7a216b4c", 0xf9}, {&(0x7f0000000f40)="06df08ee67a1a4355a0c99e4d02fc1f6cb95bd5fc83c76230aabd2d7278f740ec073679c546c2df1687bb3331e69247aa6ca1c181d1c885e35cf9dedffe09c791efea69984863347903bd69d2408772e8fa28dfc9d93dd46e442471a4025020336da19a34ff233a43d581c6abc260a9df7d8db55fa0576dda1399c60cfa72d0731b4eee47a1514e5861e39f2944d2f1746195a384bc05eec790546ac05bb4f56c8cb74178e40d93b437ee3c456e6185421586e56ca78942e724afc7d2d1ef810f9c3303573be6c34c30cb529d89dcc07a52aef06b1466ebeaaf812158b0443350387de527a", 0xe5}], 0x7, 0x80ffd) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r4) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r5) ioprio_get$uid(0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) r7 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0x1001e) r9 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) r10 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r10) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), &(0x7f0000000a40)) r12 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r12) r13 = getegid() setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000a80)={{}, {0x1, 0x1}, [{0x2, 0xde5d4b62f84192e6, r4}, {0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4, r6}, {0x2, 0x6, r7}, {0x2, 0x6, r8}], {0x4, 0x4}, [{0x8, 0x5, r9}, {0x8, 0x2, r10}, {0x8, 0x0, r11}, {0x8, 0x1, r12}, {0x8, 0x4, r13}], {0x10, 0x1}, {0x20, 0x2}}, 0x7c, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000"], &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) r17 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$FIGETBSZ(r17, 0x2, &(0x7f0000000440)) write$cgroup_type(r16, &(0x7f00000009c0)='threaded\x00', 0xd4b9c12) clone(0x2000000000003ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r18 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r18, 0x8938, &(0x7f00000000c0)={'ifb0\x02\x00\x00\x00\x00\xff\x00', @ifru_ivalue=0x1}) getsockopt$inet_IP_IPSEC_POLICY(r18, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) sendmsg$nl_generic(r16, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002400000828bd7000ffdbdf250700000008004800", @ANYRES32=r19, @ANYBLOB="f92e9c496e93b14980748e270595f259e7f31ede7f0ba50a", @ANYRES32=r20], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) unlink(&(0x7f0000000680)='./file0\x00') rmdir(&(0x7f0000000140)='./file0\x00') ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000400)={'eql\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x12}) ioctl$TUNSETSNDBUF(r14, 0x400454d4, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000040)=[{r14}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) 22:33:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000090000000000000040a119f3b0ffb44b8af94a88c64d98e2c547bf1d39db562b446c2e07b6ee6aa595f0d61160a99a572df7692b6a6fcab36bff20b4017a5a75803fd74721114449742f965f3988940e44cffcaf572ca5ae3dbb2dc7af1b64263c79c2"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x138, 0x0, &(0x7f0000000440)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x3, 0x0, 0x3a}, @fda={0x66646185, 0x7, 0x1, 0x34}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/17, 0x11, 0x0, 0x15}}, &(0x7f0000000180)={0x0, 0x20, 0x40}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@weak_handle={0x77682a85, 0x5}, @fda={0x66646185, 0x3, 0x2, 0x2f}, @fda={0x66646185, 0x5, 0x0, 0x2d}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}}, @acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/52, 0x34, 0x1, 0xb}, @fda={0x66646185, 0x2, 0x2, 0x22}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}}, &(0x7f0000000340)={0x0, 0x28, 0x48}}, 0x14c0}, @clear_death={0x400c630f, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x6, 0x2, 0xc}, @fda={0x66646185, 0x1, 0x2, 0x32}, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000400)={0x0, 0x20, 0x40}}}], 0x1000, 0x0, &(0x7f0000000640)="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"}) 22:33:50 executing program 4: socket$inet(0x10, 0x0, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capset(&(0x7f0000000000)={0x20071022}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r4, r3, 0x0, 0x2000005) read(r4, &(0x7f00000005c0)=""/193, 0xc1) fchdir(0xffffffffffffffff) dup3(0xffffffffffffffff, r3, 0xc8371006578da481) r5 = creat(&(0x7f0000000480)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) socket$unix(0x1, 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)=""/87, &(0x7f00000006c0)=0x9) mkdirat(0xffffffffffffffff, 0x0, 0x0) [ 519.653016] binder: BINDER_SET_CONTEXT_MGR already set [ 519.673365] binder: 23345:23347 ioctl 40046207 0 returned -16 [ 519.701004] binder_alloc: 22919: binder_alloc_buf, no vma [ 519.706751] binder: 23345:23347 transaction failed 29189/-3, size -5404406469667766272--7472097918062065077 line 3137 22:33:50 executing program 3: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') sendfile(r0, r1, 0x0, 0x4) sendmmsg(r0, &(0x7f0000005780), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_timeval(r2, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@loopback, 0x3, 0x1, 0xff, 0x1, 0xc77, 0x80000001}, &(0x7f00000004c0)=0x20) listen(r2, 0x80) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x402600, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xfffffffffffffc52) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f0000000180)='net/snmp6\x00') write(r4, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) pread64(r3, &(0x7f0000000400)=""/84, 0x54, 0x0) r8 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 519.741550] binder: 23345:23347 got reply transaction with no transaction stack [ 519.749022] binder: 23345:23347 transaction failed 29201/-71, size 104-24 line 2922 [ 519.793588] binder: undelivered TRANSACTION_ERROR: 29189 [ 519.805384] binder: BINDER_SET_CONTEXT_MGR already set [ 519.828700] binder: 23345:23354 ioctl 40046207 0 returned -16 [ 519.851564] binder_alloc: 22919: binder_alloc_buf, no vma [ 519.872982] binder: 23345:23359 transaction failed 29189/-3, size -5404406469667766272--7472097918062065077 line 3137 22:33:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000793bc8d30040"], 0x0, 0x0, 0x0}) [ 519.919455] binder: undelivered TRANSACTION_ERROR: 29189 [ 520.019473] binder: BINDER_SET_CONTEXT_MGR already set [ 520.040292] binder: 23366:23368 ioctl 40046207 0 returned -16 [ 520.060922] binder_alloc: 22919: binder_alloc_buf, no vma [ 520.076795] binder: 23366:23368 transaction failed 29189/-3, size 16384-0 line 3137 [ 520.101148] binder: undelivered TRANSACTION_ERROR: 29189 [ 520.108214] binder: BINDER_SET_CONTEXT_MGR already set [ 520.123985] binder: 23366:23370 ioctl 40046207 0 returned -16 [ 520.141696] binder_alloc: 22919: binder_alloc_buf, no vma [ 520.158668] binder: 23366:23370 transaction failed 29189/-3, size 16384-0 line 3137 22:33:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000040)={0x6, 0x42, 0xcb40, 0x98, 0x96e1, 0x8000}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 520.192691] binder: undelivered TRANSACTION_ERROR: 29189 [ 520.338336] binder: BINDER_SET_CONTEXT_MGR already set [ 520.348844] binder: 23374:23376 ioctl 40046207 0 returned -16 [ 521.081549] binder: BINDER_SET_CONTEXT_MGR already set [ 521.086853] binder: 23374:23375 ioctl 40046207 0 returned -16 22:33:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) creat(&(0x7f0000000140)='./file0\x00', 0x194) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001ec0)=0x14) bind(r0, &(0x7f0000001f00)=@hci={0x1f, r1, 0x3}, 0x80) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001f80)='/dev/full\x00', 0x400, 0x0) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001fc0)=""/220) getpeername$inet(r2, &(0x7f00000020c0)={0x2, 0x0, @multicast2}, &(0x7f0000002100)=0x10) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000002140)={0x0, 0x5, 0x3}) r3 = socket(0x8, 0x5, 0x5) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000002240)={0x1534e456, 0x87, 0x1, 0x7}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000002280)='net/ipv6_route\x00') preadv(r4, &(0x7f0000002700)=[{&(0x7f00000022c0)=""/230, 0xe6}, {&(0x7f00000023c0)=""/197, 0xc5}, {&(0x7f00000024c0)=""/58, 0x3a}, {&(0x7f0000002500)=""/5, 0x5}, {&(0x7f0000002540)=""/233, 0xe9}, {&(0x7f0000002640)=""/55, 0x37}, {&(0x7f0000002680)=""/107, 0x6b}], 0x7, 0xfffffff7) r5 = socket$inet6(0xa, 0x800, 0x80) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000002740)={'vlan0\x00', 0x1f}) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000002780)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000027c0)={@initdev, @initdev}, &(0x7f0000002800)=0xc) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002840)='/selinux/enforce\x00', 0x80080, 0x0) fstat(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() fchown(r6, r7, r8) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000002900)={0x1}) r9 = socket(0x865c91fc90ea55f9, 0x800, 0x9) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000002980)='fou\x00') sendmsg$FOU_CMD_DEL(r9, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0xec004117664844eb}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002a80)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000002ac0)={@local, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7, 0x3, 0x8, 0x400, 0x5, 0x84000008, r11}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002b80)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000002d80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f0000002d40)={&(0x7f0000002bc0)={0x174, r12, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7dd7775}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x277}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x230000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x76}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff499d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x373740}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x20, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendfile(r0, 0xffffffffffffffff, &(0x7f0000002dc0)=0x80, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x3c182e0f01e61a0d}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e40)={0xb0, 0x28, 0x1, 0x70bd29, 0x25dfdbfd, {0x1b}, [@nested={0x9c, 0x30, [@typed={0xc, 0x9, @u64=0x5}, @typed={0x8c, 0x32, @binary="2684e6066c0c534928ca642d6d0b6b7fea93b3a3318764e087d51fa25b832b641effb0bc433e8b5147f3b68c6976f0ac3d7d276ea271af57ffe11ff25ad16bf17998377d768c471d3c35e61c6a3c9c9c2c999fcfd8f201f28ad43fcfdd644ce8cf7de5a688455cdeacce9a968262133930d786d55f58983683eaddf6c7facfb4b315f276f9"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x46000000) io_setup(0x8, &(0x7f0000002f80)=0x0) r14 = openat$keychord(0xffffffffffffff9c, &(0x7f0000002fc0)='/dev/keychord\x00', 0x21200, 0x0) r15 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000003080)='/dev/vga_arbiter\x00', 0x0, 0x0) r16 = openat$null(0xffffffffffffff9c, &(0x7f0000003100)='/dev/null\x00', 0x24000, 0x0) r17 = eventfd(0x1) r18 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003280)='/proc/self/net/pfkey\x00', 0x200982, 0x0) r19 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000033c0)='/selinux/status\x00', 0x0, 0x0) r20 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000003440)='/selinux/context\x00', 0x2, 0x0) r21 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000003500)='/selinux/checkreqprot\x00', 0x900040, 0x0) r22 = eventfd(0x81) r23 = openat$dir(0xffffffffffffff9c, &(0x7f00000045c0)='./file0\x00', 0x20, 0x4) r24 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000004700)='/selinux/relabel\x00', 0x2, 0x0) r25 = openat(0xffffffffffffff9c, &(0x7f0000004800)='./file0\x00', 0x400000, 0x20) io_submit(r13, 0x8, &(0x7f0000004880)=[&(0x7f00000030c0)={0x0, 0x0, 0x0, 0x1, 0x4, r14, &(0x7f0000003000)="74d920a3e7db4fb2ead2e35f2ecbe3c4f5a82b88ad4fcbaa60d2cd79c6fd167e2230765d2f9a6e157d5f147c5ba25ad06f736c87eff17e3aba62a458597f00a03f6f1c7d339773754f05aef1ec48c1b7d6e13f526baa2bc5bcb0f0cc02638e7326fe3fce11", 0x65, 0x5218, 0x0, 0x2, r15}, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x5, 0x8, r16, &(0x7f0000003140)="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", 0xfa, 0x6a, 0x0, 0x3, r17}, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x8, 0x9, r18, &(0x7f00000032c0)="e547005dd19df1007a5abd4007660cccecda7330432f51d229d6139df9c0e92c026a0ffcac42d1629e6835e0ff46ca3ffdd50a779b2a3bb488465f03da501e6e43bb670408ce510bf6daba8081823f98f2715024b790a17d9488cb52a12236490a066592fe9a3b6ecaa6e2d48d8dcdd440402ee4e79ade9e1f46f440eac2ac892b712b3fad640624ccbe201b6899075008f49f70a2767bcff4ba6a1fde966f66d86cd4d4b14f09fc74714aabc147be168438333705863646b709064546e3824605069cf90c4c33437e7f49f05c6c436a0da8be05693576d8b67dda08f9", 0xdd, 0x4, 0x0, 0x2, r19}, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x2, 0x2, r20, &(0x7f0000003480)="177f440b171bcefbb765c633452e758f06608ad6cb67747491128d23d6a2729c62d6e2e77e799529fd19e7befe6c1498f22f23edb41a59079464606e80ca1a9c2c0a44b68e47f578be559c7c017f5236506858dcae0cf9", 0x57, 0x4a, 0x0, 0x0, r21}, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x945, r2, &(0x7f0000003580)="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", 0x1000, 0x80000000, 0x0, 0x1, r22}, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x20f35a4b0b27fb15, 0xfff9, r23, &(0x7f0000004600)="e27e6a1a3506d5f3cea563b74fd10a730367254f87b21ff235a1dad752588d061a67d5c70d85e7fd31e70edacceeea7e40635b48a57418a9f6f853b061c618de6c63e08423783683e8b4e6a1494507c3a814df77b2c4ede964033932ad465dd225989f5ea75c248ea432748716b780c7cadc9a9dc3d189fb4f8f12795442bbe59a4f1b", 0x83, 0xbfff, 0x0, 0x1}, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x7, 0x1, r24, &(0x7f0000004740)="f6e4cca2e6ed8bd404850ddc350d4766ffd7b9925199dc9545fb602a0d04a8450d19f3f5", 0x24, 0xdfc4}, &(0x7f0000004840)={0x0, 0x0, 0x0, 0x2, 0x0, r2, &(0x7f00000047c0)="820afb4aadb76dec430d08bdc18c8de81da3b4b34661de7f30f72e490fd9f5afec841388962469910044c7a067ec0290fdcc", 0x32, 0x0, 0x0, 0x1, r25}]) 22:33:52 executing program 4: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r3, &(0x7f0000000640)="ceb4dd04f188aee7cbdb88d946ada8883baed05766e2af34a477f4e62821188095df6c2a6a463760f3a83ad3c21a001682bcf3962241c3dea6d5209811b6a85f000000", 0xfffffeed) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = gettid() rt_tgsigqueueinfo(0x0, r5, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r6 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_buf(r6, 0x29, 0x6, &(0x7f0000c4dff5)='m', 0x1) close(r6) connect$inet6(r6, &(0x7f0000000440)={0xa, 0x4e24, 0xffffffff, @mcast2}, 0x12) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) ioctl$TIOCGPGRP(r2, 0x540f, 0x0) syncfs(0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, 0x0, 0x4000) getuid() openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00\xeeO\xbdN\xb1\xc6\x19\xcc\"7\x8fz\x8d\b\x89Or\x94\xfdo\xad\x82\xaa\xdfH\xf0_v\n\x80\xe7\xeaA\xeb\xb4\"8I=\x1ad\xcc\xaf2.\xfc\r\xeevHl\xf2\xe8\x1b\xd2\xc7\xec\xce\x99.\x80dYbC\xac\xe5\xe9\x90\"\xad\xfe\xa6\xb8\xad\xcc\x80\x0f@>q\x8d\xf8Q\xc3\x91\x9f9\xb46\xd5\x05?\xaai\x15}\xef\xe9\x18]p\x16\xdb^8\xd5\x02\xd8^\x15\xc4:~6#M\xec\x87\xb2') 22:33:52 executing program 3: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x1) memfd_create(0x0, 0x2) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000280)=0x400100000001, 0x4) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000940)=@ethtool_pauseparam={0x6}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000000000)) lsetxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000480)={'L-', 0x27fffffffa}, 0x28, 0x3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/8, 0x8) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)) ioctl$TIOCSSERIAL(r4, 0x541f, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x1, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c3}) close(r4) fcntl$getownex(r4, 0x10, &(0x7f0000000700)) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) getrusage(0x0, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000004c0)) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x8) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000140)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r6, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r7 = dup3(0xffffffffffffffff, r6, 0x80000) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080), 0x4) r8 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r9}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000010c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000011c0)=0xe8) sendmmsg(r5, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)}], 0x1, &(0x7f0000000b40)=[{0x54, 0xe2, 0x6, "33e6668136720c3e1ec0e6992665444b5e4fb35a8acbc934af2197b00051f5d1dc79ee316b754f4ccdaf99b3a553df040ffdfb805249f991722fd032c83052cad74a342f1398eef2"}, {0xd0, 0x1f4, 0x6, "abbd9e0c506bb19ef81ab33cca6bd7ad8d17e37f7d85462bf3d4fa86f865c866fdaba54195edf4b4220cf620041dea16d627f0d4bd07426e1f104090044acd90bb18433888616fd91b9acee64327bb881a54a47d1a1a6971bc3411562b85243c76a0fe5b32ef8493aed182bed3026aab0f61468f06fd5f3d52e2e934e82b98bad5ed2b7c7bff52bf6455d81f7c59694d5cea5bbce1300db61f33ca0d23de193ee6592e7e9e612a52910043022c8aa5007b56a794a1675d9debd7684253f857d4ff31"}, {0x5c, 0x3a, 0x1, "fb939a9fe73d231c8ca9ee13dd9eba6fca695e06dbbde9334edfb8fc2b0c9f2bf5ccd5b06857560e1d846fc5e52a0fa24dee31ec7e050593ccc141d438f88857922afdebeda55ea75b4b63b31a"}, {0x1c, 0x75, 0x7ff, "fe930f7989da810c169099e2ea"}, {0x98, 0x115, 0x4, "eb0159acc2e336c4ad470a99018162b62e4e8cc1949c634aa382a4272c622c11e20973e46cb1df1cb8ba8ded878e8a70fe57baaf2fa8e61cb41a0519621eee595da407540e031c4ea9652b897a297458d6d19e95a27348cd3f99409162ebba3d37f0513dffd478153115a4a4c7f370e61056c937de4f8b7e6e64e9f8d44dc593a2c853214418180cc514045e"}, {0x108, 0x9f, 0xa1, "8178398550b46ee7108afcb441c618dce3d2173185f0938da01c5faeb4ef39db6e8d70610d1911762383613e2a9cc6ec2df227861f96483cb21cf5c71f9dc7f5585b9d5885f737290c1e9dec9ebc6f54c20773d7ce1d0bfa1362c3826bf43ce6c361123c7530aaa6b6bc42a458fa53077b4f3c524079e55cbd58c42d20543b9ff87232957dfedf4c10fed9f043f56187f92b98a4b4173fb3f3b5ee8c36153feca7a3e4cbf212d51e220378f4154932610e967d232d8f3a6976570ae48c9b0f5900047b8ee39c26dd674dea050ee2b40b6ca67090ac2788402ac8046910e56b88b8bc71fe5d012c38eb627f5c27da32ce5180816bfaf5fafd30f6607e"}, {0x44, 0x10c, 0x80, "b1c94c6823c2b2f52c8e2f59b81bc292c52ac8e30d6f44b73e0d24a832c8f3bf17451dda045b84db43cb2a5c38755c646f7a57607004a1"}], 0x380}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)="0ce444cf4dbbdd0542b9549f466f7bf7406602926a2478aa87f0bd337a039ee46d4900c6e9132bdac103596a3226f86785d2f795e8a8c0aa5e8e1fc8bd24744bc8d17787ba43b2d37ffc96ea5b264d54b8d89273ad50c8b0fe04c3a6f1f5a6b2b2aa4e2c7d8f70984ca5d8cf914f3c2b64997ec7d76a04df16a2de23f2cd41d0749ad46bf7b9c113db28d0ee9d68c53165404e09ca79fce7185699771d86", 0x9e}, {&(0x7f0000000400)="b575c7b8537568679f1bb761a38eb37706469a0a51d8b9cbe286dc559cd01560218377596ab8557235dddb7de9181d11cc44999c8389a01313f0f50006448bcdbf665ab89aaff364397b958e99a31797b1eb93640bb07cccafa61f5be436224d7aba09182fc2", 0x66}, {&(0x7f00000005c0)="ef04dba3c80359634342dc8621d419", 0xf}], 0x3}}, {{&(0x7f0000000640)=@xdp={0x2c, 0x8, r9, 0x21}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="4887b8d73bbc2d3743a20825944d045817d445394c7073f475e6e55a9f0e31ea518d781ddb029dacdbba44acaffe921b7fffdb596e2924c6586d320d99a0c669889354eabb26b60e0c88f3d8e73e20a850c5a1a2cd607b341191b998bb51d89964795d44351e8cc013538e39bd7a9a7156b68921fbc87efdddb066786d6ffeba2a217744ff3bbb45727e72cd8ed56dbe98800d404cf697330ba46d3d6272ea6694505b1a10f1baf67013a2b0fd6e11aeb631392a8275e58a999c461ce12cb1c08cf069be71824f11c93087e0ad5eae8293ab0a7394116d30979c425539ccca783ddb230e49234d3d6a6f7905d99d", 0xee}, {&(0x7f0000000840)="e9171956d38c1a8622ed77819fdb6d4175d849789b4a66a2c3744497818b0d21b12745f22cb3a22dc7ecdab08f5d29b435a9028cfe2d99b8576b83c6f3600f3b839aa36f", 0x44}, {&(0x7f0000000ec0)="ba8ac2739347f2daf2ef401550911ad517154365351d042b54e46bc75909a73b80c3b937ee052a8701d9b4dfbe75869dc45b5f867debb136f42fac0775a9349e66be6f4decf374436fac394319cdbcb47bb26cbc5b2c7518b904023e0315c265868cf0ad3935b3545c14f365cd2c58b14979d976314f92b0ac88955ae0fe931124541379aae2b863bd2313b234628656bba7bab3b93b6392d6c883f9a5a399239b2046b1012f2762493b14d4b09ba6365ee2a6f4de6c0ec204050316beb1e0ba13d4cd63fbb9a344359d8f9090bc51fba6ade41204a78a2f", 0xd8}, {&(0x7f0000000fc0)="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", 0xfb}], 0x4, &(0x7f0000000900)}}, {{&(0x7f0000001200)=@can={0x1d, r10}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001280)="7f1bd2f2092aff23f2a600268b78b05e17b8cdd536690ee93bf22112b5b68bb3d46ba3bc62012bd61086d21d894398d7489413b8436b3a3eb810a73f17bcd02dfdda52aed3372a6eb2cb6499dee11c127705499f007ecb2253ef2d7cf2f4be11865e10bc0e06eb109a1c1ffe663f5901e38360573a8713aa2b6513f523604deae117d548c70cf5a493a8b152dd16e1dfdecedc75364ce525c6a2898f7f7940dd26d6114174ac0b2665d5007ac36887c4bb548a5edb3768db1672de7c5397d0b092b78c1097f7c66f9892bb270a3ac34ad5d6bb498d", 0xd5}, {&(0x7f0000001380)="2bb3435258f9787f2ba8b9ff129b89cca4e1302fad8a7126", 0x18}], 0x2, &(0x7f0000001400)=[{0x54, 0x1, 0x7ff, "3edea344a81017d11787b96de49634983b1194f0838eb0605e06999adf939a3bb4631acf8b86172422bd09561ccb58fbc15064fb3478b3fdd183f598d7c513737a1c44917122e0ae"}, {0xe0, 0x10a, 0x7fffffff, "0f7d608d8e1a9f8a12d1fe1db1d10219656f7e4a443e8c07512c61df119beced85cd5ef4846b3506872afc1215cb232b812bd67caf0cd2fc44b82fad00f89dbe59cf08f7d32d7cf635453b583d26f1d02da6a1486ad07ba11d3f557c054b735e1b54cabc65d1d0f34df9d25cca0ec2fdf79c6f4c8a89d5773a9ee9957cbe8075f1c9bbc7b5e9fd6aa681e83fdd488c978192ee8d3c1c3d470b5c41efa289f872316bd142ef7f32b12374019a8b6dc1999bafd6efd225b279c13bf730fc8dec257909f9237325758df45484f47b928df6bbcb"}], 0x134}}, {{0x0, 0x0, &(0x7f00000015c0), 0x0, &(0x7f0000001600)=[{0x74, 0x113, 0x80, "f2d943d3272934b27230187701a9c09e95be4cbad88d2d2993c51fb10f1e9d47212b25d8ca65a13010fd5f4ddc3a7d8480341bc5168a825c346a9fd850ce7e6785375f9ebd08b714b47d3fa84f86f835050a3e538fcbc2d45aaadfdb6eec651434bfb312130188"}], 0x74}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001680)="90fa77aa9e9216d417614ecf437090d0ab71c39c5afef89312fd6702645b306d2140da5681f0ce5a8c52d4404d6f19377eb01978ef9ccb9b9bebd4769393c83cfdbf605a5d9b5048bd62c81dac2401cecd781453dea5cdc7849d1f16799a3ae7de77f7a7c480ad758bfbc555e0f72074d217b20544032ecd590ca7c2b319fcbd71d068bc06e09d972f17cfca524dd783de", 0x91}, {&(0x7f0000001740)="ee6d7afcf920e668f6cd8141738dfb0bd3097281b29a5a2efc5214ed8d75c330e85ecfbc7bd56c083609c7c227efb4ceda980a6efefedd41a4ede2dc8c9bdc8b1acefa58b1c537bf4e3a2b5e67f3a0258e8d7b6a16037965197874210383cab8faa31518a33e3df19e3b50fe4e9bd456a67de3c16d916ae907ad5acaf11e88914a29a4e8d3341320d25cd5004ff5", 0x8e}, {&(0x7f0000001800)="614f24f4f20f03ee51e1fdcc16c4468b8778f9579f679f6378f0440dfb5f264aebe184ca49eccc14", 0x28}, {&(0x7f0000001840)="45f5928ed754d1958415a0ee0e7c52a86f16e2e4cf7fc30c1d01a26a89d8b58eb19adcc978b8cda648e8c6d418ddeebce41fa13bdbbc3dccb6ee886643290ac678388552b971871f806ef51756eacf69726c0092cb3679d63de9c36f6168feed12b57d7b3e852ce6834c26c7f095edc4c37c47e8e2611f0bb4acd2f9f55b83d1bb4b62d944678d5ef3f37a6fcf9aa8ad39efd606b2bdcfa2", 0x98}, {&(0x7f0000001900)="4b427d122f8dcee5796862b5a59ec876a97d90", 0x13}, {&(0x7f0000001940)="a1188905b47ba245cdd10210504b6e9b95bcff7b7e4848639da2674855899548769ebdac0f402e6a30697ebfaaada47eb77aee60c61f57dc09a78c4297a167f6011bce84de1643bb2bfa117e3fe7ddaa22301fda5cffe20c27f4c61761e37d92bd9f3120ed28e8f7d2e4e35e9f4dfd1a33b23ce2c713d60a840306c6ba45d7ce8bf05dba46125af81c28134331146d6cfe9791d8a758d9b88a651bf90c660886d893e2ed09b94481488ba23c58b99ce287c0df3899fdfd745dff3c099b50dc650a5d41fbebfbb8e249a206be110ac0db75828ceb112f78175c6e8613f219f4a123", 0xe1}], 0x6, &(0x7f0000001a80)=ANY=[@ANYBLOB="800000003a00000031000000b07dc4742db9c8c2a6570918c4be85bd89dab982db41de9cc7f672fb927d0793a5d200e7d470f778b2d6070cd812725e5064969885ed464740df47552b3115302401b88ba668f1f4a1efb8b8ea0814971fdc097cdc30355b550200000000000000b916719af7ba81f81d994dce3d36787f7800005c0000008400000000000078e95bc4d5fc1d0bf3b64034a09cf2d134da9e31ec08c81a87f258a7762168cc24e27db92b2222a4567a6de6a4abfd18666a36be9f3d5921369a1f29b2000038000000110100003cd30000017641d3d5f9ff3244a0a81dbbe4acceeee07db15e4929dee5679fc2b1af1db9912d2676c1da41017d2b00"/276], 0x114}}], 0x6, 0x0) r11 = open(&(0x7f0000000180)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r11, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR], 0x18) sendfile(r11, r11, &(0x7f00000001c0), 0xa198) 22:33:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000180)=@profile={'permprofile ', '\x00'}, 0xd) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) symlinkat(&(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) 22:33:52 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, {0x306, @link_local}, 0x2, {0x2, 0x4e24, @multicast2}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast1, @in6=@remote}}, {{@in=@multicast2}}}, &(0x7f0000000080)=0xe8) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r2, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r3 = dup3(0xffffffffffffffff, r2, 0x80000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080), 0x4) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r5}) getpeername(0xffffffffffffffff, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000780)=0x80) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) setsockopt$inet_mreqn(r1, 0x0, 0x9638e949580e1dbf, &(0x7f0000000140)={@loopback, @multicast2, r5}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x1}]}, 0x8) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r10, 0x0) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@loopback, @in6=@empty}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000400)=0xe8) getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) r11 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0xf06, 0xfff, 0x0, 0x200, 0x6}) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000001400)={{0xa, 0x4e20, 0x291, @ipv4={[], [], @empty}, 0x9}, {0xa, 0x0, 0x8080000, @ipv4, 0x10001}, 0x6, [0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x8]}, 0x5c) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x4) ioctl$TCSETAW(r11, 0x5407, 0x0) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00') ioctl$EXT4_IOC_ALLOC_DA_BLKS(r12, 0x660c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r14, &(0x7f00000001c0), 0xfffffef3) read(r13, &(0x7f0000000200)=""/250, 0x50c7e3e3) close(0xffffffffffffffff) unshare(0x2000400) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r15 = socket$inet(0x10, 0x3, 0x0) sendmsg(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000240)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r15, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000700)=""/74, 0x4a}, {&(0x7f0000000440)=""/20, 0x14}, {&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000000380)=""/23, 0x17}, {&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000000900)=""/165, 0xa5}], 0x7}}], 0x1, 0x3a, &(0x7f0000000200)={r16, r17+10000000}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) [ 521.798392] binder: BINDER_SET_CONTEXT_MGR already set [ 521.814668] binder: 23387:23391 ioctl 40046207 0 returned -16 22:33:53 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x4, 0x0) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x0, 0x0, 0xfffffffffffffd00) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f0000000580)='ont\x02', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r8, 0x0) bind$inet(r8, 0x0, 0x7c) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r9, 0x2007fff) sendfile(r5, r9, 0x0, 0x8000fffffffe) 22:33:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r1, r2, 0x0, 0x20020102000007) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) r5 = dup3(r2, r4, 0x180000) write$uinput_user_dev(r5, &(0x7f0000000140)={'syz0\x00', {0x0, 0x76, 0x1ff, 0x56}, 0x51, [0x2, 0xffff, 0x80000000, 0xc6a, 0x4, 0x7, 0x101, 0x4, 0xecf, 0x5, 0x0, 0x40, 0x2, 0x3, 0x6, 0x4, 0x0, 0x80, 0x2, 0x9, 0x6, 0x1, 0xd, 0x8, 0x6, 0x5, 0x0, 0xdc3, 0x4, 0xff, 0x80, 0x3, 0x6, 0x8000, 0xfffff800, 0xff, 0x9, 0x362, 0x3, 0x101, 0x2, 0x81, 0x8, 0x1000, 0x2, 0x7, 0xb7, 0x79b, 0x6, 0x6, 0x9, 0x8, 0x3, 0x81, 0x8, 0x4, 0x40, 0x7ff, 0x200000, 0x9, 0x3ff, 0x7fffffff, 0x748, 0x9], [0x1, 0x1ff, 0x2, 0x200, 0xbc2e, 0x80a7, 0x80000001, 0x200, 0x7, 0x6, 0x7, 0x5, 0x64, 0x6528, 0x3, 0xffffffff, 0x0, 0x1, 0x7, 0x9, 0x0, 0x9, 0x10000, 0x3, 0x1, 0xfffffff8, 0x401, 0x1, 0x5066, 0x9, 0xda, 0x21, 0x7, 0x69, 0x1, 0x5, 0x8, 0x5, 0x4, 0x9, 0xa00, 0x8, 0x9, 0x1c52, 0x1, 0x720987bd, 0x8, 0x1, 0x6, 0x7, 0x80000000, 0xfff, 0x4, 0x2, 0x7d2, 0x4, 0x5, 0x1ff, 0x7fffffff, 0x3, 0x6, 0x100, 0x1f, 0x1], [0xffff7464, 0x1f, 0x4, 0x7fff, 0x9a52125, 0x5, 0xfffffbff, 0x0, 0x1, 0xd20, 0x1, 0x10000, 0x1, 0x10001, 0xbe8a, 0x8, 0x2, 0x8, 0x6032, 0x1e3f, 0x9, 0x4e5f1484, 0x800, 0x3, 0xffffffaf, 0x101, 0x1f, 0x0, 0x0, 0x3645, 0x1, 0x3d, 0x3f, 0x80000001, 0x5c20, 0x4, 0x0, 0x10001, 0x4, 0x6, 0x0, 0x7, 0xffff, 0x6905, 0x1, 0x5, 0x200, 0x8, 0x141, 0x0, 0xfffffffc, 0x11342623, 0x20, 0x9, 0x4, 0x1ff, 0x7, 0x1f, 0x3, 0x1, 0x9, 0x401, 0x9, 0x9], [0xffff, 0x4, 0x2, 0x6, 0x2000, 0x6, 0x0, 0x9, 0xffff0001, 0x40, 0x3, 0x0, 0x453, 0x2, 0x1, 0x10001, 0x8, 0x2, 0x9, 0x12, 0x78424142, 0x0, 0x20, 0x1d2, 0x132, 0xb23, 0x8, 0x1, 0x0, 0x0, 0x7fffffff, 0x9, 0x1000, 0xfffffffb, 0x4, 0x14789960, 0x28000, 0x0, 0x1ff, 0x4, 0xb1a, 0x1513, 0xffffd8ec, 0x170, 0x7, 0x401, 0x9, 0x800, 0x1, 0x1, 0x3f, 0x5, 0x4, 0xfaaf, 0xff, 0xff, 0x10001, 0x7, 0x7fffffff, 0x9, 0x101, 0x200, 0xffffffff, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xfeffffffffffffff) [ 522.596598] binder: BINDER_SET_CONTEXT_MGR already set 22:33:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0x4000fffffffe, 0x4) recvmmsg(r0, &(0x7f0000000000), 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./file0\x00', 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x2, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xc) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1f) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = getpgrp(0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0xa, 0xff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xf1}, 0x0, 0x80000000, 0x80000, 0x0, 0xffffffffffffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x100000000, 0x3}, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$inet6(0xa, 0x20000000000002, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe94}}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x2, 0x0) syz_emit_ethernet(0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESDEC=r4], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="c42100ae2da39afa9d54926ac18180bd7bfcae209a7c92fe01d17b6662e4ffff070045c7db"], 0x0) r7 = memfd_create(&(0x7f0000000400)='\xfa\x00\x00\x00\x02\x00\x00\x00\xb46x_', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r1) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x4093a5e4aad69aea) r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fallocate(r9, 0x3, 0x0, 0x8001) fallocate(r8, 0x0, 0x0, 0x8003) write(r7, &(0x7f0000002000)='/', 0x1) sendfile(r7, r7, &(0x7f0000000200), 0x87) sendfile(r7, r7, &(0x7f0000000240), 0xfec) fcntl$setsig(r8, 0xa, 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r7, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) mount(&(0x7f0000000080), &(0x7f0000000080)='.', 0x0, 0x5010, 0x0) 22:33:53 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/250, 0xfffffffffffffee3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) r2 = dup2(r1, r1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r3, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r6, &(0x7f0000001e00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000001540)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10100000000000000700000007030600324eef83c207f1676f4aa2519c5bfb42e04be334a29c449d79aa34a52c6a112078c8cdc3f92c6944422046087ef48df39a83a7512acfeaddeceed1651815de5f1c655973e616d8fce7c340bd89fbf448e801c6acfb17dff74b1db1cd0453887ec2bc4cc2d4b5846a67cb246738092007f6840b8d6c10893a82d477975e77f750764637b046855e7c7dcf9a06998bad50f4e51bf6b7df94d8"], 0x10}}], 0x2, 0x40000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r3) r7 = creat(&(0x7f0000000840)='./file1\x00', 0x0) fallocate(r2, 0x42, 0x5, 0x401) getsockopt$inet_pktinfo(r7, 0x0, 0x8, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x2e, &(0x7f0000000380)={0x0, {0x12a2}, 0x0, &(0x7f0000000200)="c4e1fbf054b374c4c195f480e9000000c4c261de190fa1c4c279787f00c4c37916877ac6000037260f1d2c712664dce126660f3a4449060a2913"}, &(0x7f0000000700)={&(0x7f0000000640)="c4e17d2884c41cf16edec4c12014cac4e1dded27c4c18df17c9919c4c291df68f4c4e3750fc20126d8f4660f2b98f6ffffff0f01d60f186620", {}, 0x0, 0x0}, 0x8, &(0x7f00000007c0)) getegid() r8 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000300)=0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f00000001c0)) ioctl$EVIOCGABS2F(r9, 0x8018456f, &(0x7f0000000480)=""/224) [ 522.617967] binder: 23387:23436 ioctl 40046207 0 returned -16 22:33:53 executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500)='devlink\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x88, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8b, 0x3}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x89, r2}}, {@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc804}, 0x51) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) r5 = getpid() wait4(r5, 0x0, 0x0, 0x0) sched_rr_get_interval(r5, &(0x7f0000000000)) 22:33:53 executing program 3: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x28002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss={0x2, 0xfffffffe}, @sack_perm, @sack_perm, @window={0x3, 0x1ff}], 0x6) fremovexattr(r1, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280), 0x7) r2 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) connect$packet(r2, &(0x7f0000000480)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000300)={0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) setns(r0, 0x12000000) pipe(&(0x7f0000000580)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) sendmsg(r4, &(0x7f000000bfc8)={&(0x7f00000004c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc}, 0x80, &(0x7f0000002000)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffe2e) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000400)=0x37, 0x80) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x475e, @dev={0xfe, 0x80, [], 0x8}, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000140)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'sed\x00', 0xa, 0x1, 0x3f}, {@empty, 0x4e23, 0x4, 0xffff, 0x3, 0x6}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000b00)) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)=0x0) getpgid(r8) geteuid() stat(0x0, &(0x7f0000000740)) r9 = syz_open_procfs(0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x62, 0xaa, 0x5, 0x3, 0x3, 0x3ff, 0x14c, 0x40, 0x2ab, 0xff, 0x0, 0x38, 0x1, 0x7c99, 0xff, 0x389}, [{0x4fc660c818fda4f, 0x27, 0x2, 0x2, 0x0, 0x7, 0xffffffffffffffff, 0x8e}, {0x6474e551, 0x2, 0x100000000, 0x1, 0x1, 0xb2c4, 0x100000001, 0x5d}], "525b50a814f142eeb3e503420b94ae61077a5b0153cd8752574ef2bc3c8160566b2b03e5d6c3ee3cd37062f3190d32dfef39ebc5b7a02b797574d4cfc71cfcdd1580785509371e17bbcf95d318b569f2fc18496e676bb300976233378305a7567ee544beb2b174d5dfe2", [[], [], [], []]}, 0x51a) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001680)={{{@in=@local, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001780)=0xffffffc9) lstat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001f80)) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) [ 522.875341] binder: BINDER_SET_CONTEXT_MGR already set [ 522.909482] binder: 23451:23458 ioctl 40046207 0 returned -16 22:33:54 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) creat(&(0x7f0000000140)='./file0\x00', 0x194) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:54 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f00000000c0)=@ethtool_test}) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x401c7012, &(0x7f0000000400)={0x6, 0x8, 0x5, 0x0, 0x7, 0x1, 0x6}) getpeername(0xffffffffffffff9c, 0x0, &(0x7f0000000680)=0x8c) bind$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000001680), 0xfffffffffffffe63) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) syz_emit_ethernet(0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0) fcntl$setownex(r3, 0xf, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000a40)=""/4076) bind$unix(r5, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e22}, 0x6e) get_robust_list(0x0, &(0x7f0000000580)=&(0x7f0000000180), &(0x7f00000005c0)=0xc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000a00)=ANY=[@ANYRES32], 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x8, @ipv4={[], [], @loopback}, 0x20}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) getsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 22:33:54 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000000c0)=""/22) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x32c0eaaf595da755) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000140)={0x86dc, 0x6, 0x800, 0xfff, 0x4, 0x6, 0x1, 0x4, 0x3, 0x5f}) clone(0x800081ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 22:33:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:54 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x20, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r2, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS2F(r3, 0x401845ef, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0xffffffffb0effc5f) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r6 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x1, 0x7f, 0x7, 0x0, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r6) write$P9_RSTATu(r6, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x0, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x0, 0x0}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000200)=0x1000000, 0x4) 22:33:54 executing program 3: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = openat$keychord(0xffffffffffffff9c, 0x0, 0x28002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000380)=0xffffffff80000001, 0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00', 0x2}, 0x18) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @mss={0x2, 0xfffffffe}, @sack_perm, @sack_perm, @window={0x3, 0x1ff}], 0x6) fremovexattr(r1, &(0x7f00000007c0)=@known='system.posix_acl_access\x00') setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000280), 0x7) r2 = open(&(0x7f0000000240)='./file0\x00', 0x101000, 0xc1) connect$packet(r2, &(0x7f0000000480)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000300)={0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) setns(r0, 0x12000000) pipe(&(0x7f0000000580)={0xffffffffffffffff}) read(r4, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000000c0)) sendmsg(r4, &(0x7f000000bfc8)={&(0x7f00000004c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc}, 0x80, &(0x7f0000002000)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0xfffffffffffffe2e) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000400)=0x37, 0x80) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x475e, @dev={0xfe, 0x80, [], 0x8}, 0x4}, 0x1c) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000140)={{0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'sed\x00', 0xa, 0x1, 0x3f}, {@empty, 0x4e23, 0x4, 0xffff, 0x3, 0x6}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000b00)) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000000c0)=0x0) getpgid(r8) geteuid() stat(0x0, &(0x7f0000000740)) r9 = syz_open_procfs(0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x62, 0xaa, 0x5, 0x3, 0x3, 0x3ff, 0x14c, 0x40, 0x2ab, 0xff, 0x0, 0x38, 0x1, 0x7c99, 0xff, 0x389}, [{0x4fc660c818fda4f, 0x27, 0x2, 0x2, 0x0, 0x7, 0xffffffffffffffff, 0x8e}, {0x6474e551, 0x2, 0x100000000, 0x1, 0x1, 0xb2c4, 0x100000001, 0x5d}], "525b50a814f142eeb3e503420b94ae61077a5b0153cd8752574ef2bc3c8160566b2b03e5d6c3ee3cd37062f3190d32dfef39ebc5b7a02b797574d4cfc71cfcdd1580785509371e17bbcf95d318b569f2fc18496e676bb300976233378305a7567ee544beb2b174d5dfe2", [[], [], [], []]}, 0x51a) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000001680)={{{@in=@local, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001780)=0xffffffc9) lstat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001f80)) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) [ 523.855719] binder: BINDER_SET_CONTEXT_MGR already set [ 523.878271] binder: 23479:23483 ioctl 40046207 0 returned -16 [ 523.921232] binder: BINDER_SET_CONTEXT_MGR already set [ 523.955409] binder: 23479:23487 ioctl 40046207 0 returned -16 22:33:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffd) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0xfd49, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 524.088744] binder: BINDER_SET_CONTEXT_MGR already set [ 524.143275] binder: 23496:23498 ioctl 40046207 0 returned -16 22:33:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_SVE_SET_VL(0x32, 0xcc2c) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x1000, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) [ 524.195238] binder: BINDER_SET_CONTEXT_MGR already set [ 524.201527] binder: 23496:23503 ioctl 40046207 0 returned -16 22:33:55 executing program 5: lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00', &(0x7f0000000140)='\x00', 0x1, 0x3) r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x1100082) fcntl$setstatus(r0, 0x4, 0x4000) memfd_create(&(0x7f0000000100)='\x00', 0x1) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@v1={0x2, "5349beef792ad07121c5d5f6be5782"}, 0x10, 0x1) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700000000000000af070000000000000600000001000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000010001000000000007000000000000005b99f97d000000000000000000000000881500000000000000000000070000009cc22a4dd8e88ea60268dcb4511c23eec1000000000000"]) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x124) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr/current\x00') ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06055c8, &(0x7f0000000380)={0x8, 0x0, {0x57, 0xcb, 0x3, {0x40, 0x7fff}, {0x1, 0x7e}, @cond=[{0x0, 0x9, 0xfff, 0x8, 0x58, 0x9}, {0x5, 0x7, 0x7, 0x1f, 0x1}]}, {0x53, 0x800, 0x0, {0x8, 0x5}, {0x10001, 0xfffffffffffffffb}, @cond=[{0x7, 0xa86b, 0x3, 0x7, 0x7, 0xd8}, {0xffffffffffff8001, 0x2, 0x1ff, 0x41c7c716, 0x2, 0x62c9}]}}) r2 = open(&(0x7f0000000840)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000001980)=ANY=[], 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00005d5ff3)={0x2, 0x4e20}, 0x10) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/58, 0x3a) setsockopt$inet_tcp_int(r3, 0x6, 0x200000000000a, &(0x7f0000df8ffc)=0x4, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setfsgid(r4) sendto$inet(r3, 0x0, 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x5, 0x4) sendfile(r2, r2, &(0x7f0000000080), 0x10001) [ 524.334137] binder: BINDER_SET_CONTEXT_MGR already set [ 524.368535] binder: 23507:23509 ioctl 40046207 0 returned -16 22:33:56 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x202000) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4000000004e24, @local}, 0x10) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) truncate(&(0x7f00000000c0)='./bus\x00', 0x800) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x800, 0x0) write$P9_RLERRORu(r4, 0x0, 0x0) sendfile(r4, r4, 0x0, 0xffffffff80000001) timer_create(0x3, 0x0, &(0x7f00000003c0)=0x0) timer_gettime(r6, &(0x7f00000004c0)) lseek(r1, 0x0, 0x2) sendfile(r1, r5, &(0x7f0000000040), 0x8000fffffffe) socket$inet6(0xa, 0x80004, 0x0) sendfile(r1, r5, 0x0, 0xa5cc554) ioctl$TCSBRKP(r0, 0x5425, 0x0) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {&(0x7f0000000740)=""/94, 0x5e}, {&(0x7f00000007c0)=""/122, 0x7a}], 0x4}, 0x4}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001a80)=""/227, 0xe3}, {&(0x7f0000001b80)=""/160, 0xa9}, {&(0x7f0000000300)=""/181, 0xb5}, {&(0x7f0000000900)=""/12, 0xc}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/44, 0x2c}, {&(0x7f0000001e00)=""/142, 0x8e}], 0x7, &(0x7f0000001f80)=""/130, 0x82}, 0x7fffffff}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000020c0)=""/122, 0x7a}, {&(0x7f0000002140)=""/46, 0x2e}, {&(0x7f0000002180)=""/82, 0x52}, {0x0, 0xfffffffffffffe8b}, {&(0x7f00000022c0)=""/72, 0x48}, {&(0x7f0000002340)=""/45, 0x2d}, {&(0x7f0000002380)=""/199, 0x97}, {&(0x7f0000002480)=""/27, 0x1b}], 0x8, &(0x7f0000002500)=""/85, 0x55}}, {{&(0x7f0000002800)=@hci, 0x80, 0x0, 0x0, &(0x7f0000002c40)=""/26, 0x1a}}], 0x4, 0x2000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) gettid() 22:33:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000240)='/r#\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000740)="9b746e719e0083260483a83833a31c2f97abe201d503927c56e9ad3c77f3c0890782d41b1e4e870347cc945037cb8db5dca60f23da15c42871ee6425d8908ea2645c2300b6bab0b8221554e4a4cc457ab40bbb93d8775ed1f3d36e3665655ccd61d887722a001a62bf8a03c78b64a21ca7d72d78973954c2c7fa78e168aa2340b9af52b4d9c7799ffce49f3e32c5c4df78d65f043042af95641c75d733a3650f39ab1eaea1002173eaf788983b57ead080539e1dce59d4cc68ff9ff3025fe1ce3bbc261ab4f7ea57e6422842674ec905b15be0cd5fbd8ccc085a664c53983abfe2c7ef2ff59384dc2344208d23f31e81fbf06395d16b3044aba8fc0761dbab9a23350147d430e2d91ceb2691cc1398a13996e28644f1330c3c01b4a1ab9ecfd93533c0c6c3949f7ee1a9cb5471198d407f26cdf6351298281e0d4a528f93c3ea8aa5548b64c11918e55d2c542b24b8dba44fd2b8f55922615f658b234c83338655613fc05b26bbbb8befd04170dcf7da6e6e9913d73679f833d1e0799050b392b735aa463afd711b8a97f503a8d9b0a02767ae3a757293511dc0dca26d6275671eac3b8124259e82855bd62376a8028c01d0f4e1b7c34d60fcdb1d0c968816b34bf9496be7848254328ae0e1114bca6fce3d8a51cabfe224d2c1a814591a446bd14d0020444ff8321cadc6d400756121f6c0453792bf1721f4a11537df9cd80944aa5979f36bece828e4e97f0f0921a1e41a2a14258f72612d85a93856885624496797f191d33aee3b3555573517f4927ed8c69a46db01e964e14b6ff2723f13f93f8ba4ba656164b1bd96fe5b59a0b24e8f7169e2574d0b9b394f68a2e8a8545012c070b8798026e4089dbec669b2cb31386215c4eda212a5382b48353165ff5d428ab8625e39c1c5c82118451e059038c758845bfe26e209efbdce93377c14fd4a6765f5252bb66671a4816fb3dc2a72d94014f882f69256f4913c88d375646488421ee2d1250deaffa2a97039a5be8a7872e1a43b464a4fab6c498b358c841e20f26418445edf0972ffdbda1df9bd4231523062f3e55d4f9184f97866859bcd156ee637b43302187c3a518eca6d585ce3c727d2c83754e8c8d7ebdef1d85d5e0a35de0c0fe758a456c81086208e07802a34f6af1da04249a181a8f070d6d6596e08bb2ecbb7242d846f6e6210f43b035cd45d10eba90c0cadc4f8da06f4c4e850d64599c4316af6c2cb1c7b3b8ae2ea32980462eb85bd2798a9485c9642e8fef2fe26a9636c84bc718c9d62c371e5252a39c0cafb8658ce101bb1ab090990358d53bc4675170b403644e9f24c132063cf035dbe17878b1bf295f104a239318bb19a9b3ab43e81812736021880ade3d2fe9c1a545cc959decb7933f924cb5df334beacde1557d1e144ae15223cd5b3ebcd5b68d6ac967b9fe6156d3d508518697db2765601766ab826b4faa17bf2866bc1f625aa85142fdd3688d1daa47db851a64fafab541d6adfc9aae937a960a69be95bff9eee34b91a4c6a212acb8c5f55804a7946a750bcef0f76811e5292cd979ea59b7b45ecabc642bb4f0b3b1939e55cd6c8c8fcd3d2f1f62dd402fba8d8df1264fbd50c265eef9ffb22a5d260d44981232ad89cdac1f27df0df605028c1c1c58d4501aa4cd06507e17e10a1d76b24b1cff4252b5f3715640e760a4cbc581fa7f735149380b3458f9fe6d29ba163332440bbd73e3d6b93b8b05c5ab76e6b69edc75e89dcc7e3b9ac6f6b337e7f0a255db7fe788e1d8e2200e3be51ffb404244cb81aaa04f861c09f13424d9e51d3fe5332508d0262fced43678420197af7f2aa91abf94c94cc5e49623dcd16df570faedfd9f7d092ff2e80dff90a7f620731c387f3ebf29f6c154b12361ec32d7fc78d4d7443fdce3e2c1927443e2488ce90a8b1ad6d2b049f4e7309efe7a4ed5fe20685dd4fae47042800944a197894761cad84a8900051bb9ac9e10bc5da5907e314f1710bbc65cab4b7b0824233d9e0fe7e78d24779df23637325e14f36278230ca80bb10b8cf7954d475438e04dcdac7f80ee0dfcf386be5da5de97dfe10a4a8f5ec91fa45fd767610ac1b225c7d8b96cc29a3a75cfb65043c010df39d9f6c5d681470c1f56083554549d12fa563a5355f1d81faffe6eb9e3eb18ec75b8fea917709fe90c21039980488058f60bfb5a301b0f167148d7def83356c275a4b05a98c45cb5f37ce15f4944c7bbe7bf9b255acc83435c02a70caa7b3d81dd5dc563bf06f660942c380b1c4613472f476194d22f52420d9786d2541866595c33df24b431e08afe395bdc5036eaa6ada2b5920d92c306264de253ab1d16eee9631e51d6c5d2ffdae6a318444b219b42680f4f13f148f6040767f161fd9da4dce932f6148f7bf7a9736ce33d9f54433e103bf21d565fc00fc6495bc1023807fa83dc2379ec1d6ddb2a22a6112af5fe426d7efb60df0c29d20a4ed15713251ed8230c60db9f6", 0x6e3, r1) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f00000002c0)="280498f42c186151ba17e433fb9cb126058122915a2a399a3ee0490178dbfb61756500952a249050588d88d4d3f73c6caa7d56d887fff422792b25db4cca58eac5b156ee047944e286e5602ce9c5c87a45aa667fe82f502a1b090e20f7c1d253495671435930589f4cd39a31b6d6ccea3fabf1b6cbfe8780d8755d690d1987062bcd8ce4d74efd3153e2a44c604cf8a9837013ef", 0x94, r1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syzkalrer1\x00\x00\x03\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000002000000c4000000ec44d8f7a2b083c02f93c0908fe7d0e153617be35bdcaba89eb70f7d81a42d335a0c1ce3abc7306099b892cee3d0188457d7f1b8f760303660eadee8bad5727baac35a7377b5c3f43d98f0e4a8db4d1218a777490701c6719cb8b783c13a4c7e6bde37db9291666a55baed9248983f398fb0e973815287231b24c7f23edbc4b301e77b074b0341a180b01ddcf38b98576bffccd637ef092f8a5330aeec13ce92e6e049a1b12b0ee6b4d2d68509b8cc3eef956a85"]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000700)=0x0) syz_open_procfs(r6, &(0x7f0000002040)='net/ip_tables_names\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) tee(r3, r7, 0x80000001, 0xa) write$FUSE_DIRENT(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400204) vmsplice(r9, &(0x7f0000000680)=[{&(0x7f0000000400)="4b5f9d5f4f4e4e42f6df81043b1cf99350d8636f81a771a66b6b2e515461ae12b456bdc3d5472c0fd22c279ad6fb074d7bad2270fe1495628aaedd117f4fcaab1bd8d99d27e4", 0x46}, {&(0x7f00000004c0)="f9a18467261a776d4be6540505cbfb90c47413fa3a1c7f16dca174b8612cca5bf66ff19ce042b3df6ca939e1b0488b2d6ed081f052a7c6eda1291616ccf4a143f3a9274f4387d60c020d15ad87836d29fd88145f7ca344c1cfa6865e2757fa45e4dd", 0x62}, {&(0x7f0000000380)="59bb5a4bf56e5b1792", 0x9}, {&(0x7f0000000540)="f736b7db99a35905e6bd254bc3d10bd5b57f308b2c62ee7267ff30bb4a7e90f3896ae67a1f3283eab909fc300d", 0x2d}, {&(0x7f0000000e40)="ea8c9c2abe16ef90d4e7ddefba58ebee2c62848eb67c4bf61cda9117adf0d63a0ff3a1a4d7d5c1c65c2c47d8a16b9013ea3d8c2f48030004c66b9ff7d5af5e1587521eff90611ba194faae8c9914b10c370798f0fce3f83e5b75b8be78cad9d752f94b86fc46348afbd6b99588dd20cf472b99909ef173b7347862ce3f7a05e00921cefe58b9aaa83a9ba5e74e1a99977047519e0fd1989122b931fcc4eb072bbc0134f1821be286a5fd0b3697d0e0ff9e60e58dfb4bea16d5fa42eb3adc8372428bdc9993a61aaa8f4bb2b54041f824c768b3a25026c5e8c696c9cf3d529ab1403470441955aa6cf7e45f2ed179f3bc037c5222de02a29a13054f40b9ba992b7a1ca1f04c49646339a6419a63d6e2901678a0fca839966bd499a82e3e0820de6e27e034fcb5669bad4bf93855f42e4b3bc2546e6e91b2cab3be4cb5ab5f1ebb834dad35e1cad8dd46b12f6e032a8fd82857dae87f675cf2a28b3074b2bc14e0c707b42575e54bcae93da14e16886dd57965811ecc47a6d2ea4b2507d77ebca1d383479323eec9d626b51fd475aae634315e827c100d0f676b10e2d1f72046c031464258eb8b7fbb0121cec75e4f9ae43c3c50ff9c9df4bb24cce1503cf9c981840587ff056897d16bdb000ee6caa0f8863cc6f918a982bb1e47acdf809b3867166449f6552f936f21a847115a6ac16a333086180b07f6d4820db053cf146d9de353c0d9f9eb05afb0c18dd2ade2b72240d99844340e190ae997cd9895a8bac0f75681f9b703858bd930b03b472436181526037ad855bb4c59d297bc0a61c9e3ca6b4e81d15c0419c9e37a96343b52a8256ac7cc6864b492e642e13d65a0267a65c58298ff6ef830d97f7aeacd9eaa40424c956aa1c0dc68a57b544e3fecc27dc91b0a59f48d0e02ff3123c7726791a7df5fb28f9624f39042c6adf583d3c06d87505d12dd2caea3611a9d7be6a82d7dc8c9373e3be4c9da30badf47923826ecde88c24d45d128ef92dd62692e5dc911ac1e9625f0781fcb49ceaa4088ecaaa919543b1eb2c251bd56c42ffafa1a32a8ae670359c8edc1b62953a50cfd61957d6b68210933ed8e9bd28e444824b0140bfdc9e0bb25e402dbaaf2acc7af3055faad1d722beb4fb8a8569c4d0dda8ecd8228aaf8d2207deb4b22a200ee8ee1d5764c866b1dcf82c2b331b9016835fd1dcc601d8e2c8473f6171f18233351ce67cdc4c75a1316ccc7ed3828dd451347313cf205c12ad295daccc982aeb9f2ed7d186723809220075c89b39eb3aa436d38fd401e8a78eba758c1c14be7ce26912315f48d9593596f0139417135b11f13ace8c56138dd7a391e502e928f5038fa89f4857cefac2487afb318d208f6cfff0ea0525fa68f94eba3123ab7e539e8eaff9c94f3b2ba14ba4e468169a21fea6e21dc089bd14c2bc229bdcd3996261b40db64eff1c0efe447a9c2d7f71a035b9746d2babc67bea727a8b268b3df8041ed31991084c8e623bcb56eb7ab0193914f28dc3674178bd46d0bd7f0037bcea812f5e3e671a14d02b4ec0df46ab45a594f4c08a6d29e7624c65744c1e20cd17da29a011f20f788188a23a6d9adebd11609f1a8a65d0b8e222fd7b08505c072eece07289274ff792d5820b3fd7abef5dd2805933f6b9d58e7dc54b55c4a5abd0b0c5103698e9f5bd5efc121a53be21c097939497fbb59fef80d01e87c23ae9a51458d12ae47fa374c726af8d0a97c5ceee23acb411be7916d00ef542e6c2147e3917cd7bb5db89b1ca3eea2445e7f57a17a92dffc478248de074a900d2e5e26f2abdca82c66adaf78da658bd86bb57cce48bea32e2630fcd3ae22da7cb73eac3c8184245a7c09ad90cf173a90ca1d0dde0bffddb8a6a9b95e4388fe3d61eb89803cf941317293c94d262a629b1ffe75e8dbbba44beaca693bc36b15609976b1bcefccb770c8dcd163b26229d3052a318192ae98ca00db1c6c1b66cd9985749a026c039fc51988f6dedbd82e4dd2129a00bb5030d28a4720f619a34256fd684cd6b39f5119aa886ddba98f856e5db290bb29d9b120f8bb24cfcb07e03ac86f34ea7146fd10d9cf70cbbffb39105968c2e1838280176f71cccc263f337a7e626f4a6cfba2efc1ad0899ca8aa2f2e21664b51b8fbcf545d6a3437564afee2b2ca6e8c48f866c92dadcb8e0418c0242df7e3a9f94a109654328e9962b941d67bbed77583d43201dd2548382613aac85ad0dac4a21d783010b9e9934e252f2750306f8dea794d06a60be74ad890a67df80d6f8a11801dc02bebe8b77e4f89c31451ab6c340aa960bd9afb0e586430d7b9dd14902c18774d88783f90c65caddb2866c1eb22cbf1c93e6fed921891d799a1906ea2b483a13dca45d64e9b2c832c8a0bbadf69f37a274d84ad5e32698ac0a57c29b22bc4524b720ad3432ee51687b2e3032562af8d11780d3aff272e08e259a853ddb19ed5b1c68f1a0a370803ed1cc5690e9ab14f517e89f25edd93cae397340984fff3a0e8d1994e5ed7fe6ed4d9f2270061ff94b95a1ab92049609ead147361f220d0f41c590d2e9b9c8bdb0b1dc31c3c8b142e8039c8f9a538efb3d9ac3aad0b2237e5e07af405473d790a6cecd919f2822dd343c9d284287d726b071cda5808abda4db53b33fc5be3e9638c5067381d54944678ab13699f103bc6351ae146374666ed0c608ad5dd2bf03fa4c27d953cd271b037e8517521147f695fbbf64771e90e466c64d45426220c77e64249942e36d79aca6a6f2848f4c4ee7313e8997689bea216cdd140d40f9873123bc14b168da2c0e00898460965bc15692acb0c2e0eef5f9ad34ecef15c00c6602bf9cf2417adf07e41346cc78d1bd53516bcd12e1197e9f3c38dfb8c8302f3916854af337a119e596fbf43e7573ee44a0dd5b4b49b73ff106b970779ae5d0d25a0532a766201ee810365b92e5f3d9171874beb44649c9b15ad069b5d987097aa0090d16cb5413400b10480ade15c972bd3282ac2fe517230bdfe09da636c551dd17b66910102937b62f6c1f064b40d818444112157653aaaab29bcdc48520231f3f256ca0b7868ca31a8c30bf0d6c88a85ad42475a5aa1d0f1d1e4c3563396b9901b8421fb2604fc684c1f2cb6c88a7ff3b1d3a5be54a7c6a6532696887e8802d4bf44cd81331f6fa1c8ef994830603cff4051772ef4f0595848290c5613874dcffcb62eea00b88e0ac0e0e783239a77f09a9c73b7b8ebcac4277307f400486f40d19c4b118bbf278860dc2df61dc3a91d8206daf7dc6d006432f272dc6db6a73d00fb17642895771d96963ea7b73f56de0420dc1547b3a5002d6fe036532abe36f04a8605a3ee09af9f5578f153542eee0a25d160662a05aa0f5368ac5031612e0a388cb2830adc4b772e533b02197981337d8771f52efc7891925e8c4fbf2b54a0809c3575f57473a4dee5bbfc3bbe7c90fd7901f168e3ce46fff074fb33a5539f9fc4653dae6ba375fa6235b14ab393e8242ffc48db403064a803062a54dad72bcf283a04dd42ea1fe236d25eb3a2e41ae69b347e4f8fea87a60b9977e532ba848d33e8ef3cd8aacd793d7bbf733344177e9f2d306d1d525ee712f40b19ecb194c8d34b42834629ec6067cce2835c47da5825f9c3928cf8c944ebc6793fff6a5898948dc8bc75a8aa3c682ef1c6e172393f09f6b3c378c5ec87e23f6e176b509d28388a05b5f4d97cf4ed0c0b98316b182e5c2defa7b1979b2be87be4f4cc738d4d9ff2fecf99c4edf6aa97909a3f36d2bed400b193667352e0cca04837b9ccabb9ef895086325231bfe18c2db146674ff4e538c09ba28b0ef2676643964c5f5e0db2ca360219e84ee4d15d0c1716cd7e628e25e76e5c69ad506dce9acf1c3f0a7935329fb44e46f2651cb713bbd92ef84d269d74af887c96ec2a98e490a7953ad4f213ad388128ad8396d252027adffcdbe78e9ab02eba9f80cf711279035ec84969c5323cd569618baddb7e7b0d9e953a7737e31939995082f8e654e5580b9ca7d95919234445d8528d2c36a62f4fbbcfc7897e1204bdd1b6928bb63f96de3858190abf31ce39b6d41b05c9d61805fd10dff165d07a1c4c84f8fd447ad91307533fd7ed07202273c912064f8e025e8a68357c500f23dcc750c3084e47c74031ea130c9638b10d09919873efaf15cded87cf274cf5965fc221e644a6dbf846b1d5fa8916da3b31e087e3caca728456753f7e28f44bac293ba791218e7d3511060b251130b3a9c387f08b7fe804504fbc81fb3a518c3cdfd950f15c764f0079af9482ac92e9132d4b8ca826d4930d4892b3e6f37c80f6c828adf8921607660a6fc141152d065394a501c670bbd61ceb72f835b290826d3a117481c8205942296dcd747c0535f3498b97555799f7c962f237dc47a8991dcbfbe3fc05116950a3dcefb8b6b646ccd2270f3251fef973ae4cc7855977dc941d10c9c8161fa697acced06c2274bc0a668cb451db80a0c2b37b2d4cf37a6a0fe9775f8f8b363ee85af71ee60e28c5a7ce192f8fb4df2fb9f07f4be0d6c00f0e9d94ebc0f69b5b0fb2e62601d4ed31cf0354bf3df1dce84700650df3da30c861c66dd8f3d8bf86e6019415227ce88e009a1fe63f21cbcdb417dfda0be6a4a7270cb454a0d3a7a1c10bf99c1b4bb093de7e8fcadd2f1dbca6507e84cd43384564221fb2e2ebcd20e25b56557e2cf5967945ad09fb04a93cc4e46cfdf72873896000e502d0513fc8151764b83ad566dec96faf2e2ba57409784a76846ae91b8db28a35b63039e8418cf447e44b898029c1cb4f82c64e078c394d8fb47e4366e5016c62e68054daf2584be7b68cb7864d360598bea536812d452ce746085f3bae455ae9859aa6b0d8bc5f6b54866626bebfe84c048bb631558ea42abea854202d737974abbb45e4760df258985690188e48c571bfe19adcb3510cc3c61777a5675e1b984dac827cb60b4e53a4e5e0e150fae58f7fdf3366b1d57079d981827c0c6ad7fad2fe8d69830df5f1f2d6a21f55b4209e5cc89072bd6fbe83c8c3583146e3a090760f83fb05f35836691dd42d637744aa037dbd6e4177578ac47e6268a1cfa4fd3e3b7971ee4ddaef920f27ec2d5cf7f17072b8559017c1a95fe28c51a3aea2b0908aa1e4848317def930fdc23eaafe16dded04cce59a2fb83ee7c80a86e1ea693814ec457d86a91ec0c99b59ca79a66e29574c2af7edcb342d792d39f377577a2a86d59fd346a2fa5bc20d952ef7d0e23edd349e7a4bae8747ac2eff447aabdc38099d1f82096b83e3756eaaecffaa88a70daa3f68245ab9dde1ce6cac9b698f39d6014174602fdd3ff89c23afcddadfea192d233f79767ba0a8505af14a62350f0b05724f1cdc8f5fd7aa4823da73f78a97cdbd23838d41e2c996b12df3491c6f5363eb726055d495adb09a005a485fce77ec7c420668662a434eac9f29d51dadec3d3454530b7cbd3166f0793bdf9b3c6ff74735f61da4eb78b3df133a014ca2442a6a269c116dc49b931030123e6d9dbfa85e9ad4f19c9c4c69333650cab109c9aa25bf40e075265bdd5e73dc9ee4643cce191a51f3a705e94d14c9cb6eb93e7a9714300f52736ef2d00c03631685a5dffaef082dbd375544ed8b47b92d871278b5862b7e9392d2c12c48c10fba3e9286112958df891ff236dc43ac59528118fbd8ac97a40c014695780ba2a234183470673e86a14775d58f243a790aa7507a90ca05ef9ed4daf206cf0f0ad98666c0b53c6b00f3479b37a3f7c7cbad4f1fb2c07c43bb15dc15a882d214f", 0x1000}, {&(0x7f0000000580)="90e0a20274c7f342bfc1d5317e82bf285fc40e49287905a0d5c1b24afa774b954fcd142ff19c4cce4fe3fbd636b4136b289b9c98a452bf8008b9d98198343c86e1532c6e7d9d52fea312cdcea03d0a2b", 0x50}, {&(0x7f0000000640)="aae51f31b6aba7069dcba7afade2eb727fbad06dba4e398c47f1e2", 0x1b}, {&(0x7f0000001e40)="fddbebc66e53195a63dd57a71b1ccef2bf6d0272bf1b8a265fb5483bab623b71047c47f622ffca66853071c3635cffb6427359b104b26c27a9adbb33aab78f2438edb8eaff1ee49e99d80a6cd42b78bd85526c09a52d8397a73cf6b82fa2c6e9f0a104a75399ba337e314532249fce62dbf3f44419e261c7710f61379b6a5ce706dd4ce646c873b00965ee4c76625f61d6d0fe46805dfaa0766ff7eb05372aedf1f4ba4876c5c64149830f2d5c30bec9f2974240bfe0c0aa5bc6615ea09b9c85ff253921bf6542ccc9887d13ddf48b14a576", 0xd2}, {&(0x7f0000001f40)="26deada124eb60cdc5037b1891e49583fb9c587e1b6ed444c20712c59adfcb4ca6945adf92d09069f98a8ba6bfb7c5ea87388e64a994dbafdc3f63d1724f4a2749a2d0e6a0ce8a4730e6f33565106c34d6f8d4df91b8495f923b166b8a65f5463bc98e2d1964d7d00f6c9b51e5ce4ebf0b05d2e57f95f8fc99fdd3f1197f5d0a398f43336b24a722c0bf6067f6956dfecd6473c5a8fd2cea98fc23e99f918683260f0e8157e6c1c5fd11f5ed3356ab2e520f8ed9369b72333f5485481872dadfd8c8961ece9fb3e29f73ef1f61997887417263f7f72a220f47ba72f364", 0xdd}], 0x9, 0x1d) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000080)={0x10001, 0x8, 0x9, 0x1}, 0x10) fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f00000001c0)=0x1) 22:33:56 executing program 5: bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0xfdf4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x12f85e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9dba}, 0x20) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000600)=ANY=[@ANYBLOB="5c02040180200800fe80000000000000000000000010001e83ebf161352507253b95ecba0b66adc9992274b320732432e6942c7c82f4bfff0daa1832d6f1b792e0115179252c96523e56925d909f9a114c08e03316fa9d9e2829c84b79d922728b97d9ca50d1996aa19b22a1e6b336f66f47cf9c524c29b86f1cc9238f47f52684113bd97db9ca4f8c46bab44c5fa2e89ef54ef24ab7b37944e7d87475461fa55d22f46ebb2b9cd1e704ec64578e0a24559c1f72"], 0x18) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) getsockopt$IP6T_SO_GET_ENTRIES(r7, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0x1) ioctl$TIOCLINUX5(r7, 0x541c, &(0x7f0000000140)={0x5, 0x4, 0x2, 0x2, 0x280000000}) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000a61ca133000005000000aa85000000000006000000000000000000000000000000000000000000000000f992d71c23005a4900"/125], 0x1) r8 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082) fcntl$setstatus(r8, 0x4, 0x0) sendfile(r8, r8, 0x0, 0x80003) pwrite64(r8, &(0x7f0000000300)="e54e77d103565b113288c65f38a22a25b637db56783e677cb932bbfc301d860ae5c69cb5c454ea010bc2fec87e7b768cde79d897b1ee9c85e76c4940107fe0fb82a2d93874732c08198baecbb06f6b920001d462f75bbca6dc40e794afe797eba6b0b8b36f91bab095160e12eb8a3e61fad4d0cebe56b210cb258618b0e488b00e2933feb30487da77303bcc2cf7a122ef9937032dea5f98d057f8e411fddbcafe2605fc7895a8e4d44fea8a80f0d9cc83ebca0d86388bd9", 0xb8, 0x0) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) 22:33:56 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) creat(&(0x7f0000000140)='./file0\x00', 0x194) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:56 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x20, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r2, &(0x7f0000000440), 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSABS2F(r3, 0x401845ef, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0xffffffffb0effc5f) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r6 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x1, 0x7f, 0x7, 0x0, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r6, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r6, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r7 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r6) write$P9_RSTATu(r6, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x0, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x0, 0x0}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) setsockopt$inet_int(r9, 0x0, 0x32, &(0x7f0000000200)=0x1000000, 0x4) 22:33:59 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @loopback}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)) io_submit(0x0, 0x1, &(0x7f00000005c0)=[0x0]) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) socket$packet(0x11, 0x0, 0x300) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) rt_sigpending(&(0x7f0000000440), 0xfd0b) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4008000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) io_setup(0x80000000, &(0x7f0000000080)) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x7) 22:33:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1802) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r3, 0x0, 0x20020102000007) pread64(r3, &(0x7f0000000100)=""/19, 0x13, 0x20) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x3) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:33:59 executing program 3: ustat(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, &(0x7f0000000140)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r3 = getgid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000001c0)={0xa0, 0x0, 0x6, {{0x6, 0x1, 0x46ff, 0x1f4, 0xff, 0x6, {0x0, 0x6, 0x2, 0x4, 0x7fff, 0x800, 0x6, 0x6610, 0x0, 0x1, 0x7fff, 0xffffffffffffffff, r3, 0x3ff, 0x642}}}}, 0xa0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) dup2(r4, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xfbc0}], 0x1, 0x0, 0xfffffffffffffe2f}, 0x100) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000001600)={0x7fffffff, 0x8, 0x0, [{0xe18, 0x8df2, 0x10000, 0xe5, 0x0, 0x1, 0x4}, {0x42e8, 0xffff, 0x6, 0x9, 0x4, 0xfc, 0x3}, {0x3ff, 0x4, 0x4, 0x81, 0x3, 0x1, 0x1f}, {0x6, 0x5, 0x0, 0x4, 0x1e, 0x9, 0x9}, {0x3, 0x4496, 0x0, 0x0, 0x7c, 0x6, 0xaa}, {0x5, 0x3, 0x0, 0x81, 0x20, 0x6, 0x9}, {0x1000, 0x2, 0x3f, 0x4, 0x0, 0x2, 0x9c}, {0x1, 0xe33, 0x2, 0x81, 0xc0, 0x7, 0x2}]}) write$eventfd(0xffffffffffffffff, &(0x7f0000000340)=0x2, 0x8) 22:33:59 executing program 5: prctl$PR_GET_SECCOMP(0x15) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x208200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141442, 0x0) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x11, &(0x7f0000000040)=0x10000, 0x4) syncfs(r1) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r7, 0x280080) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) 22:33:59 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140)=""/137, &(0x7f0000000200)=0x89) r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x480800, 0x1) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000280)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f00000002c0)={0x52, 0x3d8, 0x1, {0x7fff, 0x1}, {0x4, 0x4}, @rumble={0x6, 0x9}}) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000300)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000380)=[@acquire={0x40046305, 0x3}], 0xa5, 0x0, &(0x7f00000003c0)="2b33289b963bb14114e8f50872c8070e64bc136e86cf35480e1ebea72cec7a376d965e3571bbf03fd61734dfe690f19c3d16badfbed3d93d807142d432223a32b57ee2938c6e836b56fa65b6b03c3a28704c4d84dba9eaed2200a6d4d8baedebff242e50d65a243708fa6a22dcf0c8ddb1797ccdd487396843f5ad55c5d0c3db4a10a05bf3fff3fe73bdb2a6878fe939533515ad5e195492da6350d0ee442308bf42be36fb"}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x150, r5, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x36}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd9}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb944}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4462}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x25a6}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xbb54}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @empty, 0x5}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x44e}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff801}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4840}, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740), 0xd, 0x0, &(0x7f0000000780)="2323c707fb2a2badc4234cec27"}) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x80000, 0x0) ioctl$TCGETX(r6, 0x5432, &(0x7f0000000840)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x11470145cf069abe, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0xc) r8 = syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x153c01) fcntl$setownex(r8, 0xf, &(0x7f0000000900)) r9 = creat(&(0x7f0000000940)='./file0\x00', 0x2) dup(r9) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/mls\x00', 0x0, 0x0) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/urandom\x00', 0x185000, 0x0) ftruncate(r10, 0x3) ioctl$UI_SET_PHYS(r6, 0x4004556c, &(0x7f0000000a00)='syz0\x00') r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/full\x00', 0x40, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40046602, &(0x7f0000000a80)=0x10001) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) 22:33:59 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:33:59 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000140)=""/137, &(0x7f0000000200)=0x89) r3 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x480800, 0x1) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000280)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, &(0x7f00000002c0)={0x52, 0x3d8, 0x1, {0x7fff, 0x1}, {0x4, 0x4}, @rumble={0x6, 0x9}}) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000300)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000380)=[@acquire={0x40046305, 0x3}], 0xa5, 0x0, &(0x7f00000003c0)="2b33289b963bb14114e8f50872c8070e64bc136e86cf35480e1ebea72cec7a376d965e3571bbf03fd61734dfe690f19c3d16badfbed3d93d807142d432223a32b57ee2938c6e836b56fa65b6b03c3a28704c4d84dba9eaed2200a6d4d8baedebff242e50d65a243708fa6a22dcf0c8ddb1797ccdd487396843f5ad55c5d0c3db4a10a05bf3fff3fe73bdb2a6878fe939533515ad5e195492da6350d0ee442308bf42be36fb"}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x150, r5, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x36}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd9}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb944}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4462}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x25a6}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xbb54}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @empty, 0x5}}}}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x44e}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff801}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4840}, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740), 0xd, 0x0, &(0x7f0000000780)="2323c707fb2a2badc4234cec27"}) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000800)='/dev/keychord\x00', 0x80000, 0x0) ioctl$TCGETX(r6, 0x5432, &(0x7f0000000840)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000880)='/dev/full\x00', 0x11470145cf069abe, 0x0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0xc) r8 = syz_open_dev$mice(&(0x7f00000008c0)='/dev/input/mice\x00', 0x0, 0x153c01) fcntl$setownex(r8, 0xf, &(0x7f0000000900)) r9 = creat(&(0x7f0000000940)='./file0\x00', 0x2) dup(r9) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/mls\x00', 0x0, 0x0) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/urandom\x00', 0x185000, 0x0) ftruncate(r10, 0x3) ioctl$UI_SET_PHYS(r6, 0x4004556c, &(0x7f0000000a00)='syz0\x00') r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/full\x00', 0x40, 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40046602, &(0x7f0000000a80)=0x10001) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) [ 528.240691] binder: BINDER_SET_CONTEXT_MGR already set [ 528.262385] binder: 23564:23589 ioctl 40046207 0 returned -16 22:33:59 executing program 2: socket$inet(0x10, 0x3, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0x7d5e0000, 0x0, 0x0, 0x20000005}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) bind$netlink(r1, 0x0, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = creat(&(0x7f0000000300)='./bus\x00', 0x1c4) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r3, &(0x7f0000000080)=0x80, 0xffffffffffffff44) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r5 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r5, r4, 0x0, 0x2000005) read(r5, &(0x7f00000005c0)=""/193, 0xc1) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r6) r7 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r7, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) lseek(r7, 0x100000000000000, 0x2) sendfile(r7, r8, 0x0, 0xfffffffffffffffc) sendfile(r7, r8, &(0x7f00000001c0), 0x8000fffffffe) getsockopt$sock_buf(r9, 0x1, 0x10000000000001e, &(0x7f0000000380)=""/87, &(0x7f00000006c0)=0x9) mkdirat(0xffffffffffffffff, 0x0, 0x180) syz_open_procfs(0x0, 0x0) 22:33:59 executing program 5: socket$inet6(0xa, 0x0, 0x0) memfd_create(&(0x7f0000000340)='\x00', 0x1) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000002c0)={0x0, @multicast2, 0x4e24, 0x0, 'rr\x00'}, 0x2c) r0 = epoll_create1(0xfffffffffffffffc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000004c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000680)) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000006c0)='net/ip6_tables_targets\x00') pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0x10, 0x480000000801, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d400"/85, 0x55}], 0x1}, 0x0) r5 = socket$inet6(0x10, 0x480000000803, 0x0) sendmsg(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab8221000060cec4fab91d400"/85, 0x55}], 0x1}, 0x0) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x8) write$FUSE_LSEEK(r6, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x1}}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x3, @ipv4={[], [], @multicast1}, 0x2}, 0x1c) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) write(r4, &(0x7f00000001c0), 0xffffffe0) read(r3, &(0x7f0000000200)=""/250, 0xfffffffffffffef6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000140), 0x4) r7 = socket$inet6(0xa, 0x400000000001, 0x0) close(r7) socket$netlink(0x10, 0x3, 0xa) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r8, 0x200005) sendfile(r7, r8, 0x0, 0x8000ffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0xec38ed91f9c7494a}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) [ 528.780129] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.5'. [ 528.804894] netlink: 49 bytes leftover after parsing attributes in process `syz-executor.5'. 22:34:00 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x2, 0x0) recvfrom$inet6(r0, &(0x7f0000000240)=""/175, 0xaf, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @mcast1, 0x7}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x8d264d94b88cc547) ftruncate(0xffffffffffffffff, 0x8008200) gettid() r3 = socket$inet6(0xa, 0x2, 0x100000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r4) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mknod$loop(&(0x7f0000000040)='./control/file0\x00', 0x0, 0xffffffffffffffff) rmdir(&(0x7f0000000000)='./control\x00') unlinkat(r4, &(0x7f00000004c0)='./file0/bus/../file0\x00', 0x0) close(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1d}, 0x4}, 0x1c) set_robust_list(&(0x7f0000000200)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0xc) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) lseek(r6, 0x0, 0x0) r7 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x9, 0x11, r7, 0x0) ppoll(&(0x7f0000000340)=[{r4, 0x544}, {r7, 0x4120}], 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f0000000400), 0x8) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x02\xdf\x01\x00', 0x40f}) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) sendfile(r3, r8, &(0x7f0000d83ff8), 0x8000fffffffe) sendfile64(0xffffffffffffffff, r2, 0x0, 0x1) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000300)=@fragment={0x87, 0x0, 0x6, 0x9, 0x0, 0x8, 0x65}, 0x279) 22:34:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000006daa0000026903530e0464a0d5450000000000000000000050bb673f0a034256ce9b85cebee05e4bcdb29088efe6ae409ccb2fbc5770596cf56087de5eeaca4f41a6f8d10e355af0de214906a596028047c7ffeceb5855ff141fe9aa10"], 0x0, 0x0, 0x0}) [ 529.038065] binder: BINDER_SET_CONTEXT_MGR already set [ 529.078641] binder: 23613:23617 ioctl 40046207 0 returned -16 [ 529.126995] binder: BINDER_SET_CONTEXT_MGR already set [ 529.169727] binder: 23613:23621 ioctl 40046207 0 returned -16 22:34:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4002000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x40c1) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/253, 0xfd) [ 529.354539] binder: BINDER_SET_CONTEXT_MGR already set [ 529.392557] binder: 23627:23628 ioctl 40046207 0 returned -16 [ 530.133819] binder: BINDER_SET_CONTEXT_MGR already set [ 530.139682] binder: 23627:23629 ioctl 40046207 0 returned -16 22:34:01 executing program 4: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"]) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.events\x00', 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) write(r1, &(0x7f00000001c0), 0xbab230cf) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x2, 0x0) gettid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x3}, 0x4}, 0x1c) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$selinux_load(r4, 0x0, 0x0) getegid() lstat(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r5) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/keychord\x00', 0x0, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x1f, &(0x7f0000001ec0)={@initdev}, &(0x7f0000001f00)=0x14) write$P9_RVERSION(r6, 0x0, 0xfffffffffffffe76) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) sendto$unix(r6, &(0x7f00000006c0)="e4be6e36c9240fd5d17aa006fcaca71353d6e87ee862cde2b2d3dc7a80e59c668f3cbc0a0791e48ea98025599c3ffed9f659486c5332e8e70e0e17476ede54956aa70cc9bfd65c51402639b1b297bf058b79cea6def6373622b5adfc3af2c793c340bab25a18ad6a61def257f551c0279d3f4d6884ebb105b9efda7a02bc20d6577401d6a9ccc6e0276e64403792cbda04a25f662d557716a28b99117f517a2a6d44e10204776c8aae6afb02a6ec4b9c49922482edf5d8c038e3a51581a62f4212e7", 0xc2, 0x7d1998d670bfaf0d, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@loopback, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000000440)=0xfffffffffffffebf) setreuid(r8, 0x0) mount$fuseblk(&(0x7f00000002c0)='/dev/loop0\x00', &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='fuseblk\x00', 0x2010, &(0x7f0000000900)=ANY=[@ANYBLOB="666404", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',default_permissions,blksize=0x0000000000000400,blksize=0x0000000000000200,max_read=0x0000000000000000,allow_other,max_read=0x0000000000000005,max_read=0x0000000000000008,allow_other,fowner>', @ANYRESDEC=r8, @ANYBLOB=',appraise_type=imasig,dont_appraise,obj_type=./cgroup.cpu\x00,dont_measure,\x00']) r9 = getgid() lchown(&(0x7f0000000040)='./file0\x00', r8, r9) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f00000004c0)="90c38a20d66d02b572fadbea61581770", 0x10) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) keyctl$join(0x1, &(0x7f0000000180)={'syz'}) syncfs(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0xfffffd4b) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) 22:34:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x208200) geteuid() write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write(r4, &(0x7f00000002c0)="a3f8de282444ba746004cb5d1aa973125de76b6156bcde198c29faba0ac6cf98d2fc0abd04455291b9610866ccdb8e9ea8cf57a9369291c008aad406ec243b6c47a35743ba2a6f2a9e4c03f116d5ebc5229b70214a068fe08908bf771a04e60da23edb32cd0324f0624b65b17258b760096a8980168fb924", 0x78) ftruncate(r2, 0x3bb7) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r5, &(0x7f0000000280)={0x7, 0x7b, 0x1}, 0xfffffffffffffe93) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './bus', [{0x20, './cgroup.cpu\x00'}], 0xa, "9c9db40b88b5e65658b8020d"}, 0x23) syncfs(r1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x0, r5}) r6 = getpid() getpriority(0x2, r6) 22:34:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0xb4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup(r0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}]}, 0x10c) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r3, r4, 0x0, 0x20020102000007) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6c) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000300)={{0x0, 0x0, @reserved="847e1c37f5b976db0e93a86b96e24d2e2a427d36210fdb336b62f7e83c23470e"}, 0x9f, [], "ac67e7cf041e784e34a5e63ac0f9d0aa91eb33194afc76abde79b32bb5a181758808b6578b73469c90e1f0f8c87c4109d1ea589f5ebda1a208a38ca7e58154e34a4185e2907bfc2d0004d737d0a9599648845da8337b0418f0b498b4c512715b78207b85249a562b2a3ab16dff39750cbddef99c23f4c436d9aaadce2256b8d3991437069ed9917c1322cecb0d00dbad095bd5b7b77d0acdaf5c21d4924cd5"}) tkill(r1, 0x10010000000035) fcntl$setstatus(r0, 0x4, 0x80000000002c00) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000000)) 22:34:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000000)={0x60000, 0x6f, "306a829e1f2546657b249945e40b7d44dd112a04a87836c913fdae49fcef52d80909793ef8a66273e668dded0adde19eb4127e565b13bfa3431601893ec88e6401100187f67fddec1cd4eeb3d3001542a8054bbc5aa7541d1c7a404d8ecea9ea31c393870dccc3600c4172697cf996"}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:34:01 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r1, 0x1, 0x5}, 0x14) write$binfmt_elf64(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x5eb) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r4, 0x6, 0x3, &(0x7f0000325f23)=""/221, &(0x7f0000000080)=0x1d55af2792096ba4) r5 = dup3(0xffffffffffffffff, r4, 0x80000) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080), 0x4) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) getsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000300)=""/143, &(0x7f0000000040)=0x8f) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x1) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000001580)={@mcast2, 0x33, r8}) bind$packet(r3, &(0x7f0000000000)={0x11, 0xd, r8, 0x1, 0x5, 0x6, @dev={[], 0x27}}, 0x14) 22:34:02 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast1, 0x8}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x10) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=0xf5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @empty}, 0x10) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x600020, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x14}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendto$inet(r0, 0x0, 0x2f5, 0x200007fc, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) sendto(r0, &(0x7f00000000c0)='H', 0x1, 0x5, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, 0x0, 0x0) 22:34:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@remote, @in6=@loopback}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) pipe(&(0x7f0000000480)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fstat(r3, &(0x7f0000000000)) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 531.502593] binder: BINDER_SET_CONTEXT_MGR already set [ 531.537448] binder: 23681:23684 ioctl 40046207 0 returned -16 22:34:02 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffeff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000040)={0x9, 0x4, 0x0, 0x93, 0x544}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r2, 0x0) r3 = getpid() wait4(r3, 0x0, 0x0, 0x0) sched_getattr(r3, &(0x7f0000000080)={0x30}, 0x30, 0x0) 22:34:03 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7) 22:34:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r0, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400), r1, &(0x7f0000000440), 0xfffffffd, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r1) r4 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000004c0)={@ipv4={[], [], @loopback}, 0x71}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0xf736, 0x7f, 0x7, 0x7, 0x11, 0x3, 0xc0000000000000, 0x7fff00000000, 0x3}) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) r5 = getegid() fcntl$getflags(0xffffffffffffffff, 0x401) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r5) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') fsync(r4) write$P9_RSTATu(r4, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406055c9, &(0x7f0000000500)={0x3, 0x80000001, {0x56, 0x0, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x3f, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x2, &(0x7f0000000480)=[0x0, 0x0]}}, {0x53, 0x100000001, 0x6, {0xa22}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x0, 0x0, 0x8}}}}) r6 = socket$key(0xf, 0x3, 0x2) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000680)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_getres(0x6, &(0x7f0000000100)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r8 = dup2(r7, r7) setsockopt$inet_int(r8, 0x0, 0x32, &(0x7f00000001c0)=0x1000000, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r8, 0x29, 0x41, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/367], 0x0) ioctl$int_in(r3, 0x0, &(0x7f00000001c0)) write$binfmt_script(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x13b) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r6, 0x0) 22:34:03 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 532.291511] binder: BINDER_SET_CONTEXT_MGR already set [ 532.297169] binder: 23681:23687 ioctl 40046207 0 returned -16 [ 532.416450] Dead loop on virtual device ip6tnl0, fix it urgently! 22:34:03 executing program 4: socket$key(0xf, 0x3, 0x2) memfd_create(&(0x7f0000000180)='\xa5vmnet1*\x06\',:-nodev\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @multicast1, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x4}, 0x2c) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) epoll_create(0x7) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x18, r0, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x3, 0x0) 22:34:03 executing program 3: socket$inet(0x10, 0x2, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)) capset(&(0x7f0000000000)={0x20071022}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, 0x0, 0x0) pwritev(r1, &(0x7f00000001c0), 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x104) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r5, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r7, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r8, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) ppoll(&(0x7f0000000440)=[{r5, 0x4040}, {r6, 0x200}, {r2, 0xa019}, {r7, 0x600}, {r8, 0xb0}, {r0, 0x2004}, {r9, 0x8022}], 0x7, &(0x7f00000004c0), &(0x7f0000000540), 0x8) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r4, &(0x7f0000000080)=0x80, 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r10) r11 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r11, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) lseek(r11, 0x100000000000000, 0x2) sendfile(r11, r12, 0x0, 0xfffffffffffffffc) sendfile(r11, r12, &(0x7f0000000040), 0x8000fffffffe) 22:34:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000080)=0x406, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 22:34:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:04 executing program 5: clone(0x100020040004104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000740), 0x30f) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r3, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00'}) write(r3, &(0x7f00000001c0), 0x0) readlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000440)=""/174, 0xae) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) creat(&(0x7f00000006c0)='./bus\x00', 0x0) prctl$PR_SET_FPEMU(0xa, 0x1) unlinkat(r2, &(0x7f0000000300)='./bus\x00', 0x0) mlockall(0x4) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/context\x00', 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000140)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f00000001c0)={0x72b}, 0xffffffdf) fsync(r0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000100)={0x1000000000007, 0x9, 0xff}) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/context\x00', 0x2, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x3) mremap(&(0x7f0000470000/0x1000)=nil, 0x1000, 0x600000, 0x3, &(0x7f00007fc000/0x600000)=nil) syz_open_dev$loop(&(0x7f0000000080)='\xea\x1c\x00\xff\x7f\xff\xff\x00\x00\x00 ', 0x4, 0x0) r6 = dup(r5) fremovexattr(r6, &(0x7f0000000180)=@known='user.syz\x00') 22:34:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000046e6265f03d26e9ee59976ee000000000000050000"], 0x0, 0x0, 0x0}) 22:34:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 533.443058] binder: BINDER_SET_CONTEXT_MGR already set [ 533.454666] binder: 23738:23739 ioctl 40046207 0 returned -16 [ 533.488075] binder_alloc: 22919: binder_alloc_buf, no vma [ 533.506671] binder: 23738:23739 transaction failed 29189/-3, size 0-0 line 3137 [ 533.526853] binder: undelivered TRANSACTION_ERROR: 29189 22:34:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 533.536620] binder: BINDER_SET_CONTEXT_MGR already set [ 533.557320] binder: 23738:23748 ioctl 40046207 0 returned -16 22:34:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r5, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r7, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) poll(&(0x7f00000000c0)=[{r1, 0x400}, {r2, 0x197}, {r3, 0x4000}, {r5, 0xca0ff9f534289da0}, {r6, 0x81}, {r7, 0x5912b80f8ba70dec}, {r8, 0x8000}, {r9, 0x6000}], 0x8, 0x7fff) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xe8, 0x20000) write(r10, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) ioctl$KDSKBMODE(r10, 0x4b45, &(0x7f0000000000)) prctl$PR_GET_SECCOMP(0x15) syz_open_dev$binderN(0x0, 0x0, 0x0) 22:34:04 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 22:34:04 executing program 3: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x3, 0x8}, @sack_perm], 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) r5 = add_key$keyring(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='encrypted\x00', &(0x7f0000000880)={'syz', 0x3}, &(0x7f00000008c0)="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", 0xfe, r5) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r6 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397ef359867f4bcef53d3a47853e7af5d0328209ad73224000000000000000000000000000000000000000000850576cab6419dd44c143a56fdce000000"], 0x0, 0x0, 0x8000, 0x0) write(r4, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = dup(r7) read(r8, &(0x7f00000006c0)=""/252, 0xfc) timer_create(0x4, &(0x7f0000000340)={0x0, 0x0, 0x2, @tid=r0}, &(0x7f0000000380)=0x0) timer_gettime(r9, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r6, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e21, 0x4, @loopback, 0x6}, {0xa, 0x4e22, 0x89a2a6b4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0x0, [0x87, 0x4, 0x1, 0x0, 0x0, 0x5, 0x8, 0x5]}, 0x5c) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r10, r11+10000000}, 0x0) tkill(r0, 0x15) [ 533.682337] binder: BINDER_SET_CONTEXT_MGR already set 22:34:04 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 533.729456] binder: 23760:23761 ioctl 40046207 0 returned -16 22:34:06 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000001c0)={@dev, 0x2}, 0x20) pipe(&(0x7f0000000700)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e5e2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @remote, 0x2}, 0x1c) dup(r1) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r3, 0x1, 0x2b, 0x0, &(0x7f0000000100)) r4 = open(&(0x7f0000000240)='./bus\x00', 0x100000141042, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "82543cc5161b2943", "940c95b15b39e182c2523497dd62c7ae", "925888e5", "941ba991043fcf3d"}, 0xfffffffffffffcef) ftruncate(r4, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7558}]}, 0x8) sendfile(r0, r4, 0x0, 0x8000fffffffe) 22:34:06 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 22:34:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x64, r5, 0xf174f161ac1fd8af, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xcc}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x2bf, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:34:06 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 22:34:06 executing program 5: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) clock_gettime(0x0, &(0x7f0000007f00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000007dc0)=[{{&(0x7f0000000000)=@caif=@rfm, 0x80, &(0x7f0000003180)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/159, 0x9f}], 0x4, &(0x7f00000031c0)=""/161, 0xa1}, 0xff}, {{&(0x7f0000003280)=@ax25={{0x3, @netrom}, [@bcast, @netrom, @netrom, @bcast, @netrom, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003300)=""/210, 0xd2}, {&(0x7f0000003400)=""/149, 0x95}, {&(0x7f00000034c0)=""/44, 0x2c}], 0x3}, 0x10000}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003540)=""/138, 0x8a}, {&(0x7f0000003600)=""/59, 0x3b}], 0x2, &(0x7f0000003680)=""/148, 0x94}, 0x5}, {{&(0x7f0000003740)=@rc, 0x80, &(0x7f0000004c40)=[{&(0x7f00000037c0)=""/49, 0x31}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/182, 0xb6}, {&(0x7f00000048c0)=""/64, 0x40}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/209, 0xd1}, {&(0x7f0000004a80)=""/62, 0x3e}, {&(0x7f0000004ac0)=""/77, 0x4d}, {&(0x7f0000004b40)=""/247, 0xf7}], 0x9, &(0x7f0000004cc0)=""/4096, 0x1000}, 0x400}, {{&(0x7f0000005cc0)=@alg, 0x80, &(0x7f0000006000)=[{&(0x7f0000005d40)=""/254, 0xfe}, {&(0x7f0000005e40)=""/92, 0x5c}, {&(0x7f0000005ec0)=""/35, 0x23}, {&(0x7f0000005f00)=""/196, 0xc4}], 0x4, &(0x7f0000006040)=""/19, 0x13}, 0x7}, {{&(0x7f0000006080)=@isdn, 0x80, &(0x7f0000007380)=[{&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000007100)=""/214, 0xd6}, {&(0x7f0000007200)=""/54, 0x36}, {&(0x7f0000007240)=""/194, 0xc2}, {&(0x7f0000007340)=""/13, 0xd}], 0x5, &(0x7f00000073c0)=""/154, 0x9a}, 0x20000}, {{&(0x7f0000007480)=@hci, 0x80, &(0x7f0000007940)=[{&(0x7f0000007500)=""/20, 0x14}, {&(0x7f0000007540)=""/224, 0xe0}, {&(0x7f0000007640)=""/184, 0xb8}, {&(0x7f0000007700)=""/97, 0x61}, {&(0x7f0000007780)=""/254, 0xfe}, {&(0x7f0000007880)=""/51, 0x33}, {&(0x7f00000078c0)=""/79, 0x4f}], 0x7, &(0x7f0000007980)=""/29, 0x1d}, 0x1}, {{&(0x7f00000079c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007a40)=""/8, 0x8}], 0x1, &(0x7f0000007ac0)=""/117, 0x75}, 0x3}, {{&(0x7f0000007b40)=@alg, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007bc0)=""/196, 0xc4}, {&(0x7f0000007cc0)=""/19, 0x13}, {&(0x7f0000007d00)=""/59, 0x3b}], 0x3, &(0x7f0000007d80)=""/29, 0x1d}, 0xf72a}], 0x9, 0x100, &(0x7f0000007f40)={r2, r3+30000000}) write(r0, &(0x7f0000000080)="260000001000f5680300c10100000016c455ca380100000000e0ffffff00f13a050003006a4f", 0x26) 22:34:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) 22:34:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001a80)=0x10) splice(r1, &(0x7f0000000400), r4, &(0x7f0000000440)=0xfffffffffffffffc, 0x48, 0x4000000008) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x12080, 0x0) ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000540)={0x1f, 0x32, &(0x7f0000000380)="61b117d1d0259a7a24a49391084f3b0d0b2052176e05b2a090e3a4371d988f8886c9493e26d64b16a0550774e3419ba01d49"}) r6 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e21, @rand_addr=0xffffffffffff2aa3}}) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'tunl0\x00', r9}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r10, &(0x7f0000000200)=""/238, 0xee) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000740)=0xfffffffffffffdcb) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'irlan0\x00', r11}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r12) r13 = creat(&(0x7f00000002c0)='./file1\x00', 0x40) write$P9_RREAD(r6, 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r13, &(0x7f0000000580)={0x7, 0x6d, 0x2}, 0x400000) lgetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="750011da756a8560c5a7ba99544ee63993756b1794a6e62954c92cb9ec10dda22d5887519aa5c795fb9b29c6e9a7938b2dcdccd9d52ef6585afbf78b6c7464c689f369ef00"/80], &(0x7f0000000300)=""/119, 0x77) syz_emit_ethernet(0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="42be4ee4bbc2aaaaaaaaaaaa8848697b02ec00da003ffe80580000000000000000000000001300000000000000014e244e2004019078a43887a5059a2e2184d913e12c046cb01ae95a10b3a53afc560f5881f9f6ce7f75c6a12f1e83569890d130b8cfa67c318f84d5299d3d7c430bf1fb7c270d1471e42d3d24bbd58b92dd13cf7cc256361606735e3e6c5c4646e40de9ab06d214ced595000000000000003644dc3f9578ca9f323aa9d3701b0d428b2c98a49946189eba44d0c1c22b90d465c0e79ed376ca80169b1bc1be6790805891376606a54560ba72cc6597555e999b15e008e5206c1440e5e3a76d53196b1b451a540d0512dcccffd86bec7aa1b6f561172f2e93d5356e537a0b0000885b45b2e3a9c04800005faaee149d8375edab5ab19c73ba7aaa35b0add95b5ce399fc9863a674c3ffc5e34679af5c5cce7f12b9f1897bbb788d16d32594356574f17aaea09c0e6273c0cfce29c97737a45d64682978779531a39dea56a8f98b0397a2e5b37063d94501004be1aa592225ee3c9b1021b0b963750fce551fc6ff5d2c05d5f31a3bd8e38ea68fa479fcc2bd27b2f98da74b4a8ee47df09c87d895836024a2ec66425c897fa0a827cef3fd932200deca6d63fe73207930cca1e72d103c59849e8c9ae58db32669b0c88250ce2d34d417b63c000000000000dbdbea9e98e757e1b098fae30b5232b9e87b253edbd5bf"], 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r13, 0x5411, &(0x7f0000000700)) fsync(r4) ioctl$LOOP_SET_CAPACITY(r13, 0x4c07) getpgid(0xffffffffffffffff) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r14, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) 22:34:06 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 535.788068] binder: BINDER_SET_CONTEXT_MGR already set [ 535.798028] binder: 23792:23800 ioctl 40046207 0 returned -16 22:34:06 executing program 2: r0 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) timer_create(0x4, &(0x7f0000000400)={0x0, 0x20, 0x0, @thr={&(0x7f0000000340)="96fcdbd2a1d95cb3fbb73db0a9cc41", &(0x7f0000000380)="be3176118f7d8894daf20486cda26e51486a693e7e04edd030374dd4df7640a0ef5b60a74064fa0ebc78f2721973f233ae6d59de41"}}, &(0x7f0000000440)) r2 = memfd_create(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000700)={'yam0\x00', {0x2, 0x4e23, @remote}}) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000740)=ANY=[@ANYBLOB="a5105cdcf349fa12aad3d7a2421733685a0838326e0e9d007764ed542ebf0eefd2b449307a41af6c0000ab0bd4c171f25c4defbded67154f3fd58fe91ecd821472b71e61d1038cad87c7a9fd237a0eefd1df992013953c9538da759a23ea17ef59cd55cb4378d74b0d9fbe740057fafc4cacaaedfedd85ba54"], 0x0) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) inotify_init() clone(0x100020040004101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = getpid() socketpair(0x8104a5577081fbb7, 0x5, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$netlink(r6, &(0x7f0000000180)=@unspec, 0xc) wait4(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r9, &(0x7f00000001c0), 0xfffffef3) getrlimit(0x9, &(0x7f00000000c0)) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000600)={{0x3, 0x0, @reserved="556ec4834d63bc9ded81fec67934e160cde4f008ed042c7750d39d16159ec9de"}}) fchdir(r7) creat(&(0x7f0000000480)='./file0\x00', 0x15a) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) unlinkat(r9, &(0x7f0000000240)='./file0\x00', 0x200) [ 535.877569] j: renamed from lo 22:34:07 executing program 4: bind$netlink(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0xdfedf534d1677a51) ioctl$EVIOCSABS2F(r1, 0x401845ef, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) write$nbd(r1, &(0x7f00000009c0)=ANY=[@ANYBLOB="6744669800000000040000905481c07fd55b8c50ba01170003040000209f52afe9e4cfd07b5cf8cd9362139bcddfd20a87b6fb484996000000000000000386052de1fd2543a3b87367de10bc3de31b3a87a5e1c98b3be5d855cd04a27a3476d54c0970021397225e00000000000000005f050000000000000073f8044038b5776789aef960b7bdc9581ede01a4dee7f4ec66200361e624da51315dfbfb0d8c8d4ecd65a1a1b3c8965e0257ac0e96af105eaafdad13e5f579d041f763c7cbe053921ad68143bd9af9e0b2f27bdc7bd9863eb3e1a9c297806196d73975e70c08c83ce5c735929018fedd113e47ad7b8e762d"], 0x1) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0x8000) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) sendfile(r3, r4, 0x0, 0xfffffffffffffffc) r5 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000001c0), 0xa198) openat(r5, &(0x7f0000000400)='./bus\x00', 0x80, 0x142) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@dev}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0x387e3fc61e6e15c8) syz_genetlink_get_family_id$tipc2(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000280)) ppoll(&(0x7f0000000700)=[{}, {r6, 0x1141}, {0xffffffffffffffff, 0x3282}, {}, {0xffffffffffffffff, 0x10}], 0x5, 0x0, 0x0, 0x0) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000340)=""/151) lstat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) fchownat(r3, &(0x7f00000001c0)='./bus\x00', 0x0, 0x0, 0x1800) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000000)={'syz'}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000740)="9b746e719e0083260483a83833a31c2f97abe201d503927c56e9ad3c77f3c0890782d41b1e4e870347cc945037cb8db5dca60f23da15c42871ee6425d8908ea2645c2300b6bab0b8221554e4a4cc457ab40bbb93d8775ed1f3d36e3665655ccd61d887722a001a62bf8a03c78b64a21ca7d72d78973954c2c7fa78e168aa2340b9af52b4d9c7799ffce49f3e32c5c4df78d65f043042af95641c75d733a3650f39ab1eaea1002173eaf788983b57ead080539e1dce59d4cc68ff9ff3025fe1ce3bbc261ab4f7ea57e6422842674ec905b15be0cd5fbd8ccc085a664c53983abfe2c7ef2ff59384dc2344208d23f31e81fbf06395d16b3044aba8fc0761dbab9a23350147d430e2d91ceb2691cc1398a13996e28644f1330c3c01b4a1ab9ecfd93533c0c6c3949f7ee1a9cb5471198d407f26cdf6351298281e0d4a528f93c3ea8aa5548b64c11918e55d2c542b24b8dba44fd2b8f55922615f658b234c83338655613fc05b26bbbb8befd04170dcf7da6e6e9913d73679f833d1e0799050b392b735aa463afd711b8a97f503a8d9b0a02767ae3a757293511dc0dca26d6275671eac3b8124259e82855bd62376a8028c01d0f4e1b7c34d60fcdb1d0c968816b34bf9496be7848254328ae0e1114bca6fce3d8a51cabfe224d2c1a814591a446bd14d0020444ff8321cadc6d400756121f6c0453792bf1721f4a11537df9cd80944aa5979f36bece828e4e97f0f0921a1e41a2a14258f72612d85a93856885624496797f191d33aee3b3555573517f4927ed8c69a46db01e964e14b6ff2723f13f93f8ba4ba656164b1bd96fe5b59a0b24e8f7169e2574d0b9b394f68a2e8a8545012c070b8798026e4089dbec669b2cb31386215c4eda212a5382b48353165ff5d428ab8625e39c1c5c82118451e059038c758845bfe26e209efbdce93377c14fd4a6765f5252bb66671a4816fb3dc2a72d94014f882f69256f4913c88d375646488421ee2d1250deaffa2a97039a5be8a7872e1a43b464a4fab6c498b358c841e20f26418445edf0972ffdbda1df9bd4231523062f3e55d4f9184f97866859bcd156ee637b43302187c3a518eca6d585ce3c727d2c83754e8c8d7ebdef1d85d5e0a35de0c0fe758a456c81086208e07802a34f6af1da04249a181a8f070d6d6596e08bb2ecbb7242d846f6e6210f43b035cd45d10eba90c0cadc4f8da06f4c4e850d64599c4316af6c2cb1c7b3b8ae2ea32980462eb85bd2798a9485c9642e8fef2fe26a9636c84bc718c9d62c371e5252a39c0cafb8658ce101bb1ab090990358d53bc4675170b403644e9f24c132063cf035dbe17878b1bf295f104a239318bb19a9b3ab43e81812736021880ade3d2fe9c1a545cc959decb7933f924cb5df334beacde1557d1e144ae15223cd5b3ebcd5b68d6ac967b9fe6156d3d508518697db2765601766ab826b4faa17bf2866bc1f625aa85142fdd3688d1daa47db851a64fafab541d6adfc9aae937a960a69be95bff9eee34b91a4c6a212acb8c5f55804a7946a750bcef0f76811e5292cd979ea59b7b45ecabc642bb4f0b3b1939e55cd6c8c8fcd3d2f1f62dd402fba8d8df1264fbd50c265eef9ffb22a5d260d44981232ad89cdac1f27df0df605028c1c1c58d4501aa4cd06507e17e10a1d76b24b1cff4252b5f3715640e760a4cbc581fa7f735149380b3458f9fe6d29ba163332440bbd73e3d6b93b8b05c5ab76e6b69edc75e89dcc7e3b9ac6f6b337e7f0a255db7fe788e1d8e2200e3be51ffb404244cb81aaa04f861c09f13424d9e51d3fe5332508d0262fced43678420197af7f2aa91abf94c94cc5e49623dcd16df570faedfd9f7d092ff2e80dff90a7f620731c387f3ebf29f6c154b12361ec32d7fc78d4d7443fdce3e2c1927443e2488ce90a8b1ad6d2b049f4e7309efe7a4ed5fe20685dd4fae47042800944a197894761cad84a8900051bb9ac9e10bc5da5907e314f1710bbc65cab4b7b0824233d9e0fe7e78d24779df23637325e14f36278230ca80bb10b8cf7954d475438e04dcdac7f80ee0dfcf386be5da5de97dfe10a4a8f5ec91fa45fd767610ac1b225c7d8b96cc29a3a75cfb65043c010df39d9f6c5d681470c1f56083554549d12fa563a5355f1d81faffe6eb9e3eb18ec75b8fea917709fe90c21039980488058f60bfb5a301b0f167148d7def83356c275a4b05a98c45cb5f37ce15f4944c7bbe7bf9b255acc83435c02a70caa7b3d81dd5dc563bf06f660942c380b1c4613472f476194d22f52420d9786d2541866595c33df24b431e08afe395bdc5036eaa6ada2b5920d92c306264de253ab1d16eee9631e51d6c5d2ffdae6a318444b219b42680f4f13f148f6040767f161fd9da4dce932f6148f7bf7a9736ce33d9f54433e103bf21d565fc00fc6495bc1023807fa83dc2379ec1d6ddb2a22a6112af5fe426d7efb60df0c29d20a4ed15713251ed8230c60db9f6", 0x6e3, r7) r8 = add_key(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000500)="f7bf3b793e25562b34c2a397e2da37e76629b3b49703793fd42d5b7957f8cd505bbc1cb9578e51edd95d44091a85950a69c4c9189e0239b9fa3451f2429c3aaf7bdba0a914c80c3add2f7f760cb3f4c328768bf8761471620cac7c859ae017061bb94f89da21289a26cf882eceb05b753af3afcfd18284b14d522a2500c47498aa08ae58157daa7532070de599f0fa8edad2e301e0f9885ee595e66b79dc80dfebb94c001836c585079d96f6d99651c124e899285dcd4b47e94276fb359b4dee21e08db1f9c3d365f0a71d7b03121bde20", 0xd1, r7) keyctl$get_security(0x11, r8, &(0x7f0000000300)=""/38, 0x26) sendfile(r3, r4, &(0x7f0000000040), 0x8000fffffffe) 22:34:07 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 535.936072] binder_alloc: 22919: binder_alloc_buf, no vma [ 535.942498] binder: 23792:23819 transaction failed 29189/-3, size 16384-0 line 3137 22:34:07 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:07 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="dc013fe919c52c47448751df6bd501fbd39f61b9b975e0f731280521badb2a5d18cca419e51dd45c560040148c3cf361e210482b8a37c9fac5918cc0d9a418dd7d1d775f10fca1aab42943c3633c993f766283d367f7ad598f633967ba8a4b303f69b604b8bf25b60747adbbccb2cef23e", 0x71}, {&(0x7f0000000180)="1252f165ab38bfd120715695875887b8ca5007fc0a28a90fe591981498db77528359f15e15ab7f3132952e0183a7e2074b51cb1ab1ee6506ea90fe1ba3ff3cfc54727b2709e4af0be1b2e5717d8c5ec8ed62f8959a2a6b62a0c77a350743471dbcf8aa0ec54b6c05af173e5cbd508e39ea2d814109e4d8ee3e208e4cad82853f0f2c3354c563edc98794bee84b172c79865fc1befa570dab6dd503e58d25a7d4e8337e122b", 0xa5}, {&(0x7f0000000240)="9ba7fe76b338e1b01dab78323ba70f4f5a45c6b4dd412938ea86e0acd0a5b071e16332e290beec201f87c0dcaba0f0fc5a69c732ac66a2ce71c0db3fab684b6861485fdef7decba4d6b6c1a20c435078b640f7692bf6be443e3b59f2a5f9e91cd498bc6dac65d9220be8d5f35037924fdc314abc5222cb6cacb96d96ba022d28e42cad747fbae14e17a159592ced9bd733daa488e998d65a4dda", 0x9a}, {&(0x7f00000000c0)="e568f34378c66f02856a29cccc6222d56dde4eeec6b9ba74cac6f61c8a537d4991f0e0dffe5a", 0x26}], 0x4, 0x1) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80047601, &(0x7f0000000140)) 22:34:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x50f, 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0xff, 0x0, 0x0}) 22:34:07 executing program 5: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) clock_gettime(0x0, &(0x7f0000007f00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000007dc0)=[{{&(0x7f0000000000)=@caif=@rfm, 0x80, &(0x7f0000003180)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/159, 0x9f}], 0x4, &(0x7f00000031c0)=""/161, 0xa1}, 0xff}, {{&(0x7f0000003280)=@ax25={{0x3, @netrom}, [@bcast, @netrom, @netrom, @bcast, @netrom, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003300)=""/210, 0xd2}, {&(0x7f0000003400)=""/149, 0x95}, {&(0x7f00000034c0)=""/44, 0x2c}], 0x3}, 0x10000}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003540)=""/138, 0x8a}, {&(0x7f0000003600)=""/59, 0x3b}], 0x2, &(0x7f0000003680)=""/148, 0x94}, 0x5}, {{&(0x7f0000003740)=@rc, 0x80, &(0x7f0000004c40)=[{&(0x7f00000037c0)=""/49, 0x31}, {&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/182, 0xb6}, {&(0x7f00000048c0)=""/64, 0x40}, {&(0x7f0000004900)=""/104, 0x68}, {&(0x7f0000004980)=""/209, 0xd1}, {&(0x7f0000004a80)=""/62, 0x3e}, {&(0x7f0000004ac0)=""/77, 0x4d}, {&(0x7f0000004b40)=""/247, 0xf7}], 0x9, &(0x7f0000004cc0)=""/4096, 0x1000}, 0x400}, {{&(0x7f0000005cc0)=@alg, 0x80, &(0x7f0000006000)=[{&(0x7f0000005d40)=""/254, 0xfe}, {&(0x7f0000005e40)=""/92, 0x5c}, {&(0x7f0000005ec0)=""/35, 0x23}, {&(0x7f0000005f00)=""/196, 0xc4}], 0x4, &(0x7f0000006040)=""/19, 0x13}, 0x7}, {{&(0x7f0000006080)=@isdn, 0x80, &(0x7f0000007380)=[{&(0x7f0000006100)=""/4096, 0x1000}, {&(0x7f0000007100)=""/214, 0xd6}, {&(0x7f0000007200)=""/54, 0x36}, {&(0x7f0000007240)=""/194, 0xc2}, {&(0x7f0000007340)=""/13, 0xd}], 0x5, &(0x7f00000073c0)=""/154, 0x9a}, 0x20000}, {{&(0x7f0000007480)=@hci, 0x80, &(0x7f0000007940)=[{&(0x7f0000007500)=""/20, 0x14}, {&(0x7f0000007540)=""/224, 0xe0}, {&(0x7f0000007640)=""/184, 0xb8}, {&(0x7f0000007700)=""/97, 0x61}, {&(0x7f0000007780)=""/254, 0xfe}, {&(0x7f0000007880)=""/51, 0x33}, {&(0x7f00000078c0)=""/79, 0x4f}], 0x7, &(0x7f0000007980)=""/29, 0x1d}, 0x1}, {{&(0x7f00000079c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007a40)=""/8, 0x8}], 0x1, &(0x7f0000007ac0)=""/117, 0x75}, 0x3}, {{&(0x7f0000007b40)=@alg, 0x80, &(0x7f0000007d40)=[{&(0x7f0000007bc0)=""/196, 0xc4}, {&(0x7f0000007cc0)=""/19, 0x13}, {&(0x7f0000007d00)=""/59, 0x3b}], 0x3, &(0x7f0000007d80)=""/29, 0x1d}, 0xf72a}], 0x9, 0x100, &(0x7f0000007f40)={r2, r3+30000000}) write(r0, &(0x7f0000000080)="260000001000f5680300c10100000016c455ca380100000000e0ffffff00f13a050003006a4f", 0x26) [ 536.585132] binder: undelivered TRANSACTION_ERROR: 29189 22:34:07 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 536.671728] binder: BINDER_SET_CONTEXT_MGR already set [ 536.717377] binder: 23862:23864 ioctl 40046207 0 returned -16 [ 536.748032] binder: BINDER_SET_CONTEXT_MGR already set 22:34:07 executing program 2: socket$inet(0x10, 0x2, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200000, 0x0) bind$netlink(r1, 0x0, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0xe9) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r4, &(0x7f0000000080)=0x80, 0x12) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r6 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) sendfile(r6, r5, 0x0, 0x2000005) read(r6, &(0x7f00000005c0)=""/193, 0xc1) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r7) r8 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r8, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r9 = open(&(0x7f0000000180)='./bus\x00', 0x442002, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) lseek(r8, 0x100000000000000, 0x2) sendfile(r8, r9, 0x0, 0xfffffffffffffffc) sendfile(r8, r9, &(0x7f0000000040), 0x8000fffffffe) getsockopt$sock_buf(r10, 0x1, 0x10000000000001e, &(0x7f0000000380)=""/87, &(0x7f00000006c0)=0x9) mkdirat(0xffffffffffffffff, 0x0, 0x180) syz_open_procfs(0x0, 0x0) [ 536.770789] binder: 23862:23869 ioctl 40046207 0 returned -16 22:34:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ff9000/0x4000)=nil) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000005000000f7ffffffffffffff000040"], 0x0, 0x0, 0x0}) 22:34:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:08 executing program 3: r0 = gettid() r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$fou(0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x5002}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm], 0x2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) r4 = syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000080)='./bus\x00', 0x0) io_setup(0x1001, &(0x7f0000000140)=0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r8, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) getsockopt$inet_int(r8, 0x0, 0x32, &(0x7f0000000640), &(0x7f0000000100)=0xfffffffffffffe9f) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001840)='net/rt6_stats\x00') r11 = socket$unix(0x1, 0x1, 0x0) io_submit(r7, 0x3fffffffffffffee, &(0x7f00000019c0)=[&(0x7f0000001880)={0x0, 0x0, 0x0, 0x3, 0x100, r9, &(0x7f0000001800)="0cebb25b3073", 0x0, 0x2, 0x0, 0x3, r10}, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x7, 0x8, r11, &(0x7f00000018c0)="ec9002bcd6a4e3d8235228a77d56d843b303118dcc6005dac3445bc59d33f0a2dd59a2e834804fa1812953bfe181de7ae722968f1f419c14c78b98c9925ad21acfcec443f37a42af28d6890d89e8f3c17367f1d9a44e378d6149d6a44022350a3f4261b706b5d037634cdc226ac605b83f57a8f85997d2d77677385cebc5bec81cbc40c417692aa9c37e334a44d7a08c59d24dfdb1c22332720198", 0x0, 0xb8d6, 0x0, 0x0, r6}]) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r13, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r13, 0x0) io_submit(r7, 0x1, &(0x7f0000000500)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x8, 0x101, r13, &(0x7f0000000800)="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", 0x1000, 0x1, 0x0, 0x1}]) mkdir(0x0, 0x12) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f00000007c0)={'syz', 0x2}, &(0x7f00000006c0)="bb120a7889345606d132dd8b80966668658b89fc789da6efcb35f7645b2382f095cc6de23040b0d6e7e51734f26e79b713fffbd9a5a451811fd887fa87d43fc4f89522452dab750a68fa0eae845eee67dff677febe8dfd2c78b81881f84126e811a716d686d837db06803f62ed6188589f113501cb0671d6742660e945c9115306ed4172fd631fa958005bb913e59fdc658ae5", 0x93, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000440)=0x24000, 0x5) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="7e8125256547cf5b9a38e9e1795ad495bdb487da683c912a658d784339a0ffe8b7b67e9ca4d7d2754bd0ea2bbb96615c3d9296fefce24e08909f00d397cc7f00b8183ecb81fe2c1aef359867f4bcef53d3a47853e7af5d0328209ad7322400000000002d15305ff7d9a717307e74de000000000000000000000000000000008505"], 0x0, 0x0, 0x8000, 0x0) write(r6, &(0x7f00000001c0), 0xfffffef3) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) timer_create(0x4, &(0x7f0000000340)={0x0, 0x22, 0x2}, &(0x7f0000000380)=0x0) timer_gettime(r14, &(0x7f00000003c0)) sendfile(r1, r3, 0x0, 0x8000fffffffe) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0x6, &(0x7f0000000040)) nanosleep(&(0x7f0000000100)={0x77359400}, &(0x7f0000000140)) tkill(r0, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, r6, 0x0) [ 536.962208] binder: BINDER_SET_CONTEXT_MGR already set [ 536.995144] binder: 23880:23883 ioctl 40046207 0 returned -16 22:34:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:08 executing program 4: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r3, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e3e3) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r10, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r1, @ANYRES16, @ANYRESHEX=r3, @ANYRES64=0x0, @ANYRESOCT=r4, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRES32=r5, @ANYRES16=r6, @ANYRESDEC, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYPTR, @ANYRESDEC=r2, @ANYRES64=r4], @ANYRESOCT=r3, @ANYPTR=&(0x7f00000007c0)=ANY=[@ANYPTR64, @ANYRESOCT=r8, @ANYRES32, @ANYPTR, @ANYBLOB="6adc8a0d5e5e49e2949189e63291fd8126ed56443d040d02ce27a7b896c65e0cefd6bc63469df7e194e67fd161334d2dfdafd6", @ANYRESHEX=0x0, @ANYRESOCT], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], @ANYPTR64, @ANYRES64=r10], @ANYRES16, @ANYRES64=r7], 0x8}, 0x1, 0x0, 0x0, 0x4084}, 0x8004) fchdir(0xffffffffffffffff) creat(0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r12, &(0x7f00000001c0), 0xfffffef3) read(r11, &(0x7f0000000200)=""/250, 0x50c7e5e2) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000740)=0x100, 0x4) bind$inet(r13, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$int_in(r11, 0x5452, &(0x7f0000000300)=0x3) connect$inet(r13, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r13, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r16 = getegid() syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r0, &(0x7f0000002b80)=[{&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000001980)=""/122, 0x7a}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/160, 0xa0}, {&(0x7f0000002ac0)=""/189, 0xbd}, {&(0x7f0000000540)=""/64, 0x40}], 0x6, 0x0) r17 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x100, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r18 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r18, 0x400454ca, &(0x7f00000005c0)={'vlan0\x00', 0xd803}) r19 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1fffff}, 0xc) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) open(0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x8000fffffffe) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000a40)=ANY=[]) ioctl$TIOCGSID(r19, 0x5429, &(0x7f0000000140)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000680)={0x1}) dup3(r12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fec000/0x13000)=nil, 0x13000, 0x1, 0x80010, r18, 0x0) write$P9_RATTACH(r17, &(0x7f0000000400)={0x14, 0x69, 0x1, {0x80}}, 0x14) r20 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r20, &(0x7f0000bcefe4)={0xa, 0x4e20}, 0x1c) setregid(r15, r16) 22:34:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) [ 537.076585] binder: BINDER_SET_CONTEXT_MGR already set [ 537.091048] binder: 23880:23891 ioctl 40046207 0 returned -16 22:34:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 537.150316] binder: BINDER_SET_CONTEXT_MGR already set [ 537.169228] binder: 23903:23904 ioctl 40046207 0 returned -16 [ 537.189642] binder_alloc: 22919: binder_alloc_buf, no vma [ 537.208261] binder: 23903:23904 transaction failed 29189/-3, size 16384-0 line 3137 [ 537.247585] binder: undelivered TRANSACTION_ERROR: 29189 [ 537.253733] binder: BINDER_SET_CONTEXT_MGR already set 22:34:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x40140, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="e500000002004e237f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000500000002004e210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e23ac14142900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008ec2c3896d56cfd14c78e06ba3bdedf779fdce5493bd7cc2b5898815bf488131aa94abfb13a5550b94fa97e3e056fd81ca2dd5ec85c4a147684f5c2e15c04b893be6b418013d52fd540b3f2b72a80fa796d24e9091c7e42eaf800a417a9334e115c0a23462683d8ee503aac411c0c8fec68d4505b88db818818dcc8068fa1c7d8a37a82d515400f9eb09bbb976bf3446d356bc0c96f18b9de96bf5cfb55476fb9447cad33"], 0x30c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1163484000000000000000000000000000e8a75e427536e4c23ebf3ee0918e00f9ffffff000000000000000000000040"], 0x0, 0x0, 0x0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) [ 537.295288] binder: 23903:23912 ioctl 40046207 0 returned -16 [ 537.301213] binder_alloc: 22919: binder_alloc_buf, no vma [ 537.301256] binder: 23903:23916 transaction failed 29189/-3, size 16384-0 line 3137 [ 537.315576] binder: undelivered TRANSACTION_ERROR: 29189 [ 537.378386] binder: BINDER_SET_CONTEXT_MGR already set [ 537.384360] binder: 23921:23922 ioctl 40046207 0 returned -16 [ 537.401091] binder_alloc: 22919: binder_alloc_buf, no vma [ 537.427662] binder: 23921:23922 transaction failed 29189/-3, size 0-1073741824 line 3137 22:34:08 executing program 5: r0 = socket(0x10, 0x802, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgrotp/syz\x17\xdb', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r2, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x3ffffffffffffd7, 0x0, [], [{0x2005, 0x6d2, 0x7, 0x81, 0x6a6f, 0x8}, {0x70, 0x101, 0x0, 0xf94, 0x10001, 0x7ff}], [[], [], [], [], [], []]}) write(r0, &(0x7f0000000040)="24000000190001f0008000361731ed6402dfa90100b70006000000cc08000f00fed70000", 0x24) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) read(r3, &(0x7f0000000300)=""/148, 0x94) 22:34:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:08 executing program 2: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$selinux_load(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="12d9c7030a1d8950668267a2cb92ecf7232a9eac4b4a2f86533505459ed965be3fa354411c158a14241b49d7dd98e4cc912d71f91cfd1cc4606ae3e3b21a38bd939bcf85cb103c45c095bb2fa2"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x0) recvmmsg(r1, &(0x7f0000001240)=[{{&(0x7f0000000bc0)=@ax25={{0x3, @bcast}, [@netrom, @bcast, @netrom, @default, @netrom, @rose, @rose, @rose]}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/107, 0x6b}, {0x0}], 0x3}}, {{&(0x7f0000000e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}, {&(0x7f0000002dc0)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000001080)=@can, 0x80, &(0x7f0000000500)=[{&(0x7f0000001100)=""/127, 0xffffffffffffffe8}], 0x1, &(0x7f00000011c0)=""/93, 0x5d}, 0x7}], 0x3, 0x0, 0x0) getresuid(&(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) r3 = socket$inet6(0x10, 0x80002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') dup2(r4, r3) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000380)) ioctl$TCSBRK(r0, 0x5409, 0x5) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') sendfile(r5, r5, &(0x7f0000000180)=0x74000000, 0x5) 22:34:08 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x0, 0xb2a}, 0x14) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000580)='.\x00', &(0x7f00000002c0)='sysfs\x00', 0x2000000, 0x0) mount(0x0, &(0x7f00000003c0)='./file0/bus\x00', &(0x7f0000000400)='sysfs\x00', 0x0, &(0x7f0000000480)) lstat(&(0x7f0000000100)='./file0/bus\x00', 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="0801000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000229b99477910e9ee2e7a388bbe9af454f806136a33381c3ff080"], 0x22c) r4 = open(&(0x7f0000000180)='./file0/bus\x00', 0x141042, 0x0) sendfile(r3, r4, 0x0, 0x5a92) write$input_event(r2, &(0x7f0000000000)={{}, 0x16, 0x4}, 0x10) sendfile(r4, r4, &(0x7f00000000c0), 0xbf99) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') fcntl$getownex(r4, 0x10, &(0x7f0000000480)) sendmsg$netlink(r0, &(0x7f0000000500)={&(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x840000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x20000084) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) 22:34:08 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:09 executing program 3: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780)=""/109) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r3, 0x4, 0x6100) r4 = dup(0xffffffffffffffff) sendmsg(r4, &(0x7f0000000780)={&(0x7f0000000380)=@generic={0x0, "ff80f096dc909d329774e6a8dade60ee2bdaabb4abb857eb5baec14815f0a69bd69feee1c43c775ac38e40b47b092d7cc165e503fe31d4a94a66d3c1b3b41af77425d24669a3ca462de284e1169bd5babd3312ebf023fe460ed630e38452416f2d51ff14660be2eed6bba6e5352188bd025b6f60cc8bc400a25a3350e207"}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000080)="5c854701969bf896", 0x8}, {&(0x7f0000000400)="ff8d", 0x2}], 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x10c}, 0x40) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) fcntl$setsig(r2, 0xa, 0x25) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r3, 0x0, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3f) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) close(r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000c85000)={0x4}) signalfd(r6, &(0x7f0000000040)={0x7ff}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendmsg$nl_netfilter(r9, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400545f257fffff0000deffffff00000000aa24"], 0x14}}, 0x0) fremovexattr(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="196fb0e5f8f20098a8dd350724219f65f74cd4253eb19e5d268542fd82a10c6c3a237a759c34dcfddc3bc9c9b9f59bbb9f1faad6788a3b9164f78e3bd126b664925eff31d374d1e2c009392151e5094b61ec752b1347ad83756925b88d5e78ee2e7987d421ec48712542c6fad13bd990efabf382b88c5a75762d"]) sendfile(r3, r5, 0x0, 0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000005c0)=0xa5) 22:34:09 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x1e7b02) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/keychord\x00', 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000001ec0)={@initdev}, &(0x7f0000001f00)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2400c0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r3) r4 = memfd_create(&(0x7f0000000240)='net/mcfilter6\x00', 0x0) write(r4, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) close(r2) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) write$P9_RVERSION(r1, 0x0, 0xfffffffffffffe76) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'nr0\x01\x00', 0x4005}) write$cgroup_subtree(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="aa27a5886a8ffd4a30ae7af50700000084f1000035be2e7e744929f8a148eb357c0827f366d4ab0000000000"], 0x5) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_buf(r6, 0x107, 0x8, &(0x7f0000000040)="f8f550e6", 0x4) read(r6, &(0x7f0000000100)=""/254, 0xfe) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r0, r5) write(r8, &(0x7f00000001c0), 0xfffffef3) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) fstat(r9, &(0x7f00000003c0)) getegid() 22:34:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000180)={0x4, 'eql\x00', 0x4}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 537.896429] binder: undelivered TRANSACTION_ERROR: 29189 [ 537.902272] binder: BINDER_SET_CONTEXT_MGR already set [ 537.907552] binder: 23921:23926 ioctl 40046207 0 returned -16 22:34:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r2, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000007c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)=ANY=[@ANYRES16, @ANYRES16=r5, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x771740af}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e20, @remote}}) [ 538.069924] binder: BINDER_SET_CONTEXT_MGR already set [ 538.075402] binder: 23963:23964 ioctl 40046207 0 returned -16 [ 538.083346] binder_alloc: 22919: binder_alloc_buf, no vma [ 538.091399] binder: 23963:23964 transaction failed 29189/-3, size 16384-0 line 3137 22:34:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='\xafdev#bindNr#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f00000000c0)=[@increfs, @release], 0x0, 0x0, 0x0}) 22:34:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'vet\x00\x00\x00_b\x1f\x1cC\xa5e\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @broadcast}, 0x10) close(r0) socketpair(0x4, 0x80001, 0x81, &(0x7f0000000040)) 22:34:09 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fchdir(r0) r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="650000007500005a000000e9667d65872e5c70329e077bf6969437a260fe155c0229fc60c36767a84e7fa2e63352556570470d912726cb6f26cccc07133f5076afb74df7ffffffffffffffc040c846158e8ff50a608a183aa5cb09e0d6c51f79d1020900c0545174a173847876a54771bf595a97aedcad09bad0c3d19d67be4a7d88c733c9077f2c78c0fa227a574fbe933cbfc623b735d340c12c0ec61968370793d056de16432d530550b4bcaa18914f74e7ccefffee9922a8d31c9400"/204], 0xcc) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000001900)={r3, 0x0, 0x8, 0x10001, 0x4}) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x6}) r4 = gettid() ptrace$getsig(0x4202, r4, 0xa2c0, &(0x7f0000000400)) write$P9_RFLUSH(r3, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) syz_emit_ethernet(0x12b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) openat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) fsync(r3) r5 = getpgid(0xffffffffffffffff) get_robust_list(r5, &(0x7f00000006c0)=&(0x7f0000000680)={&(0x7f00000005c0), 0x0, &(0x7f0000000640)={&(0x7f0000000600)}}, &(0x7f0000000740)=0xc) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYRES32], 0x4) ioctl$UI_END_FF_UPLOAD(r6, 0x406055c9, &(0x7f0000000500)={0x3, 0x0, {0x56, 0x2, 0xfffffffffffffc00, {0xf6, 0x2a}, {0x4, 0x5}, @period={0x58, 0x100, 0x0, 0x9, 0x7ff, {0x94bc, 0x2, 0x5, 0x1f}, 0x0, 0x0}}, {0x53, 0x100000001, 0x6, {0xa22, 0x1}, {0x6c8, 0x401}, @ramp={0xf38, 0x3, {0x80, 0x5}}}}) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) clock_getres(0x7, &(0x7f0000000380)) r7 = add_key$user(0x0, &(0x7f0000000b00)={'syz', 0x1}, &(0x7f0000000b40)="d03e559f6cdb5f783badd470585c7f2d19409e20a0d7aacdd66d035cc3994926d1070490ab02ba7d0fca1d5720ad10", 0x2f, 0xfffffffffffffffe) keyctl$reject(0x13, r7, 0x1, 0x201, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f00000001c0)={0x1, 'erspan0\x00', 0xfffffffffffffffe}, 0x18) read(0xffffffffffffffff, &(0x7f0000000280)=""/211, 0xd3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r8, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 22:34:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 538.870696] binder: undelivered TRANSACTION_ERROR: 29189 22:34:10 executing program 2: pipe(&(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) r4 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r7 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r7) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r4, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) fchown(r3, 0xee01, r6) write(r1, &(0x7f00000001c0), 0xfffffef3) read(0xffffffffffffffff, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000180)=""/105) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000001780)=""/109) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r8) r9 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r9, 0x4, 0x6100) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000300)=0x20000000) fcntl$setsig(r8, 0xa, 0x25) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r9, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r10, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 22:34:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) fchdir(r0) unlink(0x0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket(0x10, 0x3, 0xc) write(r3, &(0x7f0000000480)="130000001000ffdde200f49ff60f050000230a", 0x13) connect(r3, &(0x7f0000000000)=@can, 0x80) close(r2) r4 = socket(0x10, 0x3, 0xc) write(r4, &(0x7f0000000480)="130000001000ffdde200f49ff60f050000230a", 0x13) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./bus\x00', 0x6, 0x3) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200002) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000140)=0x8) r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x8000fffffffe) [ 538.972832] binder: BINDER_SET_CONTEXT_MGR already set [ 539.004451] binder: 24002:24004 ioctl 40046207 0 returned -16 22:34:10 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x2c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/213, 0xd5}], 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="d563167778a0"], 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@empty, @in6}}, {{}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000200)={{0x2, 0x4e22, @empty}, {0x6, @local}, 0x2, {0x2, 0x4e22, @remote}, 'bond_slave_0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0xc8edf51a4009cf5, &(0x7f00000004c0)={0x4, &(0x7f00000002c0)=[{0x8, 0x1, 0xfc}, {0x2, 0x0, 0x3, 0x1}, {0x2, 0x3, 0x3f, 0x8}, {0x2, 0x20, 0x0, 0x8}]}) write(r5, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "8259cbf2d26835cc", "160238bdc18ea4080c59ff46c2f58c6b", "205ca617", "3ea816addb36eecb"}, 0x28) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchmod(r6, 0x4) [ 539.048175] binder_alloc: 22919: binder_alloc_buf, no vma [ 539.087445] binder: 24002:24004 transaction failed 29189/-3, size 16384-0 line 3137 [ 539.117216] binder: undelivered TRANSACTION_ERROR: 29189 [ 539.122761] binder: BINDER_SET_CONTEXT_MGR already set [ 539.126912] audit: type=1400 audit(1573857250.210:66): avc: denied { dyntransition } for pid=24015 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c102 tclass=process permissive=1 [ 539.151829] audit: type=1400 audit(1573857250.210:67): avc: denied { connect } for pid=24012 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 539.265777] binder: 24002:24009 ioctl 40046207 0 returned -16 [ 539.266612] binder_alloc: 22919: binder_alloc_buf, no vma [ 539.266675] binder: 24002:24019 transaction failed 29189/-3, size 16384-0 line 3137 [ 539.266844] binder: undelivered TRANSACTION_ERROR: 29189 22:34:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11634848fa000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) 22:34:10 executing program 5: socket$inet6(0x10, 0x100000002, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000200)={0x0, 0x2, 0x10001, 0xffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x5) [ 539.429356] binder: BINDER_SET_CONTEXT_MGR already set [ 539.436290] binder: 24029:24032 ioctl 40046207 0 returned -16 [ 539.443205] binder: 24029:24032 unknown command 1212703505 [ 539.449094] binder: 24029:24032 ioctl c0306201 20000600 returned -22 [ 539.458145] binder: BINDER_SET_CONTEXT_MGR already set [ 539.468893] binder: 24029:24033 ioctl 40046207 0 returned -16 22:34:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r3, &(0x7f00000000c0)="8d32845948d6d186c5e0ed6b354d6f4cdfdf6f236df7715bde331cdb46b57e7d04565c3924928fef0d6220ad05efc778c8fa1aaac40d65d45f89c236ca7fe307c67ea6d77c5b6ea6bbaa56bba7ef2b376872eeb8cdc72ef0cd71eac9efa802e3429e4feda7d824e8f106a728ebc5369755a28cd09eb46876bf4b6de78133b2adc1bcda78a2b8e786014f56054f460787c6a0574774472a4e488dada0f45963d512af844b", 0xa4, 0x1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x0, 0x1, 0x0, 0x3, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x12}, 0x2}}}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 539.475585] binder: 24029:24033 unknown command 1212703505 [ 539.481675] binder: 24029:24033 ioctl c0306201 20000600 returned -22 22:34:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x102}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth0_to_team\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r5, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r4, r5, 0x0, 0x20020102000007) fdatasync(r4) dup2(r1, r0) [ 539.558804] binder: BINDER_SET_CONTEXT_MGR already set [ 539.566540] binder: 24036:24037 ioctl 40046207 0 returned -16 [ 539.636367] binder_alloc: 22919: binder_alloc_buf, no vma [ 539.654751] binder: 24036:24040 transaction failed 29189/-3, size 16384-0 line 3137 22:34:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050096e8668b100000fcffff6bcf00"], 0x0, 0x0, 0x0}) [ 539.792883] binder: undelivered TRANSACTION_ERROR: 29189 [ 539.794611] binder: BINDER_SET_CONTEXT_MGR already set [ 539.794619] binder: 24036:24040 ioctl 40046207 0 returned -16 22:34:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000500)=""/70) fchdir(r0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) write$P9_RFLUSH(r4, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) write$P9_RREADDIR(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="7a000000200800000067090000000000000000080000000200000000000000000000000700004200000000df843c55104331c8f73572bd49039d71de8590f277292ee786e5814654b1d85a05002e2f627573080040000002000000000000000400000000000000070000040300000004000000000000000001001065b4772c6bb15e00000000000005002e2f627573000055103fbb2300354a73124d6c945507e5a90a0af85d445b342309ff0254c0aca663f10fee521e34250638434f6ab3c3a82a0656bf487c13a38c4759f0c43f"], 0xcf) read(r0, &(0x7f0000000280)=""/124, 0x7c) fsync(r4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00') getdents64(r5, &(0x7f0000000040)=""/235, 0xeb) getdents(r5, &(0x7f0000000ea9)=""/407, 0x197) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000440)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000000090032000000391c8eac47cbab34bbddc541429310f800"/38], 0x1}}, 0x20000000) ioctl$PIO_FONT(r0, 0x4b61, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socket(0x8, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000080)) r7 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x151000) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) r9 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r9, 0x4c00, 0xffffffffffffffff) r10 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r11 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r11, 0x4c00, r10) r12 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r13 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r13, 0x4c00, r12) r14 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r15 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r15, 0x4c00, r14) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYPTR64=&(0x7f0000000900)=ANY=[@ANYBLOB="54726f637b3412d7a31ac5a331bb1e21bacaaaeb139ae44ef53ecf467782468f957d1788f2ecaaa1dfec", @ANYRES32=r7, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYPTR64, @ANYRES64=r1], @ANYRES64=r9, @ANYRES64, @ANYBLOB="c95415ecd7dd00555ac06cec518171510f64c187861865ac1435dab40434805e34b1cae3ef83a8b0a6"], @ANYRES16, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000740)=ANY=[@ANYRES16=r15, @ANYRES16=0x0, @ANYRESOCT=r6, @ANYBLOB="472d7f3016ee9877dded1415c8dfd45a5e175ade045fe02529a8cfccb5b7ca932318ae8fa43e56d7a54875a1a11d9b68a5ade4056ab62ca453da063cd392c597f0d7535f3e3837c8459994a46a813731aa0bcf7a6437256827f2a75c6164c60d65dac0b60846d1627ee12997f05e16a34aae125daeddb63bd69d9a26d774ca855c5834e9"], @ANYRESDEC, @ANYPTR64, @ANYRESOCT, @ANYBLOB="6774f2652c8c31c501c8ee953f1ecfe49106aed7fd5cf37ea5ad7985de8a0fbaad9e2bb1bc5ff9f5c87a1faad44eeac00cd358275894d194b2185d19ba9207f25e99c237ea6f9917a04894c333256a749a7097ee879e3e3c178d6754910f1f098d5554c554107a1dc19a61b6a1d4c6d84a6050dc15bc8a4a9d0ca73a50395864cea8d2da30a5b88dd0d5e3d677629c045e4073", @ANYRESDEC=r13], 0xfeec) sendfile(r6, r2, 0x0, 0xcd) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000700)={'bcsh0\x00', {0x2, 0x0, @local}}) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x2400, 0x0) [ 539.878597] binder: BINDER_SET_CONTEXT_MGR already set [ 539.885104] binder: 24044:24045 ioctl 40046207 0 returned -16 [ 539.913874] binder_alloc: 22919: binder_alloc_buf, no vma 22:34:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dt/bi\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000040)=""/4, 0xebc3276d6d4b1cd2, 0x100100, &(0x7f0000000100)=@abs, 0x930212) flistxattr(r1, &(0x7f0000000000)=""/26, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r3, 0x0, 0x20020102000007) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) sendfile64(r2, r4, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f00000000c0)=0x4, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r7 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r6, r7, 0x0, 0x20020102000007) ioctl$int_out(r6, 0xfca0, &(0x7f0000000180)) r8 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 539.933261] binder: 24044:24045 transaction failed 29189/-3, size 207-0 line 3137 [ 539.943496] binder: undelivered TRANSACTION_ERROR: 29189 [ 539.946100] binder: BINDER_SET_CONTEXT_MGR already set [ 539.946108] binder: 24044:24049 ioctl 40046207 0 returned -16 [ 539.947193] binder_alloc: 22919: binder_alloc_buf, no vma [ 539.947229] binder: 24044:24049 transaction failed 29189/-3, size 207-0 line 3137 [ 539.968998] audit: type=1400 audit(1573857251.060:68): avc: denied { dyntransition } for pid=24015 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c102 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c102 tclass=process permissive=1 [ 540.051159] binder: undelivered TRANSACTION_ERROR: 29189 22:34:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:11 executing program 3: mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0\x05\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r4 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r4) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="9bcf555c2f7334d4eac5b3f2ff7d015782020000000000", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r1, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) r5 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001040)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000a00), 0x0) r8 = getegid() pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r9, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$TIOCCONS(r9, 0x541d) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r8) setxattr$system_posix_acl(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="0200c106020000000000009a91c28245b800000200e692c33924f559a27432235569ae93ce00"/52, @ANYRES32=0x0, @ANYBLOB="0200", @ANYRESOCT=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02000600", @ANYRES32=r6, @ANYBLOB="040004000000000008000200", @ANYRESOCT, @ANYBLOB="08000000d988d57e9d642300018440ae2105000000000000009f31a98055e02d53dc73f2b09544c8d2efea4c59b94731f0fe8ba3e1bb0ff63de5e87900bb7b4df41b07953faa6e120ce8ecd7c1ead354ae07f4e67d293e663c66090c332fbd714f9e63956fe85439a76d87a0c888deba0904008913e2b0cbc2ff73aafcc08506d9abfc2b8eb93d2aec5a39b5146972c6cd724cccddc651eac8a31a979ab403c0cab155d3b975cdd419808a56e10915171fd407e503ebee9e621727eb9d98517d", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="10000100000000002000020000000000"], 0x14, 0x1) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={r0, r2, r7}, 0xc) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r10, &(0x7f0000001700)=ANY=[@ANYBLOB="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"/526], 0x12e) readv(r10, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x21c}, {&(0x7f0000000040)=""/235, 0xb7}], 0x2) write$UHID_DESTROY(r10, &(0x7f0000000280), 0xfed0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1) 22:34:11 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x2fc4e27b) fadvise64(r1, 0x0, 0x8, 0x2) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='.\x00', 0xfe) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x42100, 0x2) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000300)) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000000)=0x4, 0x4) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0x14) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r7, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r7, 0x80585414, &(0x7f0000000380)=""/67) r8 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000040)=""/44) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000100)={0x0, r8, 0x8105, 0xff, 0x6, 0x40}) sendfile(r5, r5, &(0x7f00000001c0), 0xa198) [ 540.367726] hid-generic 0000:0000:0000.000F: ignoring exceeding usage max [ 540.427951] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on sz1 22:34:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = getpid() wait4(r1, 0x0, 0x0, 0x0) sched_setattr(r1, &(0x7f0000000000)={0x30, 0x2, 0x2, 0xfffffffa, 0x4, 0x9, 0x7, 0x4890d5eb}, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000000c0)=0x3) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x57, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 22:34:11 executing program 2: syz_open_dev$mice(&(0x7f0000000080)='\x00\x00\x00\x13\x00\x00\x00b\xae\xe5W\x91L\x1f(\x00', 0x0, 0x2000) r0 = eventfd(0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000002c0)=0x7, 0x4) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r2) r5 = creat(&(0x7f0000000840)='./file1\x00', 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/context\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000080)={0x0, 0x0, 0x100000000000000a}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) write$P9_RFLUSH(r5, &(0x7f0000000180)={0x19d}, 0x1a6db1e6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$TUNSETOWNER(r3, 0x400454cc, r6) getegid() syz_emit_ethernet(0x7a, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaa1b6b0086dd600000f469441100000000000000000000000000000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000000000000000000000000000000000007f36c3273dab3a28d0aed704aaa2d230a74531c3837826d950ef2cd1eb40817c3601293fe2760c0ad8a2a5bcea0689f43fe5858bae8a2dd36d064702df9423"], 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) fsync(r5) pipe(&(0x7f0000000500)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000300)="b3581a73376f8a1af058e36415c299c177cdf01477934bf372cbbf262c0071aacfe62bf4ea637298236dc09504bf6aa7c65024e11bf2ae5d30dee92d8f0c55a497b73bb6db6ac1ba67082592d7840035f81df5d1edea9b8b9f1a3ff308f3a7f00f2a536cc9f71ee61728bf8b7ce220d3d86576f4c6185b520540caddb4b495102e4db0c4895cb44b78e9f345eb067b1b009eb7", 0x93}], 0x1, 0x0) close(r7) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001ac0), &(0x7f0000000100)=0xc) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x800, 0xfc) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmmsg(r8, &(0x7f0000007e00), 0x40000000000025d, 0x0) [ 540.853700] binder: BINDER_SET_CONTEXT_MGR already set [ 540.873813] binder: 24090:24091 ioctl 40046207 0 returned -16 [ 540.893056] binder: 24090:24091 unknown command -93242387 [ 540.909029] binder: 24090:24091 ioctl c0306201 20000600 returned -22 [ 540.934074] binder: BINDER_SET_CONTEXT_MGR already set [ 540.950468] binder: 24090:24093 ioctl 40046207 0 returned -16 22:34:12 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x1cf) sendmmsg$unix(r0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x10ee7e8d) prctl$PR_GET_FPEXC(0xb, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) lstat(0x0, &(0x7f0000000640)) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)) getuid() getresuid(&(0x7f0000000940), 0x0, &(0x7f0000000980)) ioprio_get$uid(0x3, 0xee01) fstat(r1, 0x0) mount$fuseblk(&(0x7f0000000500)='/dev/loop0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='fuseblk\x00', 0x55041aa0a524732a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="59667903b92fc2b4da6ac7f5a91090d570a81941d005da4f6a32cea08c50e23d5c125bce49892d92f62f000000000200000009c6402c55231309a50640169f336eb32c3cf716db90263dd4a865dac088ae51f2ded6f2b01efd339297ae94fabe0ff914e601f25a67be82a386da57ce27943a059b8fd4069cb5b61a7c8f25fca09f1608d60f7e348c97dc50f7581e932311c488207beb6062e68539e8bef3984c6bdf6b1e723c34d5819b3985c973da3c618a0000000000000000d25d99fa27e5d5f90594276f98871f9149fb61c58e3207d4ed7fec30308c71bff3a56eae4b037c37c0c53885f79032f55c56915066"]) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x8, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000300)=0x50) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x1f, 0x0, 0xfffffffffffffffc, 0x7fff, 0x2f2, 0x1000, 0x3ff, 0x3f, 0x9fa3, 0x1, 0xd26f, 0x80}) ioctl$TIOCGPTPEER(r2, 0x5441, 0xe7) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000480)) ftruncate(0xffffffffffffffff, 0x6) fchdir(r1) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x6, 0x40, 0x0, 0x9, 0xffffffff, 0xfffffefe}}, 0x50) epoll_create1(0x80000) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/enforce\x00', 0x200, 0x0) [ 540.967978] binder: 24090:24093 unknown command -93242387 [ 540.982209] binder: 24090:24093 ioctl c0306201 20000600 returned -22 22:34:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) r2 = getuid() creat(&(0x7f0000000040)='./file0\x00', 0x12b) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@remote, 0x4e21, 0x3, 0x4e22, 0x6a, 0x0, 0x20, 0x0, 0x2f, 0x0, r2}, {0x1, 0xffffffffd39a6cfb, 0x5, 0x4, 0x1, 0x0, 0x7fffffff, 0x5}, {0x579, 0xbc, 0x2430853e}, 0x9, 0x6e6bbc, 0x4, 0x0, 0x3, 0x1}, {{@in6=@ipv4={[], [], @multicast1}, 0x4d4, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3501, 0x0, 0x1, 0x4f, 0x4, 0x3, 0x3}}, 0xe8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1100000000ff00000180000000dd6c0000000000000000"], 0x0, 0x0, 0x0}) 22:34:12 executing program 5: r0 = socket$inet(0x10, 0x3, 0x100000009) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="09000000530407031dfffd946fa28300", 0x10}], 0x1}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000005c0)='\x02\x00\f(\xd5Q\v\xc9\xfa\xf1\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) read$FUSE(0xffffffffffffffff, &(0x7f0000000840), 0x1000) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000c01f96)=',', 0x1}], 0x1) r1 = socket(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x10001000a00) r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) ioctl$VT_RELDISP(r2, 0x5605) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) [ 541.072002] binder: BINDER_SET_CONTEXT_MGR already set [ 541.085981] binder: 24101:24104 ioctl 40046207 0 returned -16 [ 541.116462] binder: 24101:24104 unknown command 17 [ 541.146868] binder: 24101:24104 ioctl c0306201 20000600 returned -22 [ 541.199021] binder: BINDER_SET_CONTEXT_MGR already set [ 541.232760] binder: 24101:24104 ioctl 40046207 0 returned -16 22:34:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x160, 0x0, 0x0}) [ 541.412142] binder: BINDER_SET_CONTEXT_MGR already set [ 541.438361] binder: 24118:24119 ioctl 40046207 0 returned -16 [ 541.474034] binder: BINDER_SET_CONTEXT_MGR already set 22:34:12 executing program 4: mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'nr0\x00'}) socketpair(0xa, 0x3, 0xed, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) write(r1, &(0x7f0000000300), 0xffffff7e) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000300)) ioprio_set$uid(0x3, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10) lstat(0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x323022, 0x8) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x208200) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x101000, 0x4) sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe) ftruncate(r4, 0x3bb7) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) fsetxattr$trusted_overlay_nlink(r7, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x3}, 0x28, 0x1) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[], @ANYBLOB="42a5874f35a5b499f131b807f10a0b86797acffce927", @ANYBLOB, @ANYRESDEC=r3, @ANYRES16=r7, @ANYRESOCT=r1], @ANYBLOB="c9df7101a7792c4dab09fdde6c03b356fe351c1d34885b5638d8d10ba6f8c3a2107b4eef278e2567b15395eb31ba9b33ae7c8df8cbe811c12a12ccb391959dac623acf714c32dc3d077d2586a0fc1a1965dccb2bb0ec9cc3f97814b0397de9146651f9a86296f9afd688b19ba8ed4e640a75d202e74edc6389260d01a004218a92b66ee7e200cce41690acebfb4c7b0e2a", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES16=r8], @ANYRESHEX=0x0, @ANYRESOCT=r6]], @ANYRESOCT=r5, @ANYPTR], 0x1f) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 22:34:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000400000000000000000000000050000e0ffffffffffffff00000040"], 0x0, 0x0, 0x0}) [ 541.491160] binder: 24118:24120 ioctl 40046207 0 returned -16 [ 541.598190] binder: BINDER_SET_CONTEXT_MGR already set [ 541.616886] binder: 24123:24125 ioctl 40046207 0 returned -16 [ 541.650327] binder: BINDER_SET_CONTEXT_MGR already set [ 541.673601] binder: 24123:24127 ioctl 40046207 0 returned -16 22:34:13 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:13 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x800, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfffffffffffffecc) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r3, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000000c0)=0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.advise\x00', &(0x7f00000001c0)='./cgroup.net\x00', 0xd, 0x3) syz_open_dev$binderN(0x0, 0x0, 0x0) 22:34:13 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr="ac021c0158eab1caa6e4f4989e3495ca"}, 0x1c) sendfile(r0, 0xffffffffffffffff, 0x0, 0x88001) sendmmsg(r0, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) read(r0, &(0x7f00000004c0)=""/119, 0x77) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xe5e, @loopback, 0x3}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) listen(r1, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0xfffffe23) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x4}, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0xffffffffffffffe3, 0x20000004, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000100)) openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f0300000045000107000000141900040002000700efff0100000a00005d14a4e91ee438d2fd", 0x39}], 0x1) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r6, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000340)={'team0\x00', r5}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r9 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r9, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000340)={'team0\x00', r8}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) getsockname$packet(r10, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r12 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r12, 0x541d) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000964a04eba98c000000fe800000200000003692daa992ee1466f1e748729ce2b781d6305a80189ffdbf948c03272dcc81c0defc364f927c00c6e465484e22f3a60ba7a568a69aad08666b893743cc7a71294e1e6ad2d150b2f7ff55c9e7714b713e4c2bc51a34fb6e931ec2e0ca44d54e0e71f11d1a8fac6470da0fc94524d4353f828db8449e878d58082e11b47ee624bc1ac86d9a17947f7e7f55907edf6e8785ea02d3e795d4aa32f962b1c0c44482c51242cd51a092"], 0xd8}}, 0x0) getsockname$packet(r13, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r15, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000340)={'team0\x00', r14}) r16 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r16, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) getsockname$packet(r16, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r18 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r18, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r18, 0x8933, &(0x7f0000000340)={'team0\x00', r17}) r19 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r19, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) getsockname$packet(r19, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r21, 0x541d) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r22, &(0x7f0000000200)=""/250, 0x50c7e3e3) ioctl$ifreq_SIOCGIFINDEX_team(r22, 0x8933, &(0x7f0000000340)={'team0\x00', r20}) r23 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) getsockname$packet(r23, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r25 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r25, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r25, 0x8933, &(0x7f0000000340)={'team0\x00', r24}) r26 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r26, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c05ce000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) getsockname$packet(r26, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x39e) r28 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCCONS(r28, 0x541d) ioctl$ifreq_SIOCGIFINDEX_team(r28, 0x8933, &(0x7f0000000340)={'team0\x00', r27}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r29, &(0x7f0000000000)=[{&(0x7f0000000740)="7a260526aaaafa7456f77fcbc36bd6cc656df12520cc3fd5b919fd567bb2d617d7ae4a6e944a3888dc4e4f6fb487d6de9cd6dfb24dbd0e1b95be0c04633a655488a44a11921f39343f4c331d19de4d94f2aa5e82cebd643a8f1312575f597fd635ea594882e87cda923de5723a", 0x6d}], 0x1, 0x4) ioctl$UI_SET_RELBIT(r29, 0x40045566, 0x5) getpeername$packet(r29, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)={0x71c, r4, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xe0, 0x2, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x2, 0x48, 0xff}, {0x379c, 0xa, 0x0, 0x8000}, {0x13a, 0x9, 0x4, 0x3}, {0x40, 0x0, 0x0, 0x6}, {0x1, 0xff, 0x1f, 0x4}, {0x5, 0x0, 0x0, 0x1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}]}}, {{0x8}, {0x138, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x134, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xffff8000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xf0, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r17}, {0x180, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r24}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffff7}}}]}}, {{0x8, 0x1, r27}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r30}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x71c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(r2, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r31 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r31, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r31, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r32 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r32, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) [ 541.965871] binder: BINDER_SET_CONTEXT_MGR already set [ 541.984523] binder: 24136:24139 ioctl 40046207 0 returned -16 [ 542.020012] binder: BINDER_SET_CONTEXT_MGR already set 22:34:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0, 0x0, 0x0}) [ 542.044467] binder: 24136:24144 ioctl 40046207 0 returned -16 22:34:13 executing program 5: socket$inet(0x10, 0x2, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)) capset(&(0x7f0000000000)={0x20071022}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(r1, 0x0, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$cgroup_int(r4, &(0x7f0000000080)=0x80, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r5) r6 = creat(&(0x7f0000000480)='./bus\x00', 0x0) fcntl$setstatus(r6, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="d56b166778a0"], 0x6) ioctl$PPPIOCGNPMODE(r8, 0xc008744c, &(0x7f00000001c0)={0x8021}) lseek(r6, 0x100000000000000, 0x2) sendfile(r6, r7, &(0x7f0000000040), 0x8000fffffffe) [ 542.157828] binder: BINDER_SET_CONTEXT_MGR already set [ 542.172478] binder: 24152:24154 ioctl 40046207 0 returned -16 [ 542.194617] binder: 24152:24154 unknown command 65535 [ 542.207561] binder: 24152:24154 ioctl c0306201 20000600 returned -22 [ 542.241561] binder: BINDER_SET_CONTEXT_MGR already set 22:34:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x15, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 542.257283] binder: 24152:24159 ioctl 40046207 0 returned -16 [ 542.278151] binder: 24152:24159 unknown command 65535 [ 542.293708] binder: 24152:24159 ioctl c0306201 20000600 returned -22 [ 542.359115] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket [ 542.382161] binder: BINDER_SET_CONTEXT_MGR already set [ 542.397272] binder: 24163:24165 ioctl 40046207 0 returned -16 22:34:13 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) inotify_init() fchdir(r0) r1 = memfd_create(&(0x7f0000000180)='\xe0|\x1e\x13L\xe1\xe7\\X\x0fBQ\xcf\xfe\xe9n\"\xddm\xba\xce\x88\xdd?wR\x81\xb1f\xcaq\xf4]\xa7\x1dx5\x8fM\xca\x8b\xf3\'\xf4P\x0eO\xb9\x17\x80\xaa\xaa=\x16\xae\xaa\x0f\x92)\x18\xf1\xd6\x02#\xac\xbc\xd9\xea\x14\x92\xf5gD\xd8\xdb9N\xcc\xc1`0\xac\xac\xb7\xfc,7\xa9&K\xe6V\xd9\x9c\xa5\x88\xd7\x8f\xb5', 0x0) write(r1, &(0x7f0000000100)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da37", 0x41) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x18802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)='H', 0x1}], 0x1ffffffffffffe09, 0x8fba) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r5, 0x0) sendfile(r5, r2, 0x0, 0x44c1366e) ioctl$int_out(r3, 0x1, &(0x7f0000000000)) 22:34:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x5, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x0, 0x0, 0x0}) [ 542.441938] binder: BINDER_SET_CONTEXT_MGR already set [ 542.470454] binder: 24163:24167 ioctl 40046207 0 returned -16 22:34:13 executing program 0: r0 = socket(0xa, 0x1, 0x7) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r4, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r3, r4, 0x0, 0x20020102000007) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x439051a0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) 22:34:13 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000001a40)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000001a80)=0x10) r4 = socket$inet(0x2, 0x2, 0x0) readv(r4, &(0x7f0000000ac0)=[{&(0x7f0000000080)=""/181, 0xb5}, {&(0x7f0000000140)=""/147, 0x93}, {&(0x7f0000000200)=""/97, 0x61}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000001240)=""/234, 0xea}, {&(0x7f0000001340)=""/158, 0x9e}, {&(0x7f0000000540)=""/183, 0xb7}], 0x7) splice(r4, &(0x7f0000000400)=0x4, r3, &(0x7f0000000440)=0xfffffffffffffffc, 0xf3, 0x4000000008) write(r3, &(0x7f00000001c0), 0xfffffef3) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fchdir(r0) creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'irlan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000500)=r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0xff, 0x1, 0xffffffffffffffff, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 542.545687] binder: 24172:24174 unknown command 65535 [ 542.562941] binder: 24172:24174 ioctl c0306201 20000600 returned -22 22:34:13 executing program 3: r0 = socket(0x10, 0x400000000080803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) r2 = dup2(r1, 0xffffffffffffffff) fchown(r2, 0x0, 0xee01) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x3}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d020b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) [ 542.651283] binder: BINDER_SET_CONTEXT_MGR already set [ 542.668154] binder: 24176:24179 ioctl 40046207 0 returned -16 22:34:13 executing program 3: socket$inet(0x10, 0x2, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/rt_acct\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000580)) capset(&(0x7f0000000000)={0x20071022}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000005c0)}], 0x1, 0x54) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000480), &(0x7f0000000180)=0x4) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x104) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/context\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200005) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000ffffffff) r6 = socket$inet6(0xa, 0x400000000001, 0x0) close(r6) r7 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r8 = open(&(0x7f0000000380)='./file0/file0/file0\x00', 0x141042, 0x0) ftruncate(r8, 0x200005) sendfile(r6, r8, 0x0, 0x8000ffffffff) write$FUSE_NOTIFY_POLL(r8, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x7d, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r9) [ 542.698009] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.3'. 22:34:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:14 executing program 2: r0 = socket$inet6(0xa, 0x100800000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='sched\x00') sendfile(r0, r1, 0x0, 0x4) sendmmsg(r0, &(0x7f0000005780), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$sock_timeval(r2, 0x1, 0x1b, 0x0, 0xffffffffffffffc8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000480)={@loopback, 0x42, 0x2, 0xff, 0x1, 0xc77, 0x80000001}, &(0x7f00000004c0)=0x20) listen(r2, 0x80) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqerot\x00', 0x46e240, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xfffffffffffffec9) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='\x8cz\xd8\xb3\x87\x8fl\xad\x0e]\xd3o~:\xc0\x9f\xc4P\x03', 0x13) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x200000, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000180)='net/snmp6\x00') write(r3, &(0x7f0000000380), 0xfffffffe) recvfrom$inet6(r3, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff}) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 22:34:14 executing program 5: capset(&(0x7f0000002ffa)={0x20080522}, &(0x7f0000002000)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14102e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800012, 0x11, r4, 0x0) ioctl$BLKROTATIONAL(r4, 0x127e, &(0x7f0000000340)) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f00000012c0), &(0x7f0000001300), &(0x7f0000001340)) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000480), &(0x7f00000004c0)=0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0xc0, 0x0) read(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40) syslog(0x3, &(0x7f00000000c0)=""/132, 0x84) r5 = socket$inet6(0x10, 0x80002, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') dup2(r6, r5) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000380)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0x7c774aac) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r8, 0x0) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001d40)={{{@in=@initdev, @in=@dev}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000001e40)=0xe8) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x8000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r10 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r10, &(0x7f0000000240)=[{&(0x7f0000000500)="365e62dcbec24f30b8b9f4791a40eabf93aeffd49eea1f8cfd4a3a3ec44fa2437e147b486cda7856610cafb2830c86b0ab3389837256c15b65a3f2698382b7c6de7e38ac1fa95036a059ba0bdf3f2e9af44e2ed9e2000000000000000000", 0x5e}], 0x1, 0x4081806) sendfile(r9, r10, 0x0, 0x20020102000007) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r11, &(0x7f0000000200)=""/250, 0x50c7e3e3) pipe(&(0x7f0000000300)={0xffffffffffffffff}) read(r12, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(0xffffffffffffffff, r2, &(0x7f0000000180)=0x5, 0x2) 22:34:14 executing program 3: ioprio_set$pid(0x1, 0x0, 0x7fff) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) write(r2, &(0x7f0000000600)="58aa2b868a287d3dc2eab77f1e32abd78fe6e743fc0ec021db8f68b88b5deaad32365bb5b32e69b2900b040ad0af488d3341eeb2cf04845eb594e7fa3f496c65830c5a", 0xffffff8d) read(r0, &(0x7f0000000480)=""/250, 0xfffffffffffffdec) r3 = getpid() wait4(r3, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000280)='net/ip_vs_stats_percpu\x00') r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400204) getsockopt$packet_buf(r7, 0x107, 0x2, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0xfffffffffffffcc9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$packet(0x11, 0x0, 0x300) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) fsetxattr$security_smack_transmute(r8, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x17) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000300)=0x8000006, 0xfffffdee) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0) openat$cgroup_ro(r9, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) getpid() mknod$loop(&(0x7f0000000240)='./file0\x00', 0x400, 0x1) creat(&(0x7f00000007c0)='./file0\x00', 0x10a) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x8, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x0, 0x7}}}, 0xa0) [ 543.228175] input: syz1 as /devices/virtual/input/input70 [ 543.449953] binder: BINDER_SET_CONTEXT_MGR already set [ 543.455908] binder: 24176:24195 ioctl 40046207 0 returned -16 [ 543.475466] input: syz1 as /devices/virtual/input/input71 22:34:14 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000700)='/7\x02\xe8\xa4\xef\x9e\xc8e\xd5n\x89\xeb[<\x18-\x14\x8d8\xbf\xfe\x83\x19\xf3(\xd7y\x14h\xcf(f\x06I:\xa4\xea\xcb\b\x81C\xdd\xcc\x00\x00\x00\x00\xf9\b1h\xbam\xa4x\xb1:\xcf\a\x94Z\x7f\xc8\vy\xf2F\xf4\x9d\n3\xd4\x9a[\xee\xaa\t\xbe\x90\xabU3\xd3[y\xd1d^We\xa9\xcb\x86a\"\xba\xb7\xcd\xcf\x88\x9eqO|\x9f\xcf\r\x86\xf4\x15@\x82w\xa8\\\x8c^a\xbe\x991l\\\x16\xd4\xd53\xdd\x9e\x00\x01:\xac\x14^\xf6\xb6\xb1^\xaa\xfa\x02x\x8aV\x87\xe3\xfb\xef\xd0\xb7({,\xf4\xa2cl`\xdc\xf7\xe2f\xad\xaa>\xd4Ts\x10\xb9V!\x91uGTy\xde$X\xff\xb1\xf3={\xb7\xe65\xb6\x1a\x99q^\xc2\xfc\xb0\xc09\x85\x03\xf1]\xc54;\x8d\x01\xec3#\x8f%5\xef\xfe\xc5\xdb\xd5\xb7\xe0\xdd\xec,rV\x82!\xa0', 0x0) pwritev(r3, &(0x7f0000000240)=[{&(0x7f0000000440)=',', 0x1}], 0x1, 0x4081806) sendfile(r2, r3, 0x0, 0x20020102000007) r4 = dup(r2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000040)) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa4756f}, 0x100) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x6}, 0x4) 22:34:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xa5b32d3b0b3e21ee) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x8, 0x37, 0x6, 0x5, 0x7fc3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1100000000100000e5ff00000000000000000000400000000000000000000000008a8f000000"], 0x0, 0x0, 0x0}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x1000, 0x80}) [ 543.659446] binder: BINDER_SET_CONTEXT_MGR already set [ 543.672158] binder: 24237:24240 ioctl 40046207 0 returned -16 [ 543.689739] binder: 24237:24240 unknown command 17 [ 543.706387] binder: 24237:24240 ioctl c0306201 20000600 returned -22 [ 543.733946] binder: BINDER_SET_CONTEXT_MGR already set [ 543.769840] binder: 24237:24242 ioctl 40046207 0 returned -16 [ 543.781148] binder: 24237:24243 unknown command 17 [ 543.802557] binder: 24237:24243 ioctl c0306201 20000600 returned -22 22:34:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socket$key(0xf, 0x3, 0x2) memfd_create(&(0x7f0000000180)='\xa5vmnet1*\x06\',:-nodev\x00', 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x0, @multicast1, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x4}, 0x2c) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$cont(0x18, r1, 0x0, 0x0) pipe(&(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x6, 0x0, "823a9a262753eed016ff4da5e46f33ccc4eb561995131b00951cc7c11782e635f68ad618b73f22dc04dde380bf2d5fc0893330e2d2dde0f2de1e71d28e2eba1af105118aef3a5cba53290c355fc1ed3d"}, 0xd8) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = getpid() wait4(r2, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) rt_tgsigqueueinfo(r2, r3, 0x12, &(0x7f00000002c0)={0x2, 0x80000000, 0x20}) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000000)=0x7) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000600)={0x26, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000050000000000000000000000000040"], 0x0, 0x0, 0x0}) [ 543.889409] binder: BINDER_SET_CONTEXT_MGR already set [ 543.895253] binder: 24244:24245 ioctl 40046207 0 returned -16 [ 543.905608] binder_alloc: 22919: binder_alloc_buf, no vma [ 543.911738] binder: 24246:24246 transaction failed 29189/-3, size 16384-0 line 3137 [ 543.951096] binder: undelivered TRANSACTION_ERROR: 29189 [ 543.953288] binder: BINDER_SET_CONTEXT_MGR already set [ 543.953295] binder: 24246:24247 ioctl 40046207 0 returned -16 22:34:15 executing program 2: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000800)=ANY=[@ANYBLOB="66696cff7f000000000000000000000000000000000000070000000400000070040000000000407402000074cb08064fe56bea0a0300008c03000004000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="00000001ac1414bb00000000ffffff00aaaaaaaaaa0d000000000000000000000000000000000000ff00fffffffe00000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000ff7e0000000000000000000000000000080001008000090004008076657468305f746f5f626f6e64000000766c616e30000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000800000000000000f00034010000000000000000000000000000000000000000000000000000440049444c4554494d45520000000000000000000000000000000000000000000800000073797a3100000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c2000003000000000000000000000000000000000000000000000000000000000d42ac14141102000000ed91fe77ac1414bbac1414bbff000000ffffffffaaaaaaaaaa0b00000000000000000000000000000000000000000000ff0000000000000000000000aaaaaaaaaabb000000000000000000000000000000000000ffff7e00ff7f00000000000000000000001b0401000800020000000973697430000000000000000000412f7f0ec75c0000007665746830000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000f0001801000000000000000000000000000000000000000000000000010028004e4651554555450000000000000000000000000000000000000000000002ff016754000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e4000000000000000000000000000000000000000000894b06a365bdc981324b80cb198500000000240000000000007f660000000000000000000000000000000000000000000000feffffff75156926331e5563b309e44269d238948330a5132a32c32ba6a369168a7a5ab164fad70efcfc588bd173161266bc69f9c96c271ac976447ee9976cedc9170812eb456edde333b186dab1257193d38a1f18b52604325f5fd037961aef5114c6c594b88bf194b1545778d32c5388b978e6b8b34f59727f16078bf0255e866cb534bc558deb3efe14ffa5171c0ccf1d3ee4c56e47e7ad60aee1d370df05174de5ab82a4b913f7f19558cd234ae08be813e44d641bb89e72f388bd84320809ee9194a51925458587a02d4a70f3ab21115f4893464d7fa1d51f80ca00b30d432fbddc401ae713efc43c345feffcb395b8a6ea4c0a88b9c83952970828ac7802d7a9b421c5497575de42f8f9a8c7fe9e3d0f42a8089cfc40046cc94a4f750f48087644e838d6730b66098c92bc"], 0x4bc) write$FUSE_LSEEK(r0, &(0x7f00000001c0)={0x18}, 0x18) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0xa) r2 = open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x8000ffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) listen(r3, 0x5) 22:34:15 executing program 3: ioprio_set$pid(0x1, 0x0, 0x7fff) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) write(r2, &(0x7f0000000600)="58aa2b868a287d3dc2eab77f1e32abd78fe6e743fc0ec021db8f68b88b5deaad32365bb5b32e69b2900b040ad0af488d3341eeb2cf04845eb594e7fa3f496c65830c5a", 0xffffff8d) read(r0, &(0x7f0000000480)=""/250, 0xfffffffffffffdec) r3 = getpid() wait4(r3, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000280)='net/ip_vs_stats_percpu\x00') r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400204) getsockopt$packet_buf(r7, 0x107, 0x2, &(0x7f0000000040)=""/8, &(0x7f0000000080)=0xfffffffffffffcc9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7e0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$packet(0x11, 0x0, 0x300) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r8, 0x5502) fsetxattr$security_smack_transmute(r8, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000003c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x17) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000300)=0x8000006, 0xfffffdee) r9 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x10000, 0x0) openat$cgroup_ro(r9, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0) getpid() mknod$loop(&(0x7f0000000240)='./file0\x00', 0x400, 0x1) creat(&(0x7f00000007c0)='./file0\x00', 0x10a) unlink(&(0x7f0000000000)='./file0\x00') sendto$inet(r4, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000140)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x8, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc18f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x0, 0x7}}}, 0xa0) 22:34:15 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r3, &(0x7f0000001080)=@un=@abs={0x1}, 0x80) bind(r3, &(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x2, 0x3, {0xa, 0x4e23, 0x2, @loopback, 0x8}}}, 0x80) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x7, 0x396) r4 = socket$inet6(0xa, 0x400000000001, 0x0) getrlimit(0x2, &(0x7f0000000240)) r5 = dup(r4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000500), &(0x7f0000000540)=0x14) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x45}}, 0x1) ioctl$FS_IOC_SETFLAGS(r5, 0x40046602, &(0x7f0000000640)=0x1) r7 = inotify_init() lseek(r7, 0x7, 0x4) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x0) r8 = socket$inet6(0xa, 0x1200000002, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x581, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0xfd73) recvmsg(r8, &(0x7f00000000c0)={0x0, 0xfffffffffffffe14, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0) getsockname(r9, &(0x7f00000001c0)=@rc, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r10, 0x6, 0x18, &(0x7f0000000100)=0xffffffff80000001, 0x4) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @timestamp], 0x3) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7ff) setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000600)={@empty}, 0x14) ftruncate(r11, 0x2007fff) sendfile(r5, r11, 0x0, 0x8000fffffffe) [ 544.246959] input: syz1 as /devices/virtual/input/input76 [ 544.422658] input: syz1 as /devices/virtual/input/input77 22:34:15 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="a90ead7b2f94f3d92d799e9c976fe0f9325b465dcf6919f9c700d996d90acc8c08e94b9f88913da34c83dd36ae018a9dd2b89198f4bd5cc9407851ffc7765980d5ace160bb2e0a4ad54faea164adbff2c2cc99976a63ef2171bb4a7ef9faffe12e2cac939549837e30070df320d154d430e606c5c98c8e93896b6028fa79f5787566fa30e9dff4f303e59c7d7afb1f49a3a044b33737583e1619a6f23876ca205a8b986b24e0632bcb56b6ce751d18e261f4a3256f2293b070e4a7c1c2083d60c56890ac487804e9f60b2136660234246b95bd1d881ff0df30e1b400"/241, 0xfffffffffffffeab) creat(0x0, 0x0) read(r0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x2) fchdir(r2) r3 = creat(&(0x7f0000000540)='./bus\x00', 0x1) syz_genetlink_get_family_id$tipc2(0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0xffffffff, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x69eed86a}) ioprio_set$pid(0x7, 0x0, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x46800) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) 22:34:15 executing program 5: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f00000000c0)=0x7fffffff, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x40001002}, 0xc) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) write$P9_RMKNOD(r2, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x40, 0x2, 0x8}}, 0x14) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x3da, 0x1, 0x0, {0x7f}}, 0xfffffffffffffd27) write$selinux_load(r0, &(0x7f00000004c0)=ANY=[@ANYRES64=r1], 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r3) r4 = creat(&(0x7f0000000480)='./bus\x00', 0x1) fcntl$setstatus(r4, 0x4, 0x6100) truncate(&(0x7f00000000c0)='./bus\x00', 0xa00) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r4, 0x0, 0x2) sendfile(r4, r5, 0x0, 0xfffffffffffffffc) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f0000000740)=ANY=[], 0x0, 0x81) sendfile(r4, r5, &(0x7f0000000040), 0x8000fffffffe) io_setup(0x4009, &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d00)='cgroup.controllers\x00', 0x0, 0x0) r6 = socket(0x11, 0x800000003, 0x8) setsockopt$packet_buf(r6, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@local, 0x5b}) gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) 22:34:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:16 executing program 3: r0 = memfd_create(&(0x7f0000000100)='#\'%nodev\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f00000001c0), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='.', 0x0, 0x881000, 0x0) 22:34:16 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x8db9) r3 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000340)=ANY=[@ANYPTR64], 0x8) sendfile(r1, r2, 0x0, 0x8000fffffffe) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x48000) 22:34:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000140), 0x4) 22:34:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:16 executing program 2: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x800000003, 0x0) ftruncate(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(0x0, r2, 0x0, r3, 0x0) listen(r1, 0x2) sendto$inet6(r0, &(0x7f0000000100)="b4", 0xfffffe46, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) shutdown(r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 22:34:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0}) 22:34:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)='M', 0x1}], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) 22:34:17 executing program 3: 22:34:17 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/igmp6\x00') sendfile(r0, r1, 0x0, 0x80000001) 22:34:17 executing program 4: clone(0x41f3, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$poke(0x4, r1, &(0x7f0000000000), 0x0) 22:34:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 22:34:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/snmp\x00') read$FUSE(r0, 0x0, 0x0) 22:34:18 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000200)='./control\x00', 0x0) chmod(&(0x7f00000000c0)='./control\x00', 0x9c32f69e6caa24eb) open(&(0x7f0000000240)='./control\x00', 0xc40beb2474dfd22a, 0xf6ffffff) 22:34:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x1000000000002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000140), 0xfe32) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x2f) fcntl$setstatus(r0, 0x4, 0x42803) 22:34:18 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1405bb000000000000000000000d00030005000000000002000000e00000010000000000000000b0cbb9c0814c269aaf5972e92605d01ce86893dca70a486bf332259c253d46b9e9a11d062868e3c3696ce69e5d183fdd32d10fba6a469549ef36deff6535934bd9d2754ea44a05005e002b158eee6b7349411bcd6e6bf05ff5a5270f3a912deb94806631ad7455094542c131"], 0x80}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 546.896010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27680 sclass=netlink_route_socket [ 546.917632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27680 sclass=netlink_route_socket 22:34:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/snmp\x00') read$FUSE(r0, 0x0, 0x0) 22:34:18 executing program 5: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) timer_create(0x9, &(0x7f0000000280)={0x0, 0xc, 0x0, @thr={0x0, &(0x7f0000000240)}}, &(0x7f0000000300)) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) add_key(0x0, 0x0, &(0x7f0000002040)='\t', 0x1, 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x54c2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./bus\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x2}, {0x0, 0x9}]}, 0x14, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8cb38f9755a659bd, 0x400, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 546.976651] ------------[ cut here ]------------ [ 546.982248] binder: BINDER_SET_CONTEXT_MGR already set [ 546.993363] WARNING: CPU: 0 PID: 24344 at mm/gup.c:388 __get_user_pages+0xae7/0xfd0() [ 547.011994] binder: 24343:24350 ioctl 40046207 0 returned -16 [ 547.053586] Kernel panic - not syncing: panic_on_warn set ... [ 547.053586] [ 547.060978] CPU: 0 PID: 24344 Comm: syz-executor.4 Not tainted 4.4.174+ #17 [ 547.068068] 0000000000000000[ 547.068075] binder: BINDER_SET_CONTEXT_MGR already set [ 547.068082] binder: 24343:24362 ioctl 40046207 0 returned -16 [ 547.082120] 04f8bdf99688af92 ffff8800a40d78b8 ffffffff81aad1a1 [ 547.088864] 0000000000000000 ffffffff82835ee0 ffffffff82892ea0 0000000000000184 [ 547.096917] ffffffff8142cb27 ffff8800a40d7998 ffffffff813a48c2 0000000041b58ab3 [ 547.104993] Call Trace: [ 547.107582] [] dump_stack+0xc1/0x120 [ 547.112941] [] ? __get_user_pages+0xae7/0xfd0 [ 547.119083] [] panic+0x1b9/0x37b [ 547.124110] [] ? add_taint.cold+0x16/0x16 [ 547.129917] [] ? futex_wait_queue_me+0x3c3/0x5a0 [ 547.136313] [] ? warn_slowpath_common.cold+0x5/0x20 [ 547.142974] [] warn_slowpath_common.cold+0x20/0x20 [ 547.149550] [] warn_slowpath_null+0x2a/0x30 [ 547.155515] [] __get_user_pages+0xae7/0xfd0 [ 547.161484] [] ? futex_wait_setup+0x350/0x350 [ 547.167621] [] ? follow_page_mask+0x10d0/0x10d0 [ 547.173938] [] ? __access_remote_vm+0xc9/0x3c0 [ 547.180275] [] get_user_pages+0x6d/0x90 [ 547.185871] [] __access_remote_vm+0x1e3/0x3c0 [ 547.191990] [] ? do_page_mkwrite+0x360/0x360 [ 547.198024] [] ? get_task_mm+0x9c/0xc0 [ 547.203536] [] ? _raw_spin_unlock+0x2d/0x50 [ 547.209493] [] access_process_vm+0x66/0x90 [ 547.215357] [] compat_ptrace_request+0x322/0x430 [ 547.221740] [] ? generic_ptrace_pokedata+0xc0/0xc0 [ 547.228297] [] ? _raw_spin_unlock_irqrestore+0x5a/0x70 [ 547.235199] [] ? trace_hardirqs_on_caller+0x385/0x5a0 [ 547.242012] [] ? _raw_spin_unlock_irqrestore+0x45/0x70 [ 547.248911] [] ? wait_task_inactive+0x3a9/0x890 [ 547.255206] [] ? __might_fault+0x95/0x1d0 [ 547.260984] [] compat_arch_ptrace+0x7f/0x610 [ 547.267067] [] ? arch_ptrace+0x970/0x970 [ 547.272753] [] compat_SyS_ptrace+0x109/0x180 [ 547.278787] [] ? compat_ptrace_request+0x430/0x430 [ 547.285342] [] do_fast_syscall_32+0x32d/0xa90 [ 547.291588] [] sysenter_flags_fixed+0xd/0x1a [ 547.298144] Kernel Offset: disabled [ 547.301850] Rebooting in 86400 seconds..